Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Google Charts is a free JavaScript library for interactive charts that must be loaded from Google servers in the United States, sending each visitor IP address to Google.
Google Charts is a free JavaScript library from Google that renders interactive charts and graphs, from simple pie charts to complex dashboards. The library loader is served from Google domains, and Google terms require it to be loaded from Google rather than self hosted, so any page using it contacts Google directly.
Google Charts does not itself rely on cookies to draw charts, but loading the library from Google sends the visitor IP address, the referring page and browser details to Google in the United States. Depending on context, Google may associate the request with its own cookies if the visitor is signed in to Google services.
Because the visitor IP address, which is personal data, is sent to a United States company, the GDPR applies even though the library is mostly cookieless. As Google requires loading from its servers, the exposure cannot be removed by self hosting, which makes transparency and consent more important.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
The cautious approach, consistent with how regulators treat Google Fonts, is to load Google Charts only after consent or to assess and document a legitimate interest. Where charts are essential to a page, a click to load or a server side rendered image can reduce the pre consent exposure.
The data goes to Google LLC in the United States. Google self certifies under the EU US Data Privacy Framework, and Standard Contractual Clauses are also available, so confirm the current mechanism and reference it in your privacy notice.
Decide whether the chart is essential, gate non essential charts behind consent, and disclose the use of Google Charts and the US transfer in your privacy policy. Consider rendering static chart images server side, or using a self hostable charting library, for pages where you want no external call.
Websites using Google Charts must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is seldom required for decorative charts, but consider one if charts display or process personal data at scale. Focus on the unavoidable United States transfer and whether a self hostable charting library would reduce risk.
Sample consent text
We use Google Charts to display interactive charts. The library loads from Google in the United States and receives your IP address. Charts load only after you accept.
Third-party domains contacted
gstatic.comgoogle.comgoogleapis.comThis service may collect user data. Ensure GDPR compliance with FlowConsent.
The charting library itself does not need cookies, but loading it from Google can attach Google cookies for signed in users and always sends the visitor IP address to Google.
Because loading the library exposes the visitor IP to a United States company, the cautious approach is to obtain consent or document a legitimate interest before non essential charts load.
You can rely on consent under Article 6(1)(a) of the GDPR, or a documented legitimate interest under Article 6(1)(f) for charts essential to a page. The unavoidable transfer should weigh into that assessment.
Yes, the library loads from Google in the United States, so the visitor IP is transferred there. Google self certifies under the EU US Data Privacy Framework and offers Standard Contractual Clauses.
Decorative charts seldom need a DPIA, but charts that present or process personal data at scale may. Consider the United States transfer in your assessment.
Gate non essential charts behind consent, disclose the use of Google Charts and the US transfer, and consider server side rendered images or a self hostable library where you want no external call.
Self hostable libraries such as Chart.js, ApexCharts or D3 keep all data on your own infrastructure and avoid the Google transfer, while offering similar charting features.
Note that Google Charts loads from Google and sends the visitor IP to the United States, list any Google cookies that may be set, and state that non essential charts load only after consent.