Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
SproutVideo is a professional video hosting platform, not a preference service. It hosts and streams video and provides an embeddable player together with detailed viewing analytics. The embedded player sets cookies and collects data such as plays, watch time and the visitor IP address. As analytics and marketing cookies from a United States vendor, it normally requires consent in the European Union and involves transfers outside the European Economic Area.
SproutVideo is a professional video hosting platform, not a user preference or personalisation service. It stores, encodes and streams video and gives businesses an embeddable player along with security controls, marketing tools and detailed viewing analytics. Organisations use it to host marketing videos, training material and gated content while keeping control over branding and access.
The embedded SproutVideo player sets cookies and uses JavaScript to measure viewing, recording data such as plays, watch time, play rate, the parts of a video watched and the visitor IP address. Where marketing features such as lead capture or engagement tracking are used, the player can build a view of individual viewer behaviour. The IP address and viewing data are personal data.
The cookies set by the embedded player for analytics and marketing are not strictly necessary, so storing and reading them is subject to consent under Article 5(3) of the ePrivacy Directive. Recording the IP address and viewing behaviour is processing of personal data under the GDPR, with you acting as controller and SproutVideo as processor. Engagement tracking that profiles individual viewers increases your obligations.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
You should obtain prior consent before the SproutVideo embed sets analytics or marketing cookies. Place the embed behind your consent management platform so it only loads after the user accepts the relevant category, and ensure that a refusal prevents non essential cookies and tracking. The consent must be freely given, specific and informed, and as easy to withdraw as to give.
SproutVideo is a United States company, so video hosting and analytics data is processed in the United States. This is a transfer of personal data outside the European Economic Area and must be covered by an appropriate safeguard, typically Standard Contractual Clauses and, where the vendor is certified, the EU US Data Privacy Framework. Record the transfer and the safeguard in your processing records.
Sign a data processing agreement with SproutVideo, gate the embed behind consent, list the player cookies in your cookie policy and inform users that viewing data is processed in the United States. Set a retention period, limit unnecessary engagement tracking, and document your lawful basis and the transfer mechanism in your records of processing activities.
Websites using SproutVideo must obtain user consent under GDPR regulations.
DPIA considerations
A full DPIA is not always mandatory for standard video hosting, but run a screening assessment. Consider the viewing data and IP addresses collected, the United States transfer and whether engagement tracking profiles individual viewers. Large scale or marketing oriented tracking that builds viewer profiles can require a formal DPIA under Article 35 GDPR.
Sample consent text
We use SproutVideo to host and play video on this site and to measure engagement such as watch time. This sets cookies and processes viewing data in the United States. We only do this with your consent, and you can withdraw it at any time.
Third-party domains contacted
sproutvideo.comvids.iosproutvideo.s3.amazonaws.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| sproutvideo session | Analytics | Session | Identifies a viewing session to measure plays and watch time for the embedded video. |
| sproutvideo viewer | Analytics and marketing | Up to 1 year | Recognises a returning viewer to track engagement across visits when marketing features are enabled. |
SproutVideo uses cookies for user preferences — inform visitors with a consent banner.
The embedded SproutVideo player sets cookies and uses JavaScript to measure viewing, recording plays, watch time, play rate, the parts of a video watched and the visitor IP address. With marketing features it can track individual viewer engagement.
Yes, when the embed sets analytics or marketing cookies. These are not strictly necessary, so consent is required under the ePrivacy rules before they are set, and the processing of IP and viewing data needs a lawful basis under the GDPR, in practice consent.
Storing and reading the analytics and marketing cookies relies on consent under Article 5(3) ePrivacy, and processing the viewing data relies on consent under Article 6(1)(a) GDPR. Legitimate interest is difficult to rely on given the US transfer and engagement tracking.
Yes. SproutVideo is a United States company, so video hosting and analytics data is processed in the US. The transfer must rely on Standard Contractual Clauses and, where applicable, the EU US Data Privacy Framework.
Not always for standard hosting, but run a screening assessment. If you use engagement tracking that profiles individual viewers at scale, or combine it with marketing systems, a formal DPIA under Article 35 GDPR may be required.
Sign a data processing agreement, gate the embed behind your consent platform, pass consent state, list the player cookies in your cookie policy, set a retention period and document the US transfer mechanism and your lawful basis.
Alternatives include Vimeo, Wistia, Brightcove, Vidyard and self hosted players. EU hosted or self hosted options can reduce transfer concerns, but any analytics or marketing tracking still requires consent.
List the SproutVideo player cookies by purpose and duration, state that they support video analytics and marketing, explain that viewing data is processed in the United States and tell users how to withdraw consent.