Google Charts
Google Charts is a free JavaScript library for interactive charts that must be loaded from Google servers in the United States, sending each visitor IP address to Google.
What does Google Charts do?
What it is
Google Charts is a free JavaScript library from Google that renders interactive charts and graphs, from simple pie charts to complex dashboards. The library loader is served from Google domains, and Google terms require it to be loaded from Google rather than self hosted, so any page using it contacts Google directly.
Cookies and data it collects
Google Charts does not itself rely on cookies to draw charts, but loading the library from Google sends the visitor IP address, the referring page and browser details to Google in the United States. Depending on context, Google may associate the request with its own cookies if the visitor is signed in to Google services.
GDPR and ePrivacy implications
Because the visitor IP address, which is personal data, is sent to a United States company, the GDPR applies even though the library is mostly cookieless. As Google requires loading from its servers, the exposure cannot be removed by self hosting, which makes transparency and consent more important.
Consent requirements
The cautious approach, consistent with how regulators treat Google Fonts, is to load Google Charts only after consent or to assess and document a legitimate interest. Where charts are essential to a page, a click to load or a server side rendered image can reduce the pre consent exposure.
Data transfers
The data goes to Google LLC in the United States. Google self certifies under the EU US Data Privacy Framework, and Standard Contractual Clauses are also available, so confirm the current mechanism and reference it in your privacy notice.
Practical compliance steps
Decide whether the chart is essential, gate non essential charts behind consent, and disclose the use of Google Charts and the US transfer in your privacy policy. Consider rendering static chart images server side, or using a self hostable charting library, for pages where you want no external call.
Google Charts and the GDPR
Google Charts is classified as “Unclassified”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent under Article 6(1)(a) GDPR, or a documented legitimate interest for charts essential to a page
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive
Impact assessment (DPIA)
A DPIA is seldom required for decorative charts, but consider one if charts display or process personal data at scale. Focus on the unavoidable United States transfer and whether a self hostable charting library would reduce risk.
Sample text for your banner
We use Google Charts to display interactive charts. The library loads from Google in the United States and receives your IP address. Charts load only after you accept.
What Google Charts sets and contacts
- Tracking method
- JavaScript charting library loaded from Google servers
- Server location
- United States (Google LLC)
- Cookieless mode available
- Yes
- Data transferred outside the EU
- Google Charts is loaded from Google domains in the United States, so each page that uses it sends the visitor IP address to Google. Transfers rely on the EU US Data Privacy Framework, under which Google is certified, or Standard Contractual Clauses.
Third-party domains contacted (3)
gstatic.comgoogle.comgoogleapis.com
Frequently asked questions about Google Charts
Can't find your question? Write to us, we answer fast.
Does Google Charts set cookies?
The charting library itself does not need cookies, but loading it from Google can attach Google cookies for signed in users and always sends the visitor IP address to Google.
Do I need consent for Google Charts?
Because loading the library exposes the visitor IP to a United States company, the cautious approach is to obtain consent or document a legitimate interest before non essential charts load.
What is the legal basis for Google Charts?
You can rely on consent under Article 6(1)(a) of the GDPR, or a documented legitimate interest under Article 6(1)(f) for charts essential to a page. The unavoidable transfer should weigh into that assessment.
Does Google Charts transfer data to the United States?
Yes, the library loads from Google in the United States, so the visitor IP is transferred there. Google self certifies under the EU US Data Privacy Framework and offers Standard Contractual Clauses.
Do I need a DPIA for Google Charts?
Decorative charts seldom need a DPIA, but charts that present or process personal data at scale may. Consider the United States transfer in your assessment.
How do I implement Google Charts compliantly?
Gate non essential charts behind consent, disclose the use of Google Charts and the US transfer, and consider server side rendered images or a self hostable library where you want no external call.
Are there alternatives to Google Charts?
Self hostable libraries such as Chart.js, ApexCharts or D3 keep all data on your own infrastructure and avoid the Google transfer, while offering similar charting features.
How do I update my cookie policy for Google Charts?
Note that Google Charts loads from Google and sends the visitor IP to the United States, list any Google cookies that may be set, and state that non essential charts load only after consent.
Alpine.js
Alpine.js is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Alpine.js supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Alpine.js ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Zola
Zola is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Zola supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Zola ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Unity
Unity is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Unity integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Unity helps organizations maintain robust websites that meet user expectations and technical requirements.
ZURB Foundation
ZURB Foundation is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. ZURB Foundation integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, ZURB Foundation helps organizations maintain robust websites that meet user expectations and.
WeBlocks
WeBlocks is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. WeBlocks supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, WeBlocks ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Bool TypeScript
Bool TypeScript is a JavaScript library that simplifies web development by providing utility functions, DOM manipulation tools, and cross-browser compatibility. It offers a clean, chainable API that reduces code complexity and development time. Bool TypeScript supports AJAX requests, event handling, and animation effects. With extensive documentation and a vast plugin ecosystem, Bool TypeScript remains a reliable choice for developers building interactive, performant web experiences.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.