Wistia
Wistia is a US-based video hosting and marketing platform designed for business video. It provides detailed viewer analytics (engagement heatmaps showing exactly which parts of a video are watched, replayed, or skipped), email capture forms within videos, CRM integrations, and A/B testing for video thumbnails. Wistia's marketing analytics capabilities make it more GDPR-complex than simple video embeds. Consent is required for tracking cookies, viewer analytics, and email capture. All data is processed in the US requiring SCCs.
What does Wistia do?
What is Wistia?
Wistia is a video hosting and marketing platform designed for business and brand video. It differentiates from YouTube and Vimeo with its marketing-focused features: detailed viewer engagement analytics (heatmaps showing exactly which parts of a video viewers watch, skip, or rewatch), Turnstile email capture gates, CTA overlays, A/B testing of video thumbnails, and native integrations with HubSpot, Marketo, and other marketing platforms.
GDPR and Wistia's marketing features
Wistia's marketing analytics capabilities create more GDPR complexity than simple video hosting. When Wistia identifies a viewer (via email captured through Turnstile or Mailchimp/HubSpot integration), it links all their viewing behaviour to their profile. This constitutes individual-level marketing profiling. Consent is required for the tracking cookies, email capture, and marketing-integrated viewing analytics.
Email capture (Turnstile) and consent
Wistia's Turnstile feature gates video content behind an email capture form. This is a marketing lead capture mechanism. Under GDPR, collecting an email via Turnstile requires a valid legal basis, typically consent with a clear opt-in for marketing communications. Pre-filling or hard-requiring email before playing a video that's not clearly marked as marketing may be challenged as conditioning access to content on consent, which GDPR considers non-freely-given.
Practical compliance steps
Block Wistia embeds via CMP until media/analytics consent. Sign the Wistia DPA. Disclose Wistia viewer analytics in your privacy policy. For Turnstile: use it for optional content gating with clear GDPR-compliant consent language, not as a condition for accessing essential content. Configure CRM integrations so viewer data only syncs for known contacts with documented consent.
Wistia and the GDPR
Wistia is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR) required for Wistia tracking cookies and viewer analytics under the ePrivacy Directive. Email capture forms within Wistia videos require separate consent for marketing follow-up.
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive, SCCs for US data transfers
Impact assessment (DPIA)
A DPIA is recommended for Wistia deployments using viewer engagement analytics combined with CRM integration, as this enables building detailed individual profiles of video engagement behaviour linked to known contacts.
Sample text for your banner
This page contains an embedded Wistia video. Wistia uses cookies to track your viewing behaviour and may transfer data to the US. By accepting media cookies, you allow Wistia to load and record your engagement with this video.
What Wistia sets and contacts
- Tracking method
- Embedded video player, first-party cookies, viewer engagement analytics, heatmaps, email capture, marketing integration
- Server location
- United States (Wistia infrastructure)
- Data transferred outside the EU
- Wistia is a US-based video hosting and marketing platform. All video hosting, viewer analytics, and marketing data are processed on US infrastructure. EU personal data transfers require Standard Contractual Clauses. Wistia provides a GDPR-compliant DPA.
Cookies set (1)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| _wt2 | persistent | 2 years | Wistia visitor tracking identifier for linking video engagement analytics to individual viewer profiles |
Third-party domains contacted (3)
fast.wistia.comfast.wistia.netembedwistia-a.akamaihd.net
Frequently asked questions about Wistia
Can't find your question? Write to us, we answer fast.
Does a Wistia embed require GDPR consent?
Yes. Wistia sets tracking cookies for viewer analytics and engagement measurement. These require consent under the ePrivacy Directive before the Wistia player loads. Block via CMP until media/analytics consent is given.
What data does Wistia collect about video viewers?
Wistia collects play events, pause events, percentage watched, rewatch behaviour, skip patterns, and time-stamped engagement data for each viewer session. For identified viewers (via Turnstile or CRM integration), this data is linked to individual contact profiles.
What is Wistia Turnstile and does it comply with GDPR?
Turnstile is Wistia's email capture feature that gates videos behind a form. For GDPR compliance, Turnstile must include explicit consent language for marketing use of the captured email. Do not use Turnstile as a condition for accessing non-marketing content: this may constitute conditioning access on consent, which GDPR prohibits.
Does Wistia transfer data outside the EU?
Yes. All Wistia data is processed on US infrastructure. SCCs are required. Sign the Wistia Data Processing Agreement from wistia.com/privacy.
What cookies does Wistia set?
Wistia sets _wt2 (viewer tracking, 2 years), wistia-video-progress (playback progress, session), and various analytics cookies. These require consent under the ePrivacy Directive.
How do I integrate Wistia with HubSpot or Marketo compliantly?
Sync Wistia viewer data to CRM only for known contacts who have consented to marketing communications. Do not sync anonymous viewer data to CRM profiles. Configure the integration to only share engagement data for contacts with documented consent.
Do I need a DPIA for Wistia?
Recommended when Wistia is used for marketing analytics with CRM integration. The combination of individual-level video engagement profiling linked to marketing automation constitutes systematic monitoring of individual behaviour.
Are there EU-based alternatives to Wistia?
Vidyard (Canada) provides similar marketing video analytics. For EU-hosted video, Dacast (US-hosted) and Spotlightr (US-hosted) are alternatives. Truly EU-hosted professional video platforms with marketing analytics are limited: most organisations use Wistia with appropriate consent management.
Omny Studio
Omny Studio is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Omny Studio integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Omny Studio helps organizations maintain robust websites that meet user expectations and technical requirements.
Twitch Player
Twitch Player is a video hosting and streaming platform that helps businesses deliver high-quality video content to their audiences. It provides adaptive bitrate streaming, customizable players, and content management tools. Twitch Player supports live streaming, on-demand playback, and video analytics. With CDN-powered delivery and responsive embeds, Twitch Player ensures smooth playback across all devices and network conditions for engaging video experiences.
PeerTube
PeerTube is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. PeerTube integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, PeerTube helps organizations maintain robust websites that meet user expectations and technical requirements.
Muvi
Muvi is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Muvi integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Muvi helps organizations maintain robust websites that meet user expectations and technical requirements.
jPlayer
jPlayer is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. jPlayer supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, jPlayer ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Uplynk
Uplynk is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Uplynk integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Uplynk helps organizations maintain robust websites that meet user expectations and technical requirements.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.