> Self hosted versus meet.jit.si, what data Jitsi collects, when consent is needed, ePrivacy implications and a checklist for EU compliant deployments.
>
> Canonical: https://www.flowconsent.com/en/services/video/jitsi

Video

# Jitsi

Preferences · [Official website](https://jitsi.org)

Jitsi is an open source video conferencing platform that runs in the browser via WebRTC and can be self hosted for full data sovereignty.

[Block Jitsi until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=video) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Video](https://www.flowconsent.com/en/services/video)

- Consent

  Preferences

- Prior consent

  Required

- Documented cookies

  0

- Third-party domains

  3

- Servers

  Self hosted (typically EU) or hosted meet.jit.si infrastructure

Overview

## What does Jitsi do?

## **What is Jitsi**

Jitsi is an open source video conferencing stack maintained by 8x8 and the community. The most visible component is Jitsi Meet, a fully browser based experience built on WebRTC, complemented by Jitsi Videobridge (media relay), Jicofo (conference focus) and Prosody (XMPP signalling). Anyone can self host the entire stack or use the public meet.jit.si service.

## **What data Jitsi collects**

A Jitsi call processes the participants' audio and video, IP addresses, browser identifiers, display names, chat messages, screen shares and any uploaded files. Local storage is used to remember device preferences, language, last meeting name and to cache the participant ID. When recordings or live streaming are enabled, the resulting media files become long lived personal data.

## **GDPR and ePrivacy implications**

Embedding a Jitsi iframe or loading the external API script on your site causes the browser to download JavaScript from your Jitsi server (or meet.jit.si) and to write to localStorage. Under Art. 5(3) of the ePrivacy Directive, accessing or storing data on the user device requires prior consent unless it is strictly necessary. Real time communications between users is not strictly necessary for browsing your page, so consent is the correct basis.

## **Consent and legal basis**

For a Jitsi widget embedded on a marketing or blog page, collect explicit consent before the iframe loads. For a paid video conferencing product where Jitsi powers the calls, contract performance (Art. 6(1)(b) GDPR) is usually the right basis. Recording a meeting introduces an additional purpose and a stronger duty to inform every participant, including those who join later.

## **Data transfers and hosting**

A self hosted Jitsi cluster placed in EU datacenters (Hetzner, OVHcloud, Scaleway, Infomaniak, NetCup, internal infrastructure) keeps signalling and media inside the EU. The public meet.jit.si service is operated by 8x8 from a US headquartered company; even with EU media servers, transfers may occur and need to be covered by the EU US Data Privacy Framework or Standard Contractual Clauses.

## **Practical compliance steps**

Self host on EU infrastructure when possible. Turn off external services in config.js (callstats, third party analytics, gravatar). Disable third party logging like Sentry and Matomo unless you control them. Use short room names that are not user identifiers. Enforce TLS for every component, store recordings in EU object storage with encryption and short retention, and offer a microphone or camera off by default for joiners.

Compliance

## Jitsi and the GDPR

Jitsi is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Consent (Art. 6(1)(a) GDPR) when embedded on a third party site that loads JavaScript, contract performance (Art. 6(1)(b) GDPR) when offered as part of your own communication product

- Risk level

  medium

- Applicable regulations

  GDPR, ePrivacy Directive (Art. 5(3) for browser storage), national telecommunications laws on real time communications

### Impact assessment (DPIA)

A DPIA is recommended when Jitsi handles patient consultations, legal hearings, employee performance reviews or any sensitive conversation; when sessions are recorded; or when transcripts are stored. Self hosting in the EU with disabled telemetry and short retention reduces the risk profile.

### Sample text for your banner

> We use Jitsi to power live video meetings. When you join a call your browser exchanges audio, video, IP address and a participant identifier with the Jitsi server. We need your consent before the meeting starts. Decline if you prefer to read the page without launching a call.

Cookies and trackers

## What Jitsi sets and contacts

- Tracking method

  WebRTC based real time communication, in browser JavaScript and optional XMPP signalling

- Server location

  Self hosted (typically EU) or hosted meet.jit.si infrastructure

- Cookieless mode available

  Yes

### Third-party domains contacted (3)

- `meet.jit.si`
- `8x8.vc`
- `web-cdn.jitsi.net`

Questions

## Frequently asked questions about Jitsi

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### Does Jitsi set cookies?

Jitsi Meet uses localStorage and sessionStorage rather than classical cookies for participant identifiers, language and device preferences. A reverse proxy or load balancer in front of Jitsi may add session cookies.

### Is consent required to embed Jitsi?

Yes, when you embed Jitsi as a third party widget you need prior consent because the script and the iframe write to localStorage and process audio, video and IP addresses. Inside a paid product where Jitsi is core, contract performance applies.

### Which GDPR legal basis applies?

Consent (Art. 6(1)(a) GDPR) for embedded widgets on a content site. Contract performance (Art. 6(1)(b) GDPR) for video conferencing products. Recordings always require explicit information and often explicit consent.

### Are there transfers to the United States?

A self hosted Jitsi cluster in the EU has no US transfer. meet.jit.si is operated by 8x8, a US company; even when media flows through EU bridges, control plane data may reach the US and must be covered by the EU US Data Privacy Framework or Standard Contractual Clauses.

### Do I need a DPIA?

Recommended when Jitsi is used for sensitive contexts (medical, legal, HR, education of minors), when sessions are recorded or live streamed, when transcripts are stored, or when the audience is large.

### How do I deploy Jitsi compliantly?

Self host on EU infrastructure, disable third party services in config.js, turn off telemetry, enforce TLS, store recordings encrypted with a short retention, default to disabled camera and microphone, and provide a clear privacy notice to participants before they join.

### Are there alternatives to Jitsi?

EU based alternatives include BigBlueButton (EU community), Galène, Element Call (Matrix), Whereby (Norway, hosted), Tixeo (France, end to end encrypted), Visio CNED and Rendez Vous from the French government's Tchap stack.

### How do I update my cookie policy for Jitsi?

List the localStorage and sessionStorage entries written by Jitsi (jitsi.user.id, callStatsUserName, language, recentRooms and similar) under a "functional" or "interactive content" category, along with the data sent to the Jitsi server and the legal basis.

Same category

## More services: Video

[See the whole category](https://www.flowconsent.com/en/services/video)

### [Mux](https://www.flowconsent.com/en/services/video/mux)

[Mux is a user preference and personalization service that helps websites deliver customized experiences based on individual visitor settings and choices. It manages preferences for content display, communication channels, and interaction styles. Mux integrates with website platforms to remember and apply user choices consistently across sessions. With privacy-compliant preference storage, Mux enhances satisfaction by ensuring tailored browsing experiences for every visitor.](https://www.flowconsent.com/en/services/video/mux)

[Preferences](https://www.flowconsent.com/en/services/video/mux)

·

### [Panda Video](https://www.flowconsent.com/en/services/video/panda-video)

[Panda Video is a video hosting and streaming platform that helps businesses deliver high-quality video content to their audiences. It provides adaptive bitrate streaming, customizable players, and content management tools. Panda Video supports live streaming, on-demand playback, and video analytics. With CDN-powered delivery and responsive embeds, Panda Video ensures smooth playback across all devices and network conditions for engaging video experiences.](https://www.flowconsent.com/en/services/video/panda-video)

[Preferences](https://www.flowconsent.com/en/services/video/panda-video)

·

### [Viloud](https://www.flowconsent.com/en/services/video/viloud)

[Viloud is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Viloud enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Viloud empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/video/viloud)

[Marketing](https://www.flowconsent.com/en/services/video/viloud)

·

### [Loom](https://www.flowconsent.com/en/services/video/loom)

[Loom is a user preference and personalization service that helps websites deliver customized experiences based on individual visitor settings and choices. It manages preferences for content display, communication channels, and interaction styles. Loom integrates with website platforms to remember and apply user choices consistently across sessions. With privacy-compliant preference storage, Loom enhances satisfaction by ensuring tailored browsing experiences for every visitor.](https://www.flowconsent.com/en/services/video/loom)

[Preferences](https://www.flowconsent.com/en/services/video/loom)

·

### [ResponsiveVoice](https://www.flowconsent.com/en/services/video/responsivevoice)

[ResponsiveVoice is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. ResponsiveVoice is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, ResponsiveVoice offers reliable solutions that scale with organizational needs and evolving web standards.](https://www.flowconsent.com/en/services/video/responsivevoice)

[Preferences](https://www.flowconsent.com/en/services/video/responsivevoice)

·

### [STN Video](https://www.flowconsent.com/en/services/video/stn-video)

[STN Video is a video hosting and streaming platform that helps businesses deliver high-quality video content to their audiences. It provides adaptive bitrate streaming, customizable players, and content management tools. STN Video supports live streaming, on-demand playback, and video analytics. With CDN-powered delivery and responsive embeds, STN Video ensures smooth playback across all devices and network conditions for engaging video experiences.](https://www.flowconsent.com/en/services/video/stn-video)

[Marketing](https://www.flowconsent.com/en/services/video/stn-video)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)