> How the AddToAny share widget works, which cookies and pixels it sets, when consent is required and how to comply with GDPR and ePrivacy in the EU. > > Canonical: https://www.flowconsent.com/en/services/social-media/addtoany Social media # AddToAny Marketing · [Official website](https://www.addtoany.com) AddToAny is a free social sharing widget service operated from the United States. It provides a JavaScript snippet that renders share buttons on a webpage and tracks how often each network is used. Because the widget loads scripts and pixels from third party domains and transmits the visitor IP to US servers, AddToAny is treated as a non strictly necessary third party tag under the ePrivacy Directive and the GDPR. [Block AddToAny until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=social) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Social media](https://www.flowconsent.com/en/services/social-media) - Consent Marketing - Prior consent Required - Documented cookies 4 - Third-party domains 9 - Servers United States (AddToAny is operated by Lockerz, Inc. dba AddToAny in the US, with global delivery via Cloudflare CDN) Overview ## What does AddToAny do? ## **What is AddToAny** AddToAny is a popular free social sharing service used to display Share to Facebook, X, LinkedIn, WhatsApp, Telegram, Email and many other buttons on websites and blogs. The widget is delivered as a JavaScript snippet from static.addtoany.com that renders the buttons, tracks impressions and exposes a small counter. A WordPress plugin and Drupal module exist that simplify the integration. AddToAny is operated by AddToAny LLC, based in the United States. ## **What data and cookies AddToAny collects** Loading the page.js script transmits the visitor IP address, User Agent and page URL to AddToAny servers. AddToAny stores a uvc cookie used as a click counter across visits on the merchant domain and reads existing cookies from social networks when the user hovers or clicks. When the user actually shares, the chosen network (Facebook, X, LinkedIn) becomes a recipient and may set its own cookies and gather profile information about the sharer. AddToAny states that it does not sell or share data for advertising, but the cross border data flow still triggers the GDPR. ## **GDPR and ePrivacy implications** AddToAny is a third party tag that loads automatically and reads or writes data on the user device, which puts it under Article 5(3) of the ePrivacy Directive. The widget is not strictly necessary for the visitor to access the page, so prior consent is required. Under the GDPR, the transfer of the IP address to the US falls under Chapter V and requires a transfer mechanism. The same considerations apply for the social networks invoked when the user clicks a share button: they are independent controllers and the privacy policy must list them. ## **Is consent required** Yes. EU regulators have consistently treated social plugins as requiring consent (CJEU Fashion ID C 40/17 for Facebook Like, but the principle extends to any third party share tag that loads automatically). Block AddToAny behind your consent manager and only load it once the user has accepted the relevant category, typically Marketing or Social Media. AddToAny also offers a Universal button mode that opens a sharing dialog only when the user clicks, which can be considered a lower risk pattern but still loads scripts proactively in most setups. ## **Data transfers to the United States** AddToAny LLC is a US company and processes data on US infrastructure. AddToAny is not on the public EU US Data Privacy Framework list at the time of writing, which means transfers must rely on Standard Contractual Clauses, on the user's explicit consent for the transfer or on another Article 49 derogation, with the EDPB guidance that derogations should not be used systematically. ## **Practical compliance steps** Add AddToAny to the cookie banner under Marketing or Social Media, load page.js only after consent, document the recipients (AddToAny LLC and the social networks invoked) and the transfer mechanism in the privacy policy, and consider the alternative of using simple share URLs (https\://twitter.com/intent/tweet?... and similar) that do not load any tracking script. For WordPress, the official AddToAny plugin offers a no JavaScript fallback mode that helps minimise tracking. Compliance ## AddToAny and the GDPR AddToAny is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR and Art. 5(3) ePrivacy Directive) - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, TTDSG, LIL ### Impact assessment (DPIA) AddToAny is generally not a DPIA trigger on a typical content site, but the integration adds AddToAny LLC and the underlying social networks as recipients. When AddToAny is combined with embedded post counters or social login buttons, the cumulative tracking may raise the risk level and justify documenting the assessment in a wider DPIA. ### Sample text for your banner > We use AddToAny to display social sharing buttons. Loading them sends your IP address and the visited page to AddToAny in the United States, and uses cookies from the social networks you choose. Do you accept? Cookies and trackers ## What AddToAny sets and contacts - Tracking method JavaScript snippet loading static.addtoany.com (page.js) to render sharing buttons and a share counter, plus image pixels to addtoany.com when share or hover events occur - Server location United States (AddToAny is operated by Lockerz, Inc. dba AddToAny in the US, with global delivery via Cloudflare CDN) - Data transferred outside the EU IP address, page URL and share interactions are transmitted to AddToAny servers in the United States. When the user actually shares, the destination social network (Facebook, X, LinkedIn, WhatsApp) becomes a third party recipient and may transfer data to its own infrastructure. ### Cookies set (4) | Name | Type | Duration | Purpose | | ------------- | ----------- | ---------- | ------------------------------------------------------------------------------------------------------------------- | | uvc | third party | 5 years | Used by AddToAny to count unique visitors and views of the share buttons across visits to the merchant site. | | cf\_clearance | third party | 30 days | Cloudflare bot mitigation cookie set on AddToAny domains to validate non automated requests. | | \_\_cf\_bm | third party | 30 minutes | Cloudflare Bot Management session cookie set on AddToAny domains. | | \_ga | third party | 2 years | Google Analytics cookie set on addtoany.com when an administrator visits the dashboard, not on the embedded widget. | ### Third-party domains contacted (9) - `static.addtoany.com` - `addtoany.com` - `m.addtoany.com` - `d26b395fwzu5fz.cloudfront.net` - `facebook.com` - `twitter.com` - `linkedin.com` - `wa.me` - `t.me` Questions ## Frequently asked questions about AddToAny Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does AddToAny set? AddToAny sets a uvc cookie (unique visitor count) on the merchant domain and may read cookies from the social networks targeted by the share buttons (Facebook, X, LinkedIn). When a user actually shares, the destination network is loaded inside a popup or new tab and may set additional third party cookies. ### Is consent required for AddToAny in the EU? Yes. The widget loads automatically and is not strictly necessary for the user to access the page. Under Article 5(3) of the ePrivacy Directive, prior consent is required. The CJEU Fashion ID case (C 40/17) confirmed that social plugins loaded on a website make the website operator a joint controller for the data transmission. ### What is the legal basis for AddToAny? The recommended basis is consent under Article 6(1)(a) GDPR, combined with Article 5(3) ePrivacy consent for the cookies and the read of social network cookies. Legitimate interest is not generally accepted by EU DPAs for social sharing widgets that load before any user interaction. ### Are personal data transferred to the US with AddToAny? Yes. AddToAny LLC is based in the United States and processes data there. The widget also enables transfers to the social networks invoked when a share is performed. The privacy policy should reference Standard Contractual Clauses or explicit consent as the legal mechanism for the transfer to AddToAny, and explain the role of each social network as an independent controller. ### Do I need a DPIA for AddToAny? Not on a standalone basis for a typical content site. However, when AddToAny is used alongside other social plugins, the cumulative tracking on visitors can become significant. In that case, document the integration in the record of processing and consider including it in a broader DPIA that covers all third party widgets. ### How do I implement AddToAny compliantly? Gate the AddToAny snippet behind your consent manager, ensure the no JavaScript fallback is used for non consenting users, list AddToAny LLC and the relevant social networks in the privacy policy, and disclose the transfer mechanism. Provide a category in the cookie banner labelled Social media or Marketing that the user can refuse without losing core functionality. ### What are the alternatives to AddToAny? The simplest privacy preserving alternative is plain share URLs (https\://twitter.com/intent/tweet, https\://www\.facebook.com/sharer/sharer.php) wrapped in static HTML buttons, which load no third party scripts until the user actually clicks. EU based plugins such as Shariff (Heise) provide self hosted, consent friendly share buttons. ### How should I describe AddToAny in the cookie policy? Add an entry under Social media or Marketing with the provider (AddToAny LLC, USA), the domains (static.addtoany.com, addtoany.com), the cookies set (uvc and any social network cookies fired through it), the purpose (display share buttons and track usage), the transfer mechanism, and the retention period. Same category ## More services: Social media [See the whole category](https://www.flowconsent.com/en/services/social-media) ### [Instafeed](https://www.flowconsent.com/en/services/social-media/instafeed) [Instafeed is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Instafeed supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Instafeed remains a leading web development choice.](https://www.flowconsent.com/en/services/social-media/instafeed) [Preferences](https://www.flowconsent.com/en/services/social-media/instafeed) · ### [Bazaarvoice Curation](https://www.flowconsent.com/en/services/social-media/bazaarvoice-curation) [Bazaarvoice Curation is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Bazaarvoice Curation enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Bazaarvoice Curation empowers marketing teams to achieve.](https://www.flowconsent.com/en/services/social-media/bazaarvoice-curation) [Marketing](https://www.flowconsent.com/en/services/social-media/bazaarvoice-curation) · ### [Mastodon](https://www.flowconsent.com/en/services/social-media/mastodon) [Mastodon is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Mastodon integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Mastodon helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/social-media/mastodon) [Social media](https://www.flowconsent.com/en/services/social-media/mastodon) · ### [Facebook Social Plugins](https://www.flowconsent.com/en/services/social-media/facebook-social-plugins) [Facebook Social Plugins is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Facebook Social Plugins provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Facebook Social Plugins helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/social-media/facebook-social-plugins) [Marketing](https://www.flowconsent.com/en/services/social-media/facebook-social-plugins) · ### [Tagembed](https://www.flowconsent.com/en/services/social-media/tagembed) [Tagembed is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Tagembed provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Tagembed helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/social-media/tagembed) [Marketing](https://www.flowconsent.com/en/services/social-media/tagembed) · ### [Instagram Embed](https://www.flowconsent.com/en/services/social-media/instagram-embed) [Instagram Embed is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Instagram Embed enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Instagram Embed empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/social-media/instagram-embed) [Marketing](https://www.flowconsent.com/en/services/social-media/instagram-embed) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)