FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Video

Vimeo

Preferences

Vimeo is a US-based professional video hosting platform used by businesses to embed videos on websites. Standard Vimeo embeds set tracking cookies even when the video is not played. Vimeo provides a privacy-enhanced embed mode (adding ?dnt=1 to the embed URL) that prevents cross-site tracking cookies, significantly reducing GDPR concerns. All data is processed on US infrastructure requiring SCCs. For GDPR compliance, use the dnt=1 embed parameter or block embeds via CMP until functional/media consent is given.

Block Vimeo until consentScan my site
Overview

What does Vimeo do?

What is Vimeo?

Vimeo is a professional video hosting platform used by businesses, creators, and organisations to host, share, and embed video content. Unlike YouTube, Vimeo is ad-free and focuses on professional and creative video. It is widely used for product demos, brand videos, training content, and portfolio work. Videos can be embedded on external websites via iframes, with various privacy and playback options available.

The GDPR issue with standard Vimeo embeds

Standard Vimeo embeds load the Vimeo player from Vimeo's servers, which sets cookies in the visitor's browser even if the visitor never plays the video. These cookies track the visitor across sessions and link viewing behaviour to Vimeo's analytics. Under the ePrivacy Directive, storing identifiers on a user's device for tracking purposes requires consent. Without consent management, a standard Vimeo embed violates GDPR.

The privacy-enhanced embed mode

Vimeo provides a Do Not Track (DNT) embed option activated by adding ?dnt=1 to the embed URL. When dnt=1 is set, Vimeo does not set tracking cookies and does not use the embed for cross-site tracking or audience building. Some session-level processing still occurs for content delivery but without persistent tracking cookies. The dnt=1 parameter significantly reduces GDPR risk and may eliminate the need for consent in many implementations. Verify with your DPO.

Practical compliance steps

Use ?dnt=1 on all Vimeo embeds as the default. If using standard embeds, block via CMP until media/functional consent. Sign the Vimeo DPA. Disclose Vimeo in your privacy policy. For Vimeo Analytics, note that viewer engagement data is processed in the US even with dnt=1. Consider a lazy-load embed approach where the Vimeo iframe only loads when the user explicitly clicks a thumbnail.

Compliance

Vimeo and the GDPR

Vimeo is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR) required for Vimeo embeds that set tracking cookies under the ePrivacy Directive. The privacy-enhanced mode (dnt=1) can reduce consent requirements by preventing cross-site tracking cookies, but some session-level data is still processed.
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive, SCCs for US data transfers

Impact assessment (DPIA)

A DPIA is generally not required for standard Vimeo video embedding. It may become relevant for platforms embedding large numbers of videos with viewer analytics enabled, particularly where viewer identity can be linked to known users.

Sample text for your banner

This page contains a Vimeo embedded video. Vimeo uses cookies and may transfer data to the US. By accepting media cookies, you allow the Vimeo player to load and track engagement. You can also watch this video directly on vimeo.com.
Cookies and trackers

What Vimeo sets and contacts

Tracking method
Embedded video player iframe, first-party cookies, viewer analytics, autoplay tracking, cross-site tracking when DNT not set
Server location
United States (Vimeo infrastructure)
Cookieless mode available
Yes
Data transferred outside the EU
Vimeo is a US-based video hosting platform. All video content and viewer analytics are processed on US infrastructure. EU personal data transfers require Standard Contractual Clauses. Vimeo provides a GDPR-compliant DPA. The privacy-enhanced embed mode (dnt=1 parameter) reduces but does not eliminate data collection.

Cookies set (1)

NameTypeDurationPurpose
vuidpersistent2 yearsVimeo visitor identifier for cross-session analytics, not set when using the dnt=1 embed parameter

Third-party domains contacted (3)

  • player.vimeo.com
  • i.vimeocdn.com
  • f.vimeocdn.com
Questions

Frequently asked questions about Vimeo

Can't find your question? Write to us, we answer fast.

Does a standard Vimeo embed require GDPR consent?

Yes. Standard Vimeo embeds set tracking cookies even when the video is not played. These require consent under the ePrivacy Directive. Either use the dnt=1 privacy mode or block the embed via CMP until media consent is given.

What does the Vimeo dnt=1 parameter do?

Adding ?dnt=1 to the Vimeo embed URL activates Do Not Track mode: Vimeo does not set tracking cookies, does not use the view for cross-site advertising, and does not build audience profiles from the embed. This significantly reduces GDPR risk and may eliminate the need for consent in many cases.

How do I use the dnt=1 parameter in Vimeo embeds?

Add the parameter to your embed URL: https://player.vimeo.com/video/VIDEO_ID?dnt=1. In WordPress and most CMS platforms, paste the full URL including the parameter into the video URL field. Verify no tracking cookies are set by checking browser developer tools.

Does Vimeo transfer data outside the EU?

Yes. Vimeo is a US company. All video hosting and analytics are processed in the US. SCCs are required. Sign the Vimeo DPA available at vimeo.com/legal. Even with dnt=1, some technical data (IP address for content delivery) is processed in the US.

What cookies does a standard Vimeo embed set?

Standard Vimeo embeds set vuid (visitor ID, 2 years) and player (session). With dnt=1 these cookies are not set. The vuid cookie requires consent under the ePrivacy Directive.

Can I embed Vimeo videos without a CMP if I use dnt=1?

Using dnt=1 eliminates the tracking cookie concern. You may not need a consent mechanism specifically for Vimeo with dnt=1, though some session data is still processed for content delivery. Verify with your DPO whether your specific implementation still requires disclosure in your privacy policy (yes) or CMP consent (probably not for dnt=1).

Does Vimeo Analytics require consent?

Vimeo's viewer analytics (play rate, engagement, drop-off) process individual viewer data. For Vimeo Pro/Business accounts using detailed analytics, consent is required. dnt=1 disables Vimeo's tracking-based analytics but basic play counts may still be available.

What is the lazy-load approach for Vimeo embeds?

Instead of embedding the iframe on page load (which triggers cookie setting), display a thumbnail image with a play button. Only load the actual Vimeo iframe when the user clicks the thumbnail. This delays cookie setting until the user actively requests the video, reducing the need for proactive consent.

Same category

More services: Video

See the whole category

Flowplayer

Flowplayer is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Flowplayer integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Flowplayer helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

MyPlay

MyPlay is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. MyPlay integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, MyPlay helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Odeum

Odeum is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Odeum supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Odeum ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Video

Webinaris

Webinaris is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Webinaris enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Webinaris empowers marketing teams to achieve measurable growth.

Marketing

Transistor.fm

Transistor.fm is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Transistor.fm supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Transistor.fm ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

asciinema

Asciinema is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Asciinema integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Asciinema helps organizations maintain robust websites that meet user expectations and technical requirements.

Video

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site