> SoundCloud embed cookies, GDPR consent for audio players, ePrivacy duties, click to load placeholders, EU-US Data Privacy Framework status and EEA rules. > > Canonical: https://www.flowconsent.com/en/services/video/soundcloud Video # SoundCloud Preferences · [Official website](https://developers.soundcloud.com/docs/api/html5-widget) SoundCloud is a UK based music and audio streaming platform that publishers commonly embed on websites and blogs via the SoundCloud player iframe. The embed loads third party cookies and the SoundCloud advertising stack on the publisher page, even when the visitor does not press play. [Block SoundCloud until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=video) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Video](https://www.flowconsent.com/en/services/video) - Consent Preferences - Prior consent Required - Documented cookies 6 - Third-party domains 6 - Servers SoundCloud Limited (London, United Kingdom) with cloud infrastructure on Amazon Web Services in Ireland and the United States Overview ## What does SoundCloud do? ## **What is SoundCloud** SoundCloud is a music and audio streaming platform operated by SoundCloud Limited from London. The product is best known for the iframe player that publishers, journalists and podcasters embed on their websites. The embed loads w\.soundcloud.com plus a JavaScript widget, and triggers the SoundCloud advertising and personalisation stack as soon as the iframe is included on the page. ## **Cookies and tracking technologies** The SoundCloud embed sets third party cookies on the soundcloud.com domain: sc\_anonymous\_id (anonymous visitor identifier), datadome (anti bot challenge), moe\_uuid (Moengage messaging) and various ad personalisation cookies when the SoundCloud user is logged in. The embed also pings the SoundCloud APIs even when playback has not started. ## **GDPR and ePrivacy implications** SoundCloud Limited is the controller for the data collected through the embed. The CNIL, the DSK and the AEPD treat audio video embeds the same way as YouTube classic embeds: prior, freely given, specific, informed and unambiguous consent is required under Article 5(3) ePrivacy. Joint controllership with the publisher may apply for analytics events triggered on the publisher page. ## **Consent requirements** Replace the auto loaded iframe with a click to load placeholder when no consent is granted. After consent, inject the iframe dynamically. A consent management platform should block the SoundCloud widget script on the social media or marketing category, similar to YouTube and Spotify embeds. The standard SoundCloud embed does not offer a privacy enhanced mode comparable to youtube-nocookie.com. ## **Data transfers outside the EEA** SoundCloud Limited is established in the United Kingdom (UK GDPR adequacy applies for EU EEA transfers). Application infrastructure runs on AWS in Ireland and the United States. AWS US regions are covered by the EU US Data Privacy Framework adequacy decision. The SoundCloud DPA includes Standard Contractual Clauses as a fallback for any non DPF subprocessor. ## **Practical compliance steps** Use a click to load placeholder for every SoundCloud embed, gate the script behind a consent management platform on the marketing category, document the embedding in the cookie policy with the SoundCloud cookies list, and offer a fallback contact link to soundcloud.com so visitors who refuse consent can still listen externally. Compliance ## SoundCloud and the GDPR SoundCloud is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis The SoundCloud embed sets third party advertising and analytics cookies (sc\_anonymous\_id, datadome, etc.) before any visitor interaction. Article 6(1)(a) GDPR and Article 5(3) ePrivacy require prior explicit consent. Without consent, the embed should be replaced by a click to load placeholder. - Risk level medium - Applicable regulations GDPR, UK GDPR, ePrivacy Directive, EU US Data Privacy Framework, national cookie laws (TTDSG, LCEN, LSSI), German GEMA collective rights agreements ### Impact assessment (DPIA) A DPIA is not generally required for the SoundCloud embed at moderate publisher scale. It becomes recommended when SoundCloud is paired with first party visitor profiling, when embedded across an authenticated section of the site, or when the publisher targets minors (audio content for kids). ### Sample text for your banner > This page contains a SoundCloud audio player. SoundCloud (operated by SoundCloud Limited in the UK) drops cookies on your browser to identify you, deliver targeted ads on its platform and measure listening behaviour. The player is loaded only with your consent. Without consent, you can open the audio on soundcloud.com directly. Cookies and trackers ## What SoundCloud sets and contacts - Tracking method iframe and JavaScript embed (w\.soundcloud.com) that loads the SoundCloud player on the publisher page and drops third party cookies tied to the visitor SoundCloud account or device - Server location SoundCloud Limited (London, United Kingdom) with cloud infrastructure on Amazon Web Services in Ireland and the United States - Data transferred outside the EU SoundCloud Limited is established in the United Kingdom (post Brexit, UK GDPR adequacy applies for EU EEA transfers). The platform runs on AWS infrastructure in Ireland (eu-west-1) and the United States. The EU US Data Privacy Framework adequacy for AWS US regions covers the transfers; SCC are included in the SoundCloud DPA. ### Cookies set (6) | Name | Type | Duration | Purpose | | ----------------- | ---- | --------- | -------------------------------------------------------------------------------------------------------------------- | | sc\_anonymous\_id | http | 12 months | Anonymous visitor identifier set by SoundCloud to remember device level analytics when the embed loads. | | sc\_session\_id | http | Session | Player session identifier used by SoundCloud to maintain playback state during the page visit. | | datadome | http | 1 year | Anti bot cookie set by DataDome on behalf of SoundCloud to filter automated traffic on the player. | | sc\_token | http | 1 year | Authentication token set when the visitor is logged into SoundCloud, linking the embed view to a SoundCloud account. | | moe\_uuid | http | 13 months | MoEngage user identifier used in the SoundCloud advertising and engagement stack on monetised tracks. | | sc\_csrf\_token | http | Session | CSRF protection token for interactions with the SoundCloud API from the widget. | ### Third-party domains contacted (6) - `soundcloud.com` - `w.soundcloud.com` - `sndcdn.com` - `api.soundcloud.com` - `api-v2.soundcloud.com` - `events-mobile.soundcloud.com` Questions ## Frequently asked questions about SoundCloud Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does the SoundCloud embed set? The embed sets third party cookies under soundcloud.com: sc\_anonymous\_id (anonymous visitor identifier), datadome (anti bot challenge), moe\_uuid (Moengage messaging) and several advertising personalisation cookies when the visitor is logged in to SoundCloud. ### Does the SoundCloud embed require consent? Yes. The iframe drops third party advertising and analytics cookies before any visitor interaction. Prior, freely given, specific, informed and unambiguous consent under Article 5(3) ePrivacy is required. Use a click to load placeholder before consent. ### What legal basis applies to SoundCloud embeds? Consent under Article 6(1)(a) GDPR is the lawful basis. SoundCloud Limited is the controller for data collected through the embed. Joint controllership with the publisher may apply for analytics events triggered on the publisher page. ### Does SoundCloud transfer data to the United States? Partially. SoundCloud Limited is established in the UK and runs application infrastructure on AWS in Ireland and the United States. AWS US regions are covered by the EU US Data Privacy Framework. Standard Contractual Clauses are included in the SoundCloud DPA as a fallback. ### Is a DPIA required for SoundCloud embeds? A DPIA is not generally required for SoundCloud embeds at moderate scale. It becomes recommended when paired with first party visitor profiling, when used in authenticated sections, or when the audience includes minors (kids audio content). ### How do I implement SoundCloud embeds compliantly? Replace auto loaded iframes with a click to load placeholder, gate the script behind a consent management platform on the marketing or social media category, list SoundCloud cookies in your cookie policy and offer a fallback link to soundcloud.com for visitors who refuse consent. ### Are there alternatives to SoundCloud for embeds? Alternatives include self hosted HTML5 audio players (Plyr, Mediaelement.js), the Spotify embed (similar consent issues), Mixcloud (also consent required) and uploading the audio file directly to your CDN if licensing allows. Server side podcast hosts like Acast and Ausha offer EU based players. ### How do I update my cookie policy for SoundCloud? Add a SoundCloud entry in the social media or marketing category listing sc\_anonymous\_id, datadome, moe\_uuid and other cookies dropped by the embed. Disclose the controller (SoundCloud Limited), the UK and AWS US transfer and link to the SoundCloud privacy notice. Same category ## More services: Video [See the whole category](https://www.flowconsent.com/en/services/video) ### [EasyWebinar](https://www.flowconsent.com/en/services/video/easywebinar) [EasyWebinar is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. EasyWebinar provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, EasyWebinar helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/video/easywebinar) [Marketing](https://www.flowconsent.com/en/services/video/easywebinar) · ### [Tolstoy](https://www.flowconsent.com/en/services/video/tolstoy) [Tolstoy is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Tolstoy enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Tolstoy empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/video/tolstoy) [Marketing](https://www.flowconsent.com/en/services/video/tolstoy) · ### [Dyte](https://www.flowconsent.com/en/services/video/dyte) [Dyte is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Dyte provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Dyte helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/video/dyte) [Marketing](https://www.flowconsent.com/en/services/video/dyte) · ### [Viqeo](https://www.flowconsent.com/en/services/video/viqeo) [Viqeo is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Viqeo supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Viqeo ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/video/viqeo) [Video](https://www.flowconsent.com/en/services/video/viqeo) · ### [Firework](https://www.flowconsent.com/en/services/video/firework) [Firework is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Firework enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Firework empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/video/firework) [Marketing](https://www.flowconsent.com/en/services/video/firework) · ### [Trinity Audio](https://www.flowconsent.com/en/services/video/trinity-audio) [Trinity Audio is an audio and podcast hosting platform providing tools for publishing, distributing, and monetizing audio content online. It supports high-quality streaming, podcast RSS management, and embeddable website players. Trinity Audio offers analytics on listener engagement, episode performance, and audience demographics. With distribution to major directories and customizable player designs, Trinity Audio helps content creators and businesses grow their audio audience.](https://www.flowconsent.com/en/services/video/trinity-audio) [Preferences](https://www.flowconsent.com/en/services/video/trinity-audio) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)