FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Video

Kaltura

UnclassifiedOfficial website

Kaltura is a video platform used for hosting, streaming, and embedding video across websites, learning environments, and enterprise portals. Its embedded player can set cookies and collect viewing analytics such as plays, watch time, and device information, along with the IP address. For European websites the analytics and embed cookies require prior consent, while a strictly necessary player function may operate on a different basis.

Block Kaltura until consentScan my site
Overview

What does Kaltura do?

What Kaltura is

Kaltura is a video technology platform used to host, stream, and embed video in websites, online courses, and enterprise portals. It provides a customisable player, transcoding and delivery, and detailed video analytics, and it is common in media, education, and corporate communications.

Data and cookies the player collects

When a Kaltura player is embedded, it can set cookies to keep player state and to support analytics. It records viewing events such as plays, pauses, and watch time, and processes the IP address and device and browser information. In portals where viewers sign in, viewing data can be tied to a user account, which increases the sensitivity of the processing.

GDPR and ePrivacy implications

Viewing analytics and the identifiers behind them are personal data under the GDPR, and storing or reading cookies on the device is governed by the ePrivacy Directive. A cookie that is strictly necessary to play a video the user has requested can be exempt, but analytics, audience measurement, and cross session identification are not, so they require a lawful basis and clear information.

Consent requirements

Where Kaltura sets analytics or marketing cookies, prior consent is required, and the player should be configured so those cookies are not set until the visitor accepts. Consent must be freely given, specific, informed, and easy to withdraw. A practical pattern is to load the player only after consent, or to use a privacy preserving embed that defers analytics until the user agrees.

Data transfers outside the EU

Kaltura is a United States company, so personal data may be processed in the United States and transfers must rely on the EU US Data Privacy Framework or on Standard Contractual Clauses. Some plans offer regional hosting, which can keep delivery and analytics closer to your users and reduce transfer exposure.

Practical compliance steps

Map which Kaltura cookies are strictly necessary and which are analytics, gate the non essential ones behind consent, sign a data processing agreement, and choose regional hosting where available. Document the processing, set retention limits for viewing analytics, and describe Kaltura in your cookie policy and privacy notice.

Compliance

Kaltura and the GDPR

Kaltura is classified as “Unclassified”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR)
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive

Impact assessment (DPIA)

Assess what viewing analytics the Kaltura player collects, whether viewers can be identified across sessions, the retention of analytics, and the transfers to the United States. A targeted assessment is useful where video viewing is linked to user accounts.

Sample text for your banner

We use Kaltura to play and measure videos. Kaltura may set cookies and collect viewing statistics such as watch time. These features run only after you accept the relevant cookies.
Cookies and trackers

What Kaltura sets and contacts

Tracking method
Embedded video player, JavaScript, cookies, viewing analytics
Server location
United States, regional hosting options available
Data transferred outside the EU
Data is processed by Kaltura Inc. in the United States, with regional hosting available for some plans. Transfers rely on the EU US Data Privacy Framework and on Standard Contractual Clauses.

Cookies set (3)

NameTypeDurationPurpose
kaltura_sessionFunctionalSessionMaintains the state of the video player during playback.
pidAnalytics1 yearIdentifies the browser for video viewing analytics.
vidAnalytics1 yearRecords unique video views and watch behaviour for reporting.

Third-party domains contacted (3)

  • kaltura.com
  • cdnapisec.kaltura.com
  • cfvod.kaltura.com
Questions

Frequently asked questions about Kaltura

Can't find your question? Write to us, we answer fast.

What cookies does the Kaltura player set?

The Kaltura player can set a session cookie to keep playback state and analytics cookies to identify a browser and record viewing behaviour. The session cookie may be strictly necessary, while the analytics cookies are not and belong in the analytics category of your banner.

Do I need consent for Kaltura?

You need consent for the analytics and any marketing cookies the player sets. A cookie strictly necessary to play a video the visitor explicitly requested can be exempt, but viewing analytics require prior consent under the ePrivacy Directive.

What is the legal basis for Kaltura?

Consent under Article 6(1)(a) of the GDPR is the basis for analytics and audience measurement. A strictly necessary playback cookie can rely on the ePrivacy exemption, and account based viewing should be covered in your wider privacy notice.

Does Kaltura transfer data to the United States?

Yes, Kaltura is a United States company and may process data there, so transfers rely on the EU US Data Privacy Framework or Standard Contractual Clauses. Regional hosting, where available, can reduce this exposure.

Is a DPIA needed for Kaltura?

A full assessment is not always required, but a targeted one is wise where viewing is linked to identified users or used to profile audiences. Document the analytics collected, the retention, and the transfers.

How do I embed Kaltura compliantly?

Configure the player so analytics cookies wait for consent, or load the embed only after the visitor accepts. Sign a data processing agreement, choose regional hosting if offered, and describe the cookies in your policy.

Are there alternatives to Kaltura?

Alternatives include Vimeo, Dailymotion, JW Player, and self hosted players, as well as privacy modes that disable tracking. The same consent rules apply to any embedded player that sets non essential cookies.

How do I update my cookie policy for Kaltura?

List the Kaltura cookies with their purpose and duration, separate strictly necessary from analytics, name Kaltura as the recipient, and mention the United States transfer. Update it whenever you change the player configuration.

Same category

More services: Video

See the whole category

Cloudflare Stream

Cloudflare Stream is a video hosting and streaming platform that helps businesses deliver high-quality video content to their audiences. It provides adaptive bitrate streaming, customizable players, and content management tools. Cloudflare Stream supports live streaming, on-demand playback, and video analytics. With CDN-powered delivery and responsive embeds, Cloudflare Stream ensures smooth playback across all devices and network conditions for engaging video experiences.

Preferences

Shaka Player

Shaka Player is a video hosting and streaming platform that helps businesses deliver high-quality video content to their audiences. It provides adaptive bitrate streaming, customizable players, and content management tools. Shaka Player supports live streaming, on-demand playback, and video analytics. With CDN-powered delivery and responsive embeds, Shaka Player ensures smooth playback across all devices and network conditions for engaging video experiences.

Video

Delight XR

Delight XR is an augmented reality and 3D visualization platform that enables businesses to create immersive digital experiences for websites and applications. It supports 3D model rendering, AR product previews, and interactive visual content. Delight XR helps e-commerce businesses showcase products in 3D, real estate companies offer virtual tours, and educators create interactive materials, driving higher engagement and conversion rates across industries.

Video

Demio

Demio is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Demio supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Demio ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Marketing

ReadAloud

ReadAloud is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. ReadAloud supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, ReadAloud ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Ausha

Ausha is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Ausha integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Ausha helps organizations maintain robust websites that meet user expectations and technical requirements.

Video

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site