> What Goober does, why this CSS in JS library sets no cookies by default and how to load it in a GDPR friendly way from a CDN or your own server. > > Canonical: https://www.flowconsent.com/en/services/framework/goober Frameworks # Goober Unclassified Goober is a lightweight CSS in JS library (around 1 KB) used by developers to style React, Preact and other front end components at runtime, without dependencies or tracking. [Block Goober until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=framework) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Frameworks](https://www.flowconsent.com/en/services/framework) - Consent Unclassified - Prior consent Not required - Documented cookies 3 - Third-party domains 3 - Servers Client side library, no server Overview ## What does Goober do? ## **What is Goober** Goober is a tiny CSS in JS library, around 1 KB in size, used to style components in modern JavaScript front ends such as React, Preact, Svelte and vanilla applications. It injects styles into the DOM at runtime, supports server side rendering and provides a familiar styled and css API. The library has no analytics, no telemetry and no external dependencies. ## **Data and cookies set by Goober** Goober itself does not set cookies, does not read local storage and does not perform any network call. It only generates style tags inside the document. Any data exchange depends entirely on how the integrator loads the package: bundled in the application, served from a self hosted location, or fetched from a public CDN such as jsDelivr or unpkg. ## **GDPR and ePrivacy implications** Because no information is read from or written to the visitor's terminal, Goober falls outside the scope of Article 5(3) of the ePrivacy Directive. The library does not trigger consent obligations on its own. However, loading Goober from a CDN exposes the visitor IP address to the CDN operator, which is a personal data processing activity governed by the GDPR. ## **Consent requirements** No consent is required to use Goober when the library is bundled with the application or self hosted on the same domain. When the library is fetched from a third party CDN, the legal basis is the legitimate interest of the website operator to deliver static assets. Consent only becomes relevant if the CDN provider sets cookies on its endpoint for other purposes. ## **Data transfers** Goober has no servers and no managed cloud component. The transfer profile depends on the delivery channel. Bundled or self hosted in the EU: no transfer. Fetched from jsDelivr, unpkg or another global CDN: the visitor IP and HTTP metadata may be processed in third countries, which requires a Standard Contractual Clauses framework and a transfer impact assessment. ## **Practical compliance steps** Bundle Goober into your application build whenever possible, or host it from an EU based static asset server. If you rely on a public CDN, document the provider, the country of processing and the safeguards. Mention the library in your privacy policy under the section about technical components, and ensure the integrity hash is pinned to avoid silent updates from the CDN. Compliance ## Goober and the GDPR - Legal basis Legitimate interest of the website operator to render styled content. No personal data is processed by the library itself. - Risk level low - Applicable regulations GDPR, ePrivacy Directive when loaded from a third party CDN ### Impact assessment (DPIA) A DPIA is not required for Goober itself, as the library does not collect personal data. A risk assessment may still be useful if Goober is loaded from a third party CDN that exposes visitor IP addresses outside the EEA. ### Sample text for your banner > This website uses small CSS utilities for styling. They do not set cookies and do not collect personal data. Some assets may be served from a CDN that processes your IP address only to deliver the file. Cookies and trackers ## What Goober sets and contacts - Tracking method Runtime CSS injection in the DOM, no cookies set by default - Server location Client side library, no server - Cookieless mode available Yes ### Cookies set (3) | Name | Type | Duration | Purpose | | ----------------- | ------------ | -------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------- | | none\_by\_default | first\_party | N/A | Goober itself does not set any cookies. This entry is a placeholder confirming the library is cookieless by design. | | cdn\_session | third\_party | Session | Optional session cookie that may be set by the chosen CDN (jsDelivr, unpkg) on its own domain for caching or load balancing, never on your application domain. | | app\_csrf | first\_party | Session | Anti CSRF token set by your application framework (for example Next.js, Remix or Express), unrelated to Goober but commonly visible alongside it. | ### Third-party domains contacted (3) - `cdn.jsdelivr.net` - `unpkg.com` - `registry.npmjs.org` Questions ## Frequently asked questions about Goober Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Does Goober set any cookie on the visitor's browser? No. Goober is a CSS in JS runtime that only generates style tags inside the document. It does not write cookies, does not use local storage and does not perform any background network request. Any cookies you see in the browser come from other components of your application. ### Is consent required to use Goober on a website? Consent is not required for the library itself because no information is stored or accessed on the visitor's device. When Goober is fetched from a third party CDN, the legal basis for the IP transmission is the legitimate interest of the website operator in delivering static assets. ### What is the legal basis for processing related to Goober? No personal data is processed by the library. If Goober is loaded from a CDN, the IP address shared with the CDN provider is processed under Article 6(1)(f) of the GDPR (legitimate interest), provided the documentation describes the recipient and the safeguards put in place. ### Does Goober transfer data outside the European Economic Area? The library itself does not transfer data. Transfers can occur indirectly when Goober is served from a global CDN such as jsDelivr or unpkg, which may process the request from edge nodes located in the United States or other countries. Standard Contractual Clauses cover those transfers. ### Do I need to run a DPIA before integrating Goober? A formal DPIA is not required for Goober. The library does not process personal data, does not profile users and does not perform automated decision making. A lightweight third party risk assessment for the chosen CDN is usually enough. ### How can I integrate Goober in a privacy friendly way? Bundle the library directly into your application or self host it on the same domain as the website. Pin a Subresource Integrity hash, document the dependency in your component inventory, and add a single line to your privacy policy describing that Goober is a styling utility with no tracking. ### What are common alternatives to Goober? Alternatives include Emotion, Styled Components, Stitches, vanilla extract and Tailwind CSS. Goober is chosen mostly for its very small footprint. Each alternative has its own privacy profile, but most CSS in JS libraries also avoid setting cookies. ### How should I describe Goober in the cookie or privacy policy? List Goober in the technical components section of the privacy policy, state that it does not set cookies, mention the delivery channel (bundled, self hosted or CDN), and if a CDN is used, name the provider and the country of processing along with the legal safeguards. Same category ## More services: Frameworks [See the whole category](https://www.flowconsent.com/en/services/framework) ### [Lenis](https://www.flowconsent.com/en/services/framework/lenis) [Lenis is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Lenis is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Lenis offers reliable solutions that scale with organizational needs and evolving web standards.](https://www.flowconsent.com/en/services/framework/lenis) [Frameworks](https://www.flowconsent.com/en/services/framework/lenis) · ### [Lucide Icons](https://www.flowconsent.com/en/services/framework/lucide-icons) [Lucide Icons is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Lucide Icons is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Lucide Icons offers reliable solutions that scale with organizational needs and evolving web standards.](https://www.flowconsent.com/en/services/framework/lucide-icons) [Frameworks](https://www.flowconsent.com/en/services/framework/lucide-icons) · ### [PouchDB](https://www.flowconsent.com/en/services/framework/pouchdb) [PouchDB is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. PouchDB integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, PouchDB helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/framework/pouchdb) [Frameworks](https://www.flowconsent.com/en/services/framework/pouchdb) · ### [jComponent](https://www.flowconsent.com/en/services/framework/jcomponent) [jComponent is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. jComponent integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, jComponent helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/framework/jcomponent) [Frameworks](https://www.flowconsent.com/en/services/framework/jcomponent) · ### [Flowbite](https://www.flowconsent.com/en/services/framework/flowbite) [Flowbite is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Flowbite integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Flowbite helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/framework/flowbite) [Frameworks](https://www.flowconsent.com/en/services/framework/flowbite) · ### [UnoCSS](https://www.flowconsent.com/en/services/framework/unocss) [UnoCSS is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. UnoCSS integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, UnoCSS helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/framework/unocss) [Frameworks](https://www.flowconsent.com/en/services/framework/unocss) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)