Video.js
Open source HTML5 video player library. It sets no cookies and tracks nothing by default, but loading it from a third party CDN exposes the visitor IP to the CDN operator.
What does Video.js do?
Video.js is a widely used open source HTML5 video player library. It renders video entirely in the visitor browser and, in its default self hosted form, sets no cookies and performs no tracking. The main privacy questions arise from how the library is delivered and which optional integrations are enabled.
What Video.js does
Video.js provides a consistent player skin and controls across browsers and devices. The core library is first party JavaScript that you bundle or host yourself. It does not phone home, profile users or store identifiers, so a plain self hosted setup is cookieless and privacy friendly.
The CDN delivery question
Many sites load Video.js from a public CDN such as jsDelivr or cdnjs. Each such request reveals the visitor IP address and user agent to the CDN operator. German courts have treated comparable third party asset loading, notably Google Fonts served from Google servers, as a processing and transfer event that needs a legal basis. Self hosting the player files avoids this exposure entirely.
Integrations and embedded sources
Video.js can play streams from third party platforms through plugins such as the YouTube tech. When these are enabled, the third party provider may set cookies, build profiles and transfer data outside the EEA. That moves the player from a purely functional tool into territory that requires prior opt in consent under the ePrivacy Directive.
Legal basis and risk
For a self hosted, cookieless player, legitimate interest is a sound basis and the risk is low. Once a third party CDN or an external streaming integration is involved, you should document a legitimate interest assessment for the IP transfer or, for tracking integrations, obtain consent. Risk then ranges from low to medium depending on configuration.
Recommendation
Self host the Video.js files, serve your own video where possible, and gate any external embeds behind a consent step. This keeps the player cookieless, avoids leaking visitor IP addresses to third parties and keeps your privacy policy simple and accurate.
Video.js and the GDPR
- Legal basis
- Legitimate Interest
- Risk level
- low
- Applicable regulations
- GDPR, ePrivacy Directive
Impact assessment (DPIA)
A full DPIA is rarely required for a self hosted Video.js player, because the library sets no cookies and performs no tracking. A documented assessment becomes useful when the player is loaded from a third party CDN, since the visitor IP and user agent reach the CDN operator, or when integrations such as the YouTube tech are enabled, which introduce third party tracking and possible transfers outside the EEA.
Sample text for your banner
This site uses the Video.js player to show video content. The core player runs in your browser and sets no cookies. Where video is embedded from third party platforms, those providers may set cookies and process your data; we ask for your consent before loading them.
What Video.js sets and contacts
- Tracking method
- No tracking by default; client side HTML5 video player. Tracking only appears via optional integrations (for example the YouTube tech) or when assets are loaded from a third party CDN, which exposes the visitor IP and user agent to the CDN operator.
- Server location
- Self hosted on the publisher own infrastructure when bundled; otherwise served from the chosen CDN edge (often global, may include the United States).
- Cookieless mode available
- Yes
- Data transferred outside the EU
- Video.js itself transfers no data. If the library is loaded from a public CDN such as jsDelivr or cdnjs, the visitor IP and user agent reach the CDN operator, whose edge nodes may sit outside the EEA, including the United States. Optional integrations such as the YouTube tech also send data to those providers.
Third-party domains contacted (5)
vjs.zencdn.netcdn.jsdelivr.netcdnjs.cloudflare.comunpkg.comwww.youtube.com
Frequently asked questions about Video.js
Can't find your question? Write to us, we answer fast.
Does Video.js set cookies?
No. The core Video.js library is client side JavaScript and sets no cookies of its own. Cookies only appear if you enable a third party streaming integration, such as embedding YouTube, where the external provider sets them.
Is consent required to use Video.js?
For a self hosted, cookieless player no prior consent is needed. Consent becomes necessary when you embed third party sources that set cookies or track users, because those fall under the ePrivacy opt in rule.
What is the legal basis for Video.js?
A self hosted player can rely on legitimate interest, since it only delivers functionality. If you load it from a third party CDN, document that legitimate interest for the IP transfer; tracking integrations require consent instead.
Does Video.js transfer data outside the EEA?
The library itself does not. If served from a public CDN such as jsDelivr or cdnjs, the visitor IP and user agent reach the CDN operator, whose edge nodes may sit in the United States. Streaming integrations add further transfers.
Is a DPIA needed for Video.js?
Usually not for a plain self hosted player. A short assessment is sensible if you load it from a third party CDN or enable tracking integrations, since those involve IP transfers or profiling.
How do I use Video.js compliantly?
Self host the player files instead of loading from a public CDN, serve your own video where possible, and place any external embeds behind a consent gate so no third party loads before the visitor agrees.
What are the alternatives to Video.js?
Other privacy friendly options include Plyr and the native HTML5 video element. All of them are cookieless when self hosted; the main difference is features and styling rather than tracking behaviour.
How should I update my privacy policy for Video.js?
If self hosted, note that a cookieless video player is used and sets no cookies. If you load it from a CDN, mention the CDN operator and the IP transfer; if you embed external video, list those providers and their cookies.
Omny Studio
Omny Studio is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Omny Studio integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Omny Studio helps organizations maintain robust websites that meet user expectations and technical requirements.
Viqeo
Viqeo is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Viqeo supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Viqeo ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Demio
Demio is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Demio supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Demio ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Uplynk
Uplynk is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Uplynk integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Uplynk helps organizations maintain robust websites that meet user expectations and technical requirements.
Colbass
Colbass is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Colbass integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Colbass helps organizations maintain robust websites that meet user expectations and technical requirements.
Trinity Audio
Trinity Audio is an audio and podcast hosting platform providing tools for publishing, distributing, and monetizing audio content online. It supports high-quality streaming, podcast RSS management, and embeddable website players. Trinity Audio offers analytics on listener engagement, episode performance, and audience demographics. With distribution to major directories and customizable player designs, Trinity Audio helps content creators and businesses grow their audio audience.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.