> Select2 does not set cookies but loading it from a non-EU CDN may transmit visitor IP. Self-hosting, EU CDN options and ePrivacy compliance.
>
> Canonical: https://www.flowconsent.com/en/services/framework/select2

Frameworks

# Select2

Unclassified · [Official website](https://select2.org/)

Select2 is a popular jQuery plugin that upgrades native select boxes with search, multi-select, tagging, infinite scrolling and AJAX powered remote data. It is widely used on admin panels, configuration screens and forms where a long list of options would otherwise be unmanageable. Select2 does not set any cookies and does not phone home; the only data exchanged is the HTTP request that downloads its JavaScript and CSS, plus the optional AJAX endpoints configured by the operator.

[Block Select2 until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=framework) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Frameworks](https://www.flowconsent.com/en/services/framework)

- Consent

  Unclassified

- Prior consent

  Not required

- Documented cookies

  0

- Third-party domains

  3

- Servers

  Self-hosted (same origin) or loaded from cdnjs.cloudflare.com or cdn.jsdelivr.net global edge networks.

Overview

## What does Select2 do?

## **What Select2 does and how it appears on a website**

Select2 is a jQuery plugin that replaces the native HTML select element with a richer interface. It adds free text search, multi-select, tagging, custom rendering, infinite scrolling for long lists, and AJAX integration to fetch options dynamically. On a website Select2 appears as a small JavaScript file plus a CSS file, loaded after jQuery from the same origin or from a public CDN such as cdnjs.cloudflare.com or cdn.jsdelivr.net.

## **Cookies and data collected**

Select2 does not set cookies, does not write to localStorage and does not collect telemetry. The plugin renders client side and only sends data over the network if the operator wires it to an AJAX backend, in which case the website operator controls every request.

## **GDPR and ePrivacy implications**

Article 5(3) ePrivacy is not triggered because Select2 stores nothing on the user device. As with any third party JavaScript, loading the file from a US CDN transmits the visitor IP, which can require consent under recent European case law. AJAX requests configured by the operator must follow the GDPR principles of purpose limitation and data minimisation.

## **International data transfers**

cdnjs.cloudflare.com is operated by Cloudflare Inc. and cdn.jsdelivr.net by Cloudflare and Fastly Inc. Both providers are US controlled and certified under the EU-US Data Privacy Framework. Self-hosting Select2 on an EU server removes any cross-border transfer.

## **Consent and legal basis**

Self-hosted Select2 needs no specific consent. Public CDN deployments need either opt-in consent before the script loads or a documented legitimate interest assessment with a clear privacy notice.

## **Practical compliance steps**

Install Select2 through npm, bundle the JavaScript and CSS with the application code, ensure jQuery is also self-hosted, document the AJAX endpoints used by Select2 in the privacy notice if they query personal data, and consider modern alternatives such as Choices.js or native combobox patterns for new projects.

Compliance

## Select2 and the GDPR

- Legal basis

  Legitimate interest under Article 6(1)(f) GDPR for self-hosted Select2. CDN deployments may require prior consent or a documented legitimate interest, mirroring the Bonn Regional Court approach to third party font and script loading.

- Risk level

  low

- Applicable regulations

  GDPR, ePrivacy Directive, German TTDSG / TDDDG, EU-US Data Privacy Framework

### Impact assessment (DPIA)

A DPIA is not required for Select2 itself. When the plugin is loaded from a US CDN, document a short transfer impact assessment. When Select2 is used with an AJAX data source that queries personal data (customers, employees), the DPIA must focus on that AJAX backend, not on Select2.

### Sample text for your banner

> This website uses the Select2 plugin to provide searchable dropdown lists. Select2 itself does not set cookies. When the plugin queries data via AJAX, the request is sent to our own server and respects the same authentication and access rules as the rest of the website.

Cookies and trackers

## What Select2 sets and contacts

- Tracking method

  jQuery plugin for searchable, multi-select dropdowns. Loaded as JavaScript and CSS, no cookies set, no remote calls.

- Server location

  Self-hosted (same origin) or loaded from cdnjs.cloudflare.com or cdn.jsdelivr.net global edge networks.

- Cookieless mode available

  Yes

- Data transferred outside the EU

  Select2 is open source under the MIT license. The library transmits no data. When loaded from a public CDN such as cdnjs.cloudflare.com or cdn.jsdelivr.net, the visitor IP is transmitted to a US controlled CDN provider (Cloudflare Inc., Fastly Inc.) that is certified under the EU-US Data Privacy Framework.

### Third-party domains contacted (3)

- `cdnjs.cloudflare.com`
- `cdn.jsdelivr.net`
- `select2.org`

Questions

## Frequently asked questions about Select2

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### Does Select2 set any cookies?

No. Select2 is a client side jQuery plugin and sets no cookies, uses no localStorage and performs no tracking.

### Do I need consent for Select2?

Self-hosted Select2 needs no specific consent. Loading from a US CDN may require consent because the visitor IP is transmitted to a non-EU provider.

### What is the legal basis?

Legitimate interest under Article 6(1)(f) GDPR for self-hosted Select2. AJAX requests use the existing legal basis for the underlying data, typically contract performance or legitimate interest.

### Does Select2 transfer data to the US?

Only when loaded from cdnjs.cloudflare.com or cdn.jsdelivr.net. Self-hosting eliminates the transfer.

### Is a DPIA required?

No. Document a short transfer impact assessment for CDN loading. A DPIA may apply to the AJAX backend if it processes large or sensitive personal data.

### How do I implement Select2 compliantly?

Install via npm, bundle with the application, self-host jQuery, secure the AJAX endpoints with authentication, log only the minimum and document the dropdown sources in the privacy notice when they query personal data.

### Are there alternatives to Select2?

Choices.js (no jQuery dependency), Tom Select, TomSelect for accessibility focused use, Slim Select, and native HTML combobox patterns built with datalist or custom elements.

### How do I update the cookie policy?

Self-hosted Select2 needs no specific entry. For public CDN, mention the CDN provider, the IP transfer on each load and the applicable EU-US Data Privacy Framework or Standard Contractual Clauses basis.

Same category

## More services: Frameworks

[See the whole category](https://www.flowconsent.com/en/services/framework)

### [Rust](https://www.flowconsent.com/en/services/framework/rust)

[Rust is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Rust integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Rust helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/framework/rust)

[Frameworks](https://www.flowconsent.com/en/services/framework/rust)

·

### [AngularDart](https://www.flowconsent.com/en/services/framework/angulardart)

[AngularDart is a JavaScript framework designed for building fast, interactive, and scalable web applications. It provides component-based architecture, reactive data binding, and efficient DOM rendering. AngularDart supports server-side rendering, static site generation, and progressive web apps. With a rich ecosystem of plugins and developer tools, AngularDart accelerates frontend development and delivers exceptional user experiences with optimized performance and SEO-friendly output.](https://www.flowconsent.com/en/services/framework/angulardart)

[Frameworks](https://www.flowconsent.com/en/services/framework/angulardart)

·

### [Go](https://www.flowconsent.com/en/services/framework/go)

[Go is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Go supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Go ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/framework/go)

[Frameworks](https://www.flowconsent.com/en/services/framework/go)

·

### [TDesign](https://www.flowconsent.com/en/services/framework/tdesign)

[TDesign is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. TDesign supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, TDesign ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/framework/tdesign)

[Frameworks](https://www.flowconsent.com/en/services/framework/tdesign)

·

### [Django](https://www.flowconsent.com/en/services/framework/django)

[Django is a backend web framework providing a structured environment for building robust server-side applications and APIs. It offers routing, database management, authentication, and middleware support. Django follows established design patterns and conventions promoting clean, maintainable code. With ORM integration, template engines, and security features, Django accelerates backend development and enables teams to deliver scalable web applications efficiently.](https://www.flowconsent.com/en/services/framework/django)

[Frameworks](https://www.flowconsent.com/en/services/framework/django)

·

### [Vuetify](https://www.flowconsent.com/en/services/framework/vuetify)

[Vuetify is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Vuetify integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Vuetify helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/framework/vuetify)

[Frameworks](https://www.flowconsent.com/en/services/framework/vuetify)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)