> Does Video.js set cookies? A clear GDPR and ePrivacy guide to consent, data transfers and compliant use of the Video.js HTML5 player for European websites.
>
> Canonical: https://www.flowconsent.com/en/services/video/videojs

Video

# Video.js

Preferences · [Official website](https://videojs.com)

Video.js is an open source HTML5 video player library that sets no cookies of its own, though its CDN delivery and external video providers can introduce cookies and data flows.

[Block Video.js until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=video) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [Video](https://www.flowconsent.com/en/services/video)

- Consent

  Preferences

- Prior consent

  Not required

- Documented cookies

  4

- Third-party domains

  4

- Servers

  Self hosted on the operator server; the public CDN build is served by Fastly from globally distributed edge nodes

Overview

## What does Video.js do?

## What Video.js is

Video.js is a popular open source JavaScript library that provides a customisable HTML5 video player. It can be hosted directly on the operator own server or loaded from the public CDN at vjs.zencdn.net, which is delivered by Fastly. Through plugins it can also play media from external providers such as YouTube and Vimeo.

On its own the Video.js library sets no cookies and contains no tracking. The privacy profile of a given setup therefore depends entirely on how the player is delivered and which video sources it plays.

## What data and cookies it collects

When Video.js is self hosted and plays a local video file, no cookies are set and no personal data leaves the operator infrastructure beyond ordinary access logs. When the player is loaded from the vjs.zencdn.net CDN, the visitor browser contacts Fastly, which may set a load balancing cookie and processes the visitor IP address to deliver the file.

The most significant data flows appear when Video.js plays content from YouTube or Vimeo. These providers set their own cookies, such as YouTube YSC and VISITOR\_INFO1\_LIVE, and receive the visitor IP and viewing data, often for analytics and advertising purposes.

## GDPR and ePrivacy implications

Because the self hosted player sets no cookies, it raises no obligations under Article 5(3) of the ePrivacy Directive by itself. As soon as a CDN cookie or a provider cookie that is not strictly necessary is stored, prior consent is required, and the associated processing of the visitor IP and viewing behaviour needs a legal basis under Article 6 of the GDPR.

Where YouTube or Vimeo are involved, the website operator and the provider may be joint controllers for the data collected on embedding, which should be reflected in the privacy notice.

## Consent requirements

No consent is needed to run a self hosted Video.js player with local media. Consent is required before loading external provider content that sets cookies, before using the CDN if it sets non essential cookies, and before any analytics plugin runs. A common compliant pattern is a click to load placeholder that triggers the embed only after the visitor accepts.

## International data transfers

Self hosting within the EEA keeps all data local. Using the Fastly CDN or YouTube and Vimeo may route the visitor IP and request data to servers in the United States. For such transfers the operator should rely on the EU US Data Privacy Framework or standard contractual clauses, and verify that the provider participates in a valid transfer mechanism.

## Practical compliance steps

Prefer self hosting Video.js and the media files within the EEA. If you use YouTube, enable privacy enhanced mode by loading from youtube nocookie.com, and gate every external embed behind consent with a click to load placeholder. Document all third party providers in your privacy notice and cookie policy and review the setup whenever you add a plugin.

Compliance

## Video.js and the GDPR

- Legal basis

  Legitimate interest (Art. 6(1)(f) GDPR) for the self hosted player; consent (Art. 6(1)(a) GDPR) where external providers or CDN cookies are involved

- Risk level

  low

- Applicable regulations

  GDPR, ePrivacy Directive

### Impact assessment (DPIA)

Self hosted Video.js sets no cookies and processes no personal data beyond standard server logs, so a data protection impact assessment is usually unnecessary. A DPIA becomes relevant when the player is combined with external providers such as YouTube or Vimeo, or when behavioural analytics plugins are added, since these may involve profiling and third country transfers.

### Sample text for your banner

> This page can embed video content delivered through external providers that may set cookies and process your data outside the EU. Video is loaded only after you give your consent. You can change or withdraw your choice at any time in the cookie settings.

Cookies and trackers

## What Video.js sets and contacts

- Tracking method

  Client side HTML5 video player library; sets no cookies of its own. Cookies arise from the CDN that delivers it or from external video providers such as YouTube and Vimeo

- Server location

  Self hosted on the operator server; the public CDN build is served by Fastly from globally distributed edge nodes

- Cookieless mode available

  Yes

### Cookies set (4)

| Name                 | Type               | Duration | Purpose                                                                                                                                                                              |
| -------------------- | ------------------ | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| fastly\_balancer     | Strictly necessary | Session  | Load balancing cookie that may be set by the Fastly CDN when Video.js is loaded from vjs.zencdn.net, used to route the request to a server. No own cookie is set by Video.js itself. |
| YSC                  | Marketing          | Session  | Set by YouTube when an embedded video is played, used to remember user interactions with the player and to measure views. Requires prior consent.                                    |
| VISITOR\_INFO1\_LIVE | Marketing          | 6 months | Set by YouTube to estimate bandwidth and to personalise the player experience and advertising. Appears only when YouTube content is embedded. Requires prior consent.                |
| vuid                 | Analytics          | 2 years  | Set by Vimeo when an embedded Vimeo video is used, to collect analytics data on how the visitor uses videos. Requires prior consent.                                                 |

### Third-party domains contacted (4)

- `vjs.zencdn.net`
- `youtube-nocookie.com`
- `youtube.com`
- `player.vimeo.com`

Questions

## Frequently asked questions about Video.js

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### Which cookies does Video.js set?

Video.js sets no cookies of its own. Cookies only appear from the surrounding setup: the Fastly CDN at vjs.zencdn.net may set a load balancing cookie, and external providers such as YouTube and Vimeo set tracking cookies like YSC and VISITOR\_INFO1\_LIVE when their content is played.

### Is consent required for Video.js?

A self hosted Video.js player with local media needs no consent. Consent is required before loading external provider content that sets cookies, before using a CDN that sets non essential cookies, or before any behavioural analytics plugin runs.

### What is the legal basis for processing with Video.js?

For a self hosted player the operator can rely on legitimate interest under Article 6(1)(f) of the GDPR, since no cookies are set. Where external providers or non essential CDN cookies are used, consent under Article 6(1)(a) of the GDPR and Article 5(3) of the ePrivacy Directive is the appropriate basis.

### Does Video.js transfer data outside the EU, to the US in particular?

Self hosted Video.js within the EEA transfers nothing abroad. Using the Fastly CDN or YouTube and Vimeo can send the visitor IP and request data to servers in the United States, which requires a valid transfer mechanism such as the EU US Data Privacy Framework or standard contractual clauses.

### Is a DPIA needed for Video.js?

A DPIA is usually unnecessary for a self hosted player because it processes no personal data beyond server logs. It becomes relevant when the player is combined with external providers or analytics plugins that involve profiling or systematic third country transfers.

### How do I implement Video.js compliantly?

Self host the player and media within the EEA, and gate external embeds behind consent using a click to load placeholder. For YouTube use the youtube nocookie.com domain, document every provider in your privacy notice, and avoid loading the CDN build if a self hosted copy is feasible.

### What are the alternatives to Video.js?

Privacy friendly alternatives include the native HTML5 video element with self hosted files, Plyr, and self hosted players that avoid external providers. Hosting media within the EEA and avoiding YouTube or Vimeo embeds is the strongest way to reduce cookies and transfers.

### How do I update the cookie policy for Video.js?

List only the cookies actually present in your setup. For self hosted local media there are none. If you use the CDN add the Fastly cookie, and if you embed YouTube or Vimeo list their cookies with purpose and duration, updating the policy whenever the configuration changes.

Same category

## More services: Video

[See the whole category](https://www.flowconsent.com/en/services/video)

### [Myhkw player](https://www.flowconsent.com/en/services/video/myhkw-player)

[Myhkw player is a video hosting and streaming platform that helps businesses deliver high-quality video content to their audiences. It provides adaptive bitrate streaming, customizable players, and content management tools. Myhkw player supports live streaming, on-demand playback, and video analytics. With CDN-powered delivery and responsive embeds, Myhkw player ensures smooth playback across all devices and network conditions for engaging video experiences.](https://www.flowconsent.com/en/services/video/myhkw-player)

[Preferences](https://www.flowconsent.com/en/services/video/myhkw-player)

·

### [STN Video](https://www.flowconsent.com/en/services/video/stn-video)

[STN Video is a video hosting and streaming platform that helps businesses deliver high-quality video content to their audiences. It provides adaptive bitrate streaming, customizable players, and content management tools. STN Video supports live streaming, on-demand playback, and video analytics. With CDN-powered delivery and responsive embeds, STN Video ensures smooth playback across all devices and network conditions for engaging video experiences.](https://www.flowconsent.com/en/services/video/stn-video)

[Marketing](https://www.flowconsent.com/en/services/video/stn-video)

·

### [jPlayer](https://www.flowconsent.com/en/services/video/jplayer)

[jPlayer is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. jPlayer supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, jPlayer ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/video/jplayer)

[Preferences](https://www.flowconsent.com/en/services/video/jplayer)

·

### [Dyte](https://www.flowconsent.com/en/services/video/dyte)

[Dyte is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Dyte provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Dyte helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/video/dyte)

[Marketing](https://www.flowconsent.com/en/services/video/dyte)

·

### [Widde](https://www.flowconsent.com/en/services/video/widde)

[Widde is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Widde supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Widde ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/video/widde)

[Video](https://www.flowconsent.com/en/services/video/widde)

·

### [Uplynk](https://www.flowconsent.com/en/services/video/uplynk)

[Uplynk is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Uplynk integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Uplynk helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/video/uplynk)

[Video](https://www.flowconsent.com/en/services/video/uplynk)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)
