Loom
Loom is an asynchronous video messaging tool, owned by Atlassian, that lets people record their screen and camera and share the result through a link or an embedded player. When a Loom video is embedded on a website, the player can set cookies and record view analytics such as plays and watch time, along with the IP address and device information. On European sites these analytics cookies require prior consent.
What does Loom do?
What Loom is
Loom is an asynchronous video messaging tool now owned by Atlassian. People record their screen, camera, or both and share the recording through a link or an embedded player. It is widely used for product walkthroughs, support, and internal communication, and its videos often appear embedded on public websites.
What data and cookies it collects
When a Loom video is embedded, the player can set cookies and use analytics tooling to record views, watch time, and engagement, and it processes the IP address and device and browser information. For viewers who are logged into Loom, activity can be linked to their account. These cookies support analytics rather than the core ability to play the video.
GDPR and ePrivacy implications
The identifiers and view analytics are personal data under the GDPR, and setting cookies on the device falls under the ePrivacy Directive. A cookie that is strictly necessary to play a video the visitor requested may be exempt, but the analytics and engagement tracking are not, so they require prior consent and clear information.
Consent requirements
Where the Loom embed sets analytics cookies, request consent first. The simplest compliant pattern is to load the embed only after the visitor accepts, for example behind a placeholder that explains a third party video will load. Consent must be freely given, specific, informed, and easy to withdraw.
Data transfers outside the EU
Loom and its parent Atlassian process data in the United States, so transfers rely on the EU US Data Privacy Framework or on Standard Contractual Clauses. Review the Atlassian data processing terms and understand which sub processors are involved in delivering and measuring the video.
Practical compliance steps
Use a consent gated placeholder for Loom embeds, sign or accept the data processing terms, and document the processing. Set expectations in your privacy notice, list the Loom cookies in your cookie policy, and review embeds periodically so the policy stays accurate.
Loom and the GDPR
Loom is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR)
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive
Impact assessment (DPIA)
Assess what the embedded Loom player collects, whether viewers can be recognised across sessions, the view analytics retained, and the transfers to the United States. A targeted review helps when Loom embeds appear on many pages.
Sample text for your banner
We embed Loom videos to share recordings with you. The Loom player may set cookies and record viewing statistics such as watch time. These run only after you accept the relevant cookies.
What Loom sets and contacts
- Tracking method
- Embedded video player, JavaScript, cookies, view analytics
- Server location
- United States
- Data transferred outside the EU
- Loom is owned by Atlassian and processes data in the United States. Transfers rely on the EU US Data Privacy Framework or Standard Contractual Clauses.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| connect.sid | Functional | Session | Maintains the Loom session for signed in users during the visit. |
| ajs_anonymous_id | Analytics | 1 year | Anonymous analytics identifier used to measure video engagement. |
| loom_anon_id | Analytics | 1 year | Identifies a viewer so that view analytics can be recorded for the embedded video. |
Third-party domains contacted (3)
loom.comwww.loom.comcdn.loom.com
Frequently asked questions about Loom
Can't find your question? Write to us, we answer fast.
What cookies does an embedded Loom video set?
An embedded Loom player can set a session cookie and analytics identifiers used to measure views and engagement. The analytics cookies are not strictly necessary to play the video, so they belong in the analytics category of your consent banner.
Do I need consent for Loom embeds?
Yes, where the embed sets analytics cookies. A cookie strictly necessary to play a video the visitor requested can be exempt, but the view analytics require prior consent under the ePrivacy Directive and the GDPR.
What is the legal basis for Loom?
Consent under Article 6(1)(a) of the GDPR is the basis for the analytics that Loom embeds set. A strictly necessary playback cookie can rely on the ePrivacy exemption.
Does Loom transfer data to the United States?
Yes. Loom is owned by Atlassian and processes data in the United States, so transfers rely on the EU US Data Privacy Framework or Standard Contractual Clauses.
Is a DPIA needed for Loom?
A full DPIA is rarely required for occasional embeds, but a short review is wise when Loom appears across many pages or audiences. Document the analytics, retention, and transfers.
How do I embed Loom compliantly?
Load the Loom embed only after consent, ideally behind a placeholder that explains a third party video will load. Accept the Atlassian processing terms and describe the cookies in your policy.
Are there alternatives to Loom?
Alternatives include Vimeo, YouTube privacy enhanced mode, and self hosted players. A privacy first embed or a static thumbnail that links out can avoid setting analytics cookies until clicked.
How do I update my cookie policy for Loom?
List the Loom cookies with their purpose and duration, label the analytics ones accordingly, name Loom and Atlassian as recipients, and mention the United States transfer. Update it when you add or remove embeds.
asciinema
Asciinema is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Asciinema integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Asciinema helps organizations maintain robust websites that meet user expectations and technical requirements.
Vidzflow
Vidzflow is a user preference and personalization service that helps websites deliver customized experiences based on individual visitor settings and choices. It manages preferences for content display, communication channels, and interaction styles. Vidzflow integrates with website platforms to remember and apply user choices consistently across sessions. With privacy-compliant preference storage, Vidzflow enhances satisfaction by ensuring tailored browsing experiences for every visitor.
Voomly
Voomly is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Voomly supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Voomly ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Kaltura
Kaltura is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Kaltura integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Kaltura helps organizations maintain robust websites that meet user expectations and technical requirements.
Fireside
Fireside is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Fireside offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Fireside empowers organizations to optimize strategy and maximize return on investment.
Annoto
Annoto is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Annoto integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Annoto helps organizations maintain robust websites that meet user expectations and technical requirements.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.