Frameworks

ZURB Foundation

UnclassifiedOfficial website

ZURB Foundation is an open source responsive front end framework that provides a CSS grid, components, and JavaScript helpers to build accessible websites and emails. It runs entirely in the visitor browser and does not write cookies or collect analytics by itself. The privacy footprint depends on how the framework is loaded, with public CDNs exposing the visitor IP address and self hosting keeping all assets on the controller infrastructure.

Overview

What does ZURB Foundation do?

What ZURB Foundation is

ZURB Foundation is a mature open source responsive front end framework that ships a CSS grid, a set of reusable UI components, accessibility helpers, and a JavaScript toolkit for navigation and interactivity. It is used by agencies and product teams to build websites, applications, and email templates that adapt to phones, tablets, and desktop browsers.

Cookies and data set by Foundation

The framework itself does not write any cookie, does not include analytics, and does not call back to a vendor server when assets are self hosted. Any cookie observed alongside Foundation comes from the site own backend, from a CMS module, or from third party scripts added by the developer.

GDPR and ePrivacy implications

Because Foundation does not store or read identifiers in the browser by itself, Article 5(3) of the ePrivacy Directive does not require consent for the framework. When the assets are loaded from a public CDN, the visitor IP address is processed by the CDN provider, which falls under the GDPR. This processing is generally based on legitimate interest, provided the CDN provider offers appropriate transfer safeguards.

Consent requirements

No consent is required for the Foundation files themselves, whether self hosted or loaded from a CDN. Consent does come into play only if the developer adds analytics or marketing scripts on top of the Foundation layout. Those scripts must be governed by the consent management platform.

International data transfers

Public CDNs such as jsDelivr or cdnjs route requests through edges located in multiple regions, which can imply a transfer of the visitor IP address outside the EU. Self hosting the Foundation files removes that exposure entirely. Controllers who keep a CDN should document the provider, the safeguards, and the categories of data exposed.

Practical compliance steps

Prefer self hosting of the Foundation CSS and JavaScript files when possible, set up Subresource Integrity hashes if you use a CDN, mention the CDN in the privacy policy, and confirm that any cookies you observe on the site are caused by other components, not by Foundation itself.

Compliance

ZURB Foundation and the GDPR

Legal basis
Legitimate interest (Article 6(1)(f) GDPR) when assets are self hosted, no cookies are written by the framework itself
Risk level
low
Applicable regulations
GDPR, ePrivacy Directive

Impact assessment (DPIA)

ZURB Foundation does not perform profiling or large scale data processing, so a DPIA is not required for the framework. A short risk note may be enough when assets are loaded from a public CDN to confirm that only the IP address is exposed and that the CDN provider has appropriate transfer safeguards in place.

Sample text for your banner

This website uses the ZURB Foundation front end framework to render its layout. The framework does not set cookies or collect analytics. Some assets may be loaded from a public CDN which receives your IP address to deliver the file.
Cookies and trackers

What ZURB Foundation sets and contacts

Tracking method
Client side CSS and JavaScript framework loaded from the site own assets or from a public CDN, no tracking by default
Server location
Served from the site host, optionally from public CDNs such as jsDelivr or cdnjs
Cookieless mode available
Yes

Cookies set (3)

NameTypeDurationPurpose
No framework cookiesfirst_partyN/AZURB Foundation does not write any cookie by itself. This entry documents the absence of cookies set by the framework.
CDN cache hintfirst_partyVariesWhen loaded from a public CDN, the browser may store a cache validator for the asset, which is a technical cache mechanism and not a personal data identifier.
SRI fingerprintfirst_partyN/ASubresource Integrity hash used to verify the integrity of the file delivered by the CDN, stored only in the HTML markup, not as a cookie.

Third-party domains contacted (3)

  • get.foundation
  • cdn.jsdelivr.net
  • cdnjs.cloudflare.com
Questions

Frequently asked questions about ZURB Foundation

Can't find your question? Write to us, we answer fast.

Does ZURB Foundation set cookies?

No. The framework itself does not write or read cookies. Any cookies on a Foundation based site come from the backend, the CMS, or other scripts added by the developer.

Is consent required for Foundation?

Consent is not required for the framework files because no information is stored or read in the visitor browser. Consent is required only for analytics or marketing scripts added on top of Foundation.

What is the legal basis for using Foundation?

When the assets are self hosted there is no separate processing of personal data linked to the framework. If a public CDN is used to deliver the files, the legal basis for the IP exposure is legitimate interest under Article 6(1)(f) GDPR.

Does Foundation transfer data to the United States?

Not by itself. Transfers can occur if the files are loaded from a CDN with US edges. Self hosting eliminates this exposure, and CDNs with EU presence reduce it significantly.

Is a DPIA required for Foundation?

No. The framework does not perform profiling or large scale data processing, so a DPIA is not required for the framework itself. A DPIA may still be needed for the full application built with Foundation depending on what it processes.

How to implement Foundation in a privacy friendly way?

Self host the CSS and JavaScript assets, version them, apply Subresource Integrity for any remote loading, avoid mixing the framework with trackers in the same bundle, and document the chosen delivery method in the privacy policy.

What are the alternatives to Foundation?

Alternatives include Bootstrap, Tailwind CSS, Bulma, UIkit, and Pure CSS. They differ in component sets and design philosophy, but they share the property of not setting cookies on their own.

How to update the cookie policy for Foundation?

Add a short statement that the website uses the ZURB Foundation framework for rendering, that the framework does not set cookies, and, if applicable, that some assets are served via a CDN which receives the visitor IP address.

GeneXus

GeneXus is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. GeneXus supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, GeneXus ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Frameworks

Moofx

Moofx is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Moofx integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Moofx helps organizations maintain robust websites that meet user expectations and technical requirements.

Frameworks

Storybook

Storybook is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Storybook supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Storybook enables informed decisions that improve experience and drive results.

Frameworks

Arwes

Arwes is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Arwes supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Arwes ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Frameworks

OpenGrok

OpenGrok is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. OpenGrok is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, OpenGrok offers reliable solutions that scale with organizational needs and evolving web standards.

Frameworks

AlloyUI

AlloyUI is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. AlloyUI integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, AlloyUI helps organizations maintain robust websites that meet user expectations and technical requirements.

Frameworks

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.