Bitmovin
Bitmovin is an Austrian video technology company whose player and analytics are used to stream and measure video on websites and apps. The player handles playback, while Bitmovin Analytics measures quality of experience and viewer behaviour using identifiers and IP address. Operated from the European Union, the player can run with functional storage, but the analytics component profiles viewing, so it requires prior consent under the GDPR and the ePrivacy Directive.
What does Bitmovin do?
What Bitmovin is
Bitmovin is a video streaming technology company based in Austria that provides an adaptive video player, encoding, and analytics. Websites and apps embed the Bitmovin Player to deliver video and can add Bitmovin Analytics to measure playback quality and viewer engagement. Because Bitmovin is an EU company, much of its processing can stay within the European Union.
What data and storage Bitmovin uses
The player stores functional preferences such as volume and quality, usually in local storage. Bitmovin Analytics, when enabled, collects playback events, quality of experience metrics, viewer identifiers, the page URL, device and browser information, and IP address to build engagement reports. The analytics identifiers can recognise a viewer across sessions.
GDPR and ePrivacy implications
The player itself can often run on strictly necessary, functional storage, but Bitmovin Analytics processes viewing behaviour and identifiers, so it falls under the ePrivacy consent requirement and needs a GDPR lawful basis. IP addresses and persistent viewer identifiers are personal data. Bitmovin acts as your processor, so a data processing agreement is required.
When consent is required
You can usually load the Bitmovin Player for strictly necessary playback without a consent banner, but you must obtain prior, opt in consent before Bitmovin Analytics starts profiling viewing. Block the analytics module behind your consent banner and keep the player functional only until consent is given. Make consent specific and easy to withdraw.
Data transfers outside the EU
Bitmovin is headquartered in the European Union, so core processing can remain in the EU and many deployments avoid a third country transfer. Video and analytics are often served through a global content delivery network, so confirm where playback and analytics data are processed and apply Standard Contractual Clauses and a transfer impact assessment if any provider is outside the EU. Document the data locations.
Practical compliance steps
To use Bitmovin compliantly, keep the player on functional storage, gate Bitmovin Analytics behind consent, and sign a data processing agreement. Confirm the processing regions and CDN, set retention limits for analytics, and avoid sending personal data in custom analytics fields. List Bitmovin in your cookie policy and privacy notice and review it periodically.
Bitmovin and the GDPR
Bitmovin is classified as “Unclassified”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Legitimate interest (Art. 6(1)(f) GDPR) for strictly necessary playback; consent (Art. 6(1)(a) GDPR) for Bitmovin Analytics
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive (Cookie Law)
Impact assessment (DPIA)
Bitmovin separates a largely functional player from an analytics component that profiles viewing, which shapes its risk profile. Key DPIA points: (1) Bitmovin Analytics processing of viewer identifiers, IP addresses, and engagement that can recognise viewers across sessions; (2) the player itself relying on functional storage that is lower risk; (3) EU headquartering that helps keep data in the EU, with CDN and any non EU provider needing transfer safeguards; (4) consent required before analytics profiling begins; (5) the need for a data processing agreement and retention limits. A DPIA is advisable where analytics is enabled at scale.
Sample text for your banner
We use the Bitmovin Player to deliver video and, with your consent, Bitmovin Analytics to measure playback quality and engagement. The player stores functional preferences such as volume, while the analytics component processes viewing data and your IP address. Bitmovin is an EU based provider. You can withdraw your consent to analytics at any time via our cookie settings, and video will still play.
What Bitmovin sets and contacts
- Tracking method
- Adaptive video player (functional storage) plus optional Bitmovin Analytics that profiles viewing
- Server location
- European Union (Bitmovin GmbH, Austria); video and analytics may use a global CDN
- Cookieless mode available
- Yes
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| bitmovin_volume | Functional | Persistent (local storage) | Stores the chosen playback volume for the video player. |
| bitmovin_quality | Functional | Persistent (local storage) | Remembers the selected video quality preference. |
| bitmovin_analytics_uuid | Analytics | 1 year | Viewer identifier used by Bitmovin Analytics to measure playback quality and engagement across sessions. |
Third-party domains contacted (3)
bitmovin.comcdn.bitmovin.comanalytics-ingress-global.bitmovin.com
Frequently asked questions about Bitmovin
Can't find your question? Write to us, we answer fast.
What cookies does Bitmovin set?
The Bitmovin Player mainly stores functional preferences such as volume and quality, often in local storage rather than cookies. Bitmovin Analytics, when enabled, sets identifiers to recognise viewers and measure engagement, which are not strictly necessary and require consent. The exact storage depends on your configuration.
Do I need consent to use Bitmovin?
You can usually run the player for strictly necessary playback without consent, but Bitmovin Analytics profiles viewing, so obtain prior, opt in consent before it loads. Block the analytics module until the viewer accepts.
What is the legal basis for Bitmovin?
Strictly necessary playback and functional storage can rely on legitimate interest (Art. 6(1)(f)). Bitmovin Analytics relies on consent (Art. 6(1)(a)) and the ePrivacy Directive because it profiles viewing behaviour.
Does Bitmovin transfer data to the US?
Not necessarily. Bitmovin is headquartered in the EU, so processing can stay in the EU. Video and analytics may travel through a global CDN, so confirm the regions and apply Standard Contractual Clauses and a transfer impact assessment if any provider is outside the EU.
Is a DPIA needed for Bitmovin?
A DPIA is advisable where Bitmovin Analytics is enabled at scale, because it profiles viewing. Assess the viewer identifiers, IP processing, the CDN and processing regions, and your retention periods. The player alone is lower risk.
How do I implement Bitmovin compliantly?
Keep the player on functional storage, gate Bitmovin Analytics behind consent, sign a data processing agreement, and confirm the processing regions and CDN. Set retention limits, avoid personal data in custom analytics fields, and document Bitmovin in your cookie policy and privacy notice.
Are there alternatives to Bitmovin?
Yes. A self hosted video file with an open source player such as Video.js, or other EU based video platforms, can deliver playback with less analytics profiling. They reduce tracking and keep more control over data location.
How do I update my cookie policy for Bitmovin?
Describe the player''s functional storage and, separately, the Bitmovin Analytics identifiers and data with their purposes and durations, noting that Bitmovin is EU based and where data is processed. Link to Bitmovin''s privacy notice and review the entry when its storage or subprocessors change.
Viqeo
Viqeo is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Viqeo supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Viqeo ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Vidjet
Vidjet is a user preference and personalization service that helps websites deliver customized experiences based on individual visitor settings and choices. It manages preferences for content display, communication channels, and interaction styles. Vidjet integrates with website platforms to remember and apply user choices consistently across sessions. With privacy-compliant preference storage, Vidjet enhances satisfaction by ensuring tailored browsing experiences for every visitor.
StorifyMe
StorifyMe is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. StorifyMe supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, StorifyMe ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Omny Studio
Omny Studio is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Omny Studio integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Omny Studio helps organizations maintain robust websites that meet user expectations and technical requirements.
Wistia
Wistia is a user preference and personalization service that helps websites deliver customized experiences based on individual visitor settings and choices. It manages preferences for content display, communication channels, and interaction styles. Wistia integrates with website platforms to remember and apply user choices consistently across sessions. With privacy-compliant preference storage, Wistia enhances satisfaction by ensuring tailored browsing experiences for every visitor.
Panda Video
Panda Video is a video hosting and streaming platform that helps businesses deliver high-quality video content to their audiences. It provides adaptive bitrate streaming, customizable players, and content management tools. Panda Video supports live streaming, on-demand playback, and video analytics. With CDN-powered delivery and responsive embeds, Panda Video ensures smooth playback across all devices and network conditions for engaging video experiences.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.