JW Player
JW Player is a major enterprise video player and online video platform from the original creator of the JW Player open source library. Provides HTML5 video, adaptive streaming, video analytics, recommendations and server side ad insertion. The player sets local storage and cookies; consent required in the EU.
What does JW Player do?
What JW Player is
JW Player is one of the oldest and most widely deployed online video platforms. The JW Player Cloud product covers ingest, transcode, storage, adaptive bitrate streaming, native players for web and mobile, video analytics, recommendations and server side ad insertion. The free open source JW Player library founded the company and is now bundled in a commercial enterprise SaaS used by publishers, broadcasters and ecommerce sites.
Cookies and local storage
JW Player stores playback state, volume, captions and quality preferences in local storage entries prefixed jwplayer.* on the publisher domain. The player may write a session cookie (_bcvm or jw_visitor) when JW Analytics is enabled. The analytics beacon posts events to a.jwpltx.com containing the player ID, the media ID, the visitor IP and the user agent. SSAI integration loads ad partner SDKs (Google Ad Manager IMA, Magnite, PubMatic, FreeWheel) that set their own cookies.
GDPR consent and ePrivacy
Local storage entries and cookies set by the JW Player fall under ePrivacy art. 5(3): prior consent is required before the player loads. The CNIL 2022 deliberation on video embeds reinforces this for the JW Player ecosystem. Joint controllership under GDPR art. 26 applies between the publisher and JW Player Inc. when JW Analytics or Recommendations is activated and the audience profile is shared with the JW platform. SSAI ad partners have their own legal basis (consent for behavioural advertising).
Data residency and US transfers
By default JW Player Cloud runs in AWS US East. EU residency for video assets, analytics and Recommendations can be requested at contract signature, with primary storage in AWS Ireland and CDN delivery via CloudFront EU edges. Support, billing and engineering retain US access. JW Player is certified under the EU US Data Privacy Framework with 2021 SCCs as fallback. A Transfer Impact Assessment must accompany the deployment.
Compliant embedding pattern
Use a click to load wrapper, integrate the JW Player with a TCF v2.2 CMP that signals consent, defer the Analytics, Recommendations and SSAI initialisation until consent flips, list the local storage entries and cookies in the privacy notice, sign the DPA with EU residency commitment, document the legal basis for each JW product activated and route DSAR through the JW Player Privacy Portal.
JW Player and the GDPR
JW Player is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent under GDPR art. 6(1)(a) and ePrivacy art. 5(3) for the JW Player cookies (jwplayer.* local storage, _bcvm session), the JW Player Analytics beacon, the JW Player Recommendations engine and any SSAI advertising integration. The Player Pro without ads can be deployed in a more restrictive privacy mode but still writes local storage entries, so consent remains required.
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive, CNIL guidance on embedded media (2022), EDPB guidelines 2/2023, AVMSD (Audiovisual Media Services Directive), EU US Data Privacy Framework, German TTDSG
Impact assessment (DPIA)
A DPIA is recommended when JW Player Analytics, the Recommendations engine or the SSAI ad insertion is activated, because the player builds a viewer profile and may share it with US ad partners. The DPIA should document the EU residency choice, the local storage retention, the integration with Google Ad Manager and other SSPs, the audience matching used by Recommendations and the rights to access and erasure handled by the JW Player Privacy Portal.
Sample text for your banner
We embed videos via JW Player, a video hosting and player platform operated by JW Player Inc. The JW Player sets local storage entries and cookies on your device to remember playback preferences and provide video analytics. With your consent we activate the Recommendations engine and the SSAI advertising integration that may transfer data to US ad partners. EU residency is available on request. Data is handled by JW Player in the United States under the EU US Data Privacy Framework.
What JW Player sets and contacts
- Tracking method
- video_player_javascript_library_with_player_cookies_video_analytics_and_optional_ssai
- Server location
- JW Player is operated by JW Player Inc., a US company headquartered in New York. The JW Player Cloud platform runs on AWS with primary regions in the United States (us-east-1, us-west-2) and Europe (eu-west-1 Ireland, eu-central-1 Frankfurt). EU customers can request EU residency for the asset storage, the analytics ingestion and the recommendation engine; the corporate management and product engineering remain in the US. Video files are delivered through CloudFront, Akamai and Fastly with European edge nodes.
- Data transferred outside the EU
- JW Player Inc. is a US company. Even with the EU residency option, support, billing and engineering staff in the United States, India and Israel retain contractual access. JW Player is certified under the EU US Data Privacy Framework and uses the 2021 Standard Contractual Clauses as fallback. Server side ad insertion routes through partner SSPs (Google Ad Manager, Magnite, PubMatic) that may transfer additional data to the US ad ecosystem.
Cookies set (4)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| jwplayer.* (Local Storage) | First party (JW Player local storage) | Persistent | Stores player state: volume, captions track, quality preference, resume point and selected language |
| _bcvm | First party (JW Analytics) | Session | Session identifier used by JW Analytics to attribute video events to a single viewing session |
| jw_visitor | First party (JW Analytics, optional) | 1 year | Persistent visitor identifier used when JW Analytics tracks returning viewers |
| jw_ssai_* | First party (JW Player SSAI, optional) | Session | Session identifier for server side ad insertion sticky stream binding |
Third-party domains contacted (6)
jwplayer.comjwpcdn.comjwpltx.comcdn.jwplayer.comssl.p.jwpcdn.comcontent.jwplatform.com
Frequently asked questions about JW Player
Can't find your question? Write to us, we answer fast.
What cookies does JW Player set?
JW Player primarily uses local storage entries prefixed jwplayer.* (volume, captions, quality, resume point). When JW Analytics is enabled a session cookie _bcvm or jw_visitor is written. The analytics beacon goes to a.jwpltx.com. SSAI adds ad partner cookies (Google IMA, Magnite, PubMatic, FreeWheel).
Is consent required for JW Player?
Yes in the EU. The local storage entries and the analytics cookie fall under ePrivacy art. 5(3). The CNIL 2022 deliberation on video embeds confirms consent is required. Even the Player Pro without ads writes local storage, so consent is still needed.
What is the legal basis for JW Player?
Consent (GDPR art. 6(1)(a)) for player local storage, JW Analytics and Recommendations. Joint controllership (art. 26) between the publisher and JW Player Inc. for the audience profile. SSAI ad partners have their own consent based legal basis.
Are data transferred to the United States?
Yes by default. JW Player Cloud runs in AWS US East. EU residency for assets, analytics and Recommendations can be requested. JW Player is certified under the EU US Data Privacy Framework; SCCs 2021 fallback and TIA required.
Do I need a DPIA for JW Player?
Recommended when JW Analytics, Recommendations or SSAI is activated. The DPIA should document EU residency choice, local storage retention, ad partner chain and audience matching.
How do I embed JW Player compliantly?
Use a click to load wrapper, integrate with a TCF v2.2 CMP, defer Analytics, Recommendations and SSAI until consent, list local storage entries in the privacy notice, sign the DPA with EU residency commitment and route DSAR via the JW Player Privacy Portal.
What are the alternatives to JW Player?
Bitmovin (Austria), Video.js with self hosting, Kaltura (Israel with EU hosting), Wistia (US with EU residency), Vidyard (Canada), Brightcove (US with EU residency), Cloudflare Stream, Mux (US), Streamable, Bunny Stream (Slovenia), Dailymotion (France). For full privacy: self host HLS on Bunny CDN with Video.js.
How do I update my cookie policy after adding JW Player?
List JW Player Inc. as a sub processor (or joint controller for Analytics and Recommendations), declare the local storage entries (jwplayer.*) and the cookies (_bcvm, jw_visitor) with retention, mention SSAI ad partners loaded by the player, disclose US transfers under the Data Privacy Framework and link to the JW Player Privacy Portal.
Omny Studio
Omny Studio is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Omny Studio integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Omny Studio helps organizations maintain robust websites that meet user expectations and technical requirements.
Youtube nocookie
Youtube nocookie is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Youtube nocookie is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Youtube nocookie offers reliable solutions that scale with organizational needs and evolving web standards.
Rumble
Rumble is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Rumble integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Rumble helps organizations maintain robust websites that meet user expectations and technical requirements.
lite-youtube-embed
lite-youtube-embed is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. lite-youtube-embed integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, lite-youtube-embed helps organizations maintain robust websites that meet user expectations.
Cloudflare Stream
Cloudflare Stream is a video hosting and streaming platform that helps businesses deliver high-quality video content to their audiences. It provides adaptive bitrate streaming, customizable players, and content management tools. Cloudflare Stream supports live streaming, on-demand playback, and video analytics. With CDN-powered delivery and responsive embeds, Cloudflare Stream ensures smooth playback across all devices and network conditions for engaging video experiences.
Shaka Player
Shaka Player is a video hosting and streaming platform that helps businesses deliver high-quality video content to their audiences. It provides adaptive bitrate streaming, customizable players, and content management tools. Shaka Player supports live streaming, on-demand playback, and video analytics. With CDN-powered delivery and responsive embeds, Shaka Player ensures smooth playback across all devices and network conditions for engaging video experiences.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.