> Lit, Google's open source Web Components library, and the GDPR: why the library itself collects nothing and what remains the app developer's responsibility.
>
> Canonical: https://www.flowconsent.com/en/services/framework/lit-element

Frameworks

# Lit

Unclassified · [Official website](https://lit.dev)

Lit (formerly LitElement) is an open-source library by Google for building fast, lightweight Web Components. It is a developer tool used to create reusable UI components, not a data processor or tracking service. GDPR obligations arise entirely from the application built with Lit and the data it processes, not from the library itself.

[Block Lit until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=framework) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Frameworks](https://www.flowconsent.com/en/services/framework)

- Consent

  Unclassified

- Prior consent

  Not required

- Documented cookies

  1

- Third-party domains

  2

- Servers

  Self-hosted (deployer infrastructure)

Overview

## What does Lit do?

## **What is Lit (LitElement)?**

Lit is an open-source library by Google for building fast, lightweight Web Components using standard browser APIs. Originally released as LitElement and Lit-html, the project was unified under the Lit brand. It provides a simple base class for defining custom HTML elements with reactive properties, declarative templates, and scoped styles. Lit is used by developers to create reusable UI components that work with any web framework or without a framework at all. It is not itself a data processor.

## **How does GDPR apply to Lit?**

GDPR obligations arise from the application using Lit components, not from Lit itself. If a Lit component renders personal data, submits a form collecting personal data, or triggers an API call sending personal data, the GDPR obligations lie with the application developer. Lit components are UI building blocks: they are as privacy-neutral as HTML elements themselves.

## **CDN loading considerations**

Lit is available via unpkg.com and other public CDNs. Loading Lit from a CDN causes the CDN to log visitor IP addresses. For GDPR compliance, include Lit in your application bundle (via npm) and serve it from your own infrastructure rather than loading from public CDNs.

## **Practical compliance steps**

Include Lit in your application bundle via npm rather than loading from public CDNs. Apply GDPR compliance measures at the application level. Implement cookie consent management in the overall application. Describe data processed within Lit-built components in your privacy policy.

Compliance

## Lit and the GDPR

- Legal basis

  Lit is a library, not a data processor. GDPR obligations arise from the application built with it.

- Risk level

  low

- Applicable regulations

  GDPR compliance is the responsibility of the application developer

### Impact assessment (DPIA)

A DPIA is not required for Lit itself. It may be required for specific applications built with Lit that process large-scale personal data, perform automated decision-making, or handle special category data.

### Sample text for your banner

> This application uses Lit Web Components. Data collection and processing within this application are described in our privacy policy.

Cookies and trackers

## What Lit sets and contacts

- Tracking method

  Open-source Web Components library, no client-side tracking by default

- Server location

  Self-hosted (deployer infrastructure)

- Cookieless mode available

  Yes

### Cookies set (1)

| Name         | Type    | Duration | Purpose                                                                                                       |
| ------------ | ------- | -------- | ------------------------------------------------------------------------------------------------------------- |
| lit\_session | session | Session  | Optional session state managed by Lit component applications, set by application developer, not by Lit itself |

### Third-party domains contacted (2)

- `lit.dev`
- `unpkg.com`

Questions

## Frequently asked questions about Lit

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### Is Lit subject to GDPR?

No. Lit is an open-source library for building Web Components. GDPR applies to the application using Lit components and the personal data it processes, not to the library itself.

### Does Lit set cookies?

No. Lit does not set any cookies. It is a UI component library that manages state entirely within the browser's component lifecycle.

### Does loading Lit from a CDN create GDPR issues?

Potentially yes. Public CDNs like unpkg.com log visitor IP addresses. For GDPR compliance, include Lit in your application bundle via npm and serve it from your own infrastructure.

### Does Lit transfer data outside the EU?

Lit itself does not transfer data. Transfer obligations depend on where the application is hosted and which APIs or services the Lit components connect to.

### Do I need a DPIA for applications using Lit?

Not for Lit itself. DPIAs may be required for applications using Lit that process personal data at large scale, perform automated decision-making, or handle special category data.

### How do I make my Lit application GDPR compliant?

Bundle Lit via npm. Implement cookie consent at the application level. Apply data minimisation in components rendering personal data. Build data subject rights into the application. Sign DPAs with backend services the components connect to.

### Is Lit actively maintained?

Yes. Lit is actively maintained by Google and the open-source community. It is the official successor to LitElement and Polymer and is recommended by Google for building Web Components. It receives regular updates and is widely used in production.

### Does Lit need to appear in my privacy policy?

No, the library itself does not need to be disclosed. The data processing within your application's Lit-based components should be described in your privacy policy to the extent it involves personal data.

Same category

## More services: Frameworks

[See the whole category](https://www.flowconsent.com/en/services/framework)

### [Keen-Slider](https://www.flowconsent.com/en/services/framework/keen-slider)

[Keen-Slider is an image management and optimization solution that helps websites deliver high-quality visual content with optimal performance. It provides automatic compression, format conversion, and responsive delivery for fast page loads. Keen-Slider supports lazy loading, CDN distribution, and gallery creation, enabling businesses to showcase visuals beautifully while maintaining excellent Core Web Vitals scores and search engine rankings.](https://www.flowconsent.com/en/services/framework/keen-slider)

[Frameworks](https://www.flowconsent.com/en/services/framework/keen-slider)

·

### [PrimeVue](https://www.flowconsent.com/en/services/framework/primevue)

[PrimeVue is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. PrimeVue integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, PrimeVue helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/framework/primevue)

[Frameworks](https://www.flowconsent.com/en/services/framework/primevue)

·

### [Scala](https://www.flowconsent.com/en/services/framework/scala)

[Scala is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Scala supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Scala ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/framework/scala)

[Frameworks](https://www.flowconsent.com/en/services/framework/scala)

·

### [Twitter typeahead.js](https://www.flowconsent.com/en/services/framework/twitter-typeahead-js)

[Twitter typeahead.js is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Twitter typeahead.js supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Twitter typeahead.js ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/framework/twitter-typeahead-js)

[Frameworks](https://www.flowconsent.com/en/services/framework/twitter-typeahead-js)

·

### [RSS](https://www.flowconsent.com/en/services/framework/rss)

[RSS is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. RSS is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, RSS offers reliable solutions that scale with organizational needs and evolving web standards.](https://www.flowconsent.com/en/services/framework/rss)

[Frameworks](https://www.flowconsent.com/en/services/framework/rss)

·

### [Clipboard.js](https://www.flowconsent.com/en/services/framework/clipboard-js)

[Clipboard.js is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Clipboard.js supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Clipboard.js ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/framework/clipboard-js)

[Frameworks](https://www.flowconsent.com/en/services/framework/clipboard-js)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)
