Lit
Lit (formerly LitElement) is an open-source library by Google for building fast, lightweight Web Components. It is a developer tool used to create reusable UI components, not a data processor or tracking service. GDPR obligations arise entirely from the application built with Lit and the data it processes, not from the library itself.
What does Lit do?
What is Lit (LitElement)?
Lit is an open-source library by Google for building fast, lightweight Web Components using standard browser APIs. Originally released as LitElement and Lit-html, the project was unified under the Lit brand. It provides a simple base class for defining custom HTML elements with reactive properties, declarative templates, and scoped styles. Lit is used by developers to create reusable UI components that work with any web framework or without a framework at all. It is not itself a data processor.
How does GDPR apply to Lit?
GDPR obligations arise from the application using Lit components, not from Lit itself. If a Lit component renders personal data, submits a form collecting personal data, or triggers an API call sending personal data, the GDPR obligations lie with the application developer. Lit components are UI building blocks: they are as privacy-neutral as HTML elements themselves.
CDN loading considerations
Lit is available via unpkg.com and other public CDNs. Loading Lit from a CDN causes the CDN to log visitor IP addresses. For GDPR compliance, include Lit in your application bundle (via npm) and serve it from your own infrastructure rather than loading from public CDNs.
Practical compliance steps
Include Lit in your application bundle via npm rather than loading from public CDNs. Apply GDPR compliance measures at the application level. Implement cookie consent management in the overall application. Describe data processed within Lit-built components in your privacy policy.
Lit and the GDPR
- Legal basis
- Lit is a library, not a data processor. GDPR obligations arise from the application built with it.
- Risk level
- low
- Applicable regulations
- GDPR compliance is the responsibility of the application developer
Impact assessment (DPIA)
A DPIA is not required for Lit itself. It may be required for specific applications built with Lit that process large-scale personal data, perform automated decision-making, or handle special category data.
Sample text for your banner
This application uses Lit Web Components. Data collection and processing within this application are described in our privacy policy.
What Lit sets and contacts
- Tracking method
- Open-source Web Components library, no client-side tracking by default
- Server location
- Self-hosted (deployer infrastructure)
- Cookieless mode available
- Yes
Cookies set (1)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| lit_session | session | Session | Optional session state managed by Lit component applications, set by application developer, not by Lit itself |
Third-party domains contacted (2)
lit.devunpkg.com
Frequently asked questions about Lit
Can't find your question? Write to us, we answer fast.
Is Lit subject to GDPR?
No. Lit is an open-source library for building Web Components. GDPR applies to the application using Lit components and the personal data it processes, not to the library itself.
Does Lit set cookies?
No. Lit does not set any cookies. It is a UI component library that manages state entirely within the browser's component lifecycle.
Does loading Lit from a CDN create GDPR issues?
Potentially yes. Public CDNs like unpkg.com log visitor IP addresses. For GDPR compliance, include Lit in your application bundle via npm and serve it from your own infrastructure.
Does Lit transfer data outside the EU?
Lit itself does not transfer data. Transfer obligations depend on where the application is hosted and which APIs or services the Lit components connect to.
Do I need a DPIA for applications using Lit?
Not for Lit itself. DPIAs may be required for applications using Lit that process personal data at large scale, perform automated decision-making, or handle special category data.
How do I make my Lit application GDPR compliant?
Bundle Lit via npm. Implement cookie consent at the application level. Apply data minimisation in components rendering personal data. Build data subject rights into the application. Sign DPAs with backend services the components connect to.
Is Lit actively maintained?
Yes. Lit is actively maintained by Google and the open-source community. It is the official successor to LitElement and Polymer and is recommended by Google for building Web Components. It receives regular updates and is widely used in production.
Does Lit need to appear in my privacy policy?
No, the library itself does not need to be disclosed. The data processing within your application's Lit-based components should be described in your privacy policy to the extent it involves personal data.
Keen-Slider
Keen-Slider is an image management and optimization solution that helps websites deliver high-quality visual content with optimal performance. It provides automatic compression, format conversion, and responsive delivery for fast page loads. Keen-Slider supports lazy loading, CDN distribution, and gallery creation, enabling businesses to showcase visuals beautifully while maintaining excellent Core Web Vitals scores and search engine rankings.
PrimeVue
PrimeVue is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. PrimeVue integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, PrimeVue helps organizations maintain robust websites that meet user expectations and technical requirements.
Scala
Scala is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Scala supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Scala ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Twitter typeahead.js
Twitter typeahead.js is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Twitter typeahead.js supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Twitter typeahead.js ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
RSS
RSS is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. RSS is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, RSS offers reliable solutions that scale with organizational needs and evolving web standards.
Clipboard.js
Clipboard.js is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Clipboard.js supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Clipboard.js ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.