Guides Tool check
YouTube embeds & GDPR: nocookie + consent instead of tracking
An embedded YouTube video looks harmless - but it loads Google tracking as soon as the page opens. Here's how to do it right.
What happens with the embed
The standard embed loads resources from YouTube and sets cookies for Google – often before anyone has even clicked 'Play'.
This means that visitors are tracked without having given their consent. On homepages and in blog posts, this is a classic, often unnoticed breach.
Why "nocookie" alone is not enough
The domain youtube-nocookie.com reduces tracking, but does not disable it completely – data continues to be transmitted as soon as the page loads.
nocookie is a good step, but it doesn’t replace consent. One thing is certain: don’t load anything from YouTube until you’ve given your consent.
The clean solution
A 'consent gate' or the 'two-click solution': first a thumbnail image appears; the video only loads once active consent has been given.
BlueOcean Privacy automatically blocks YouTube embeds until consent is given. This ensures the site remains compliant with data protection regulations, and the video can be viewed with a single click.
Check your pages
Not sure where videos load before consent?
The free BlueOcean scan highlights YouTube and Google requests before consent is given – so you can make targeted improvements.
Let's take a quick look at your sites
In a 15-minute call you’ll see where your client sites stand — and how to secure them effortlessly.
FAQ
Are YouTube embeds GDPR-compliant?
Only if nothing from YouTube is loaded before consent is given (Consent-Gate / two-click) and its use is mentioned in the privacy policy.
Does youtube-nocookie.com make the integration legal?
It reduces tracking, but does not replace consent. As soon as the embed loads, data is sent to Google.
How do I embed videos securely?
With a thumbnail that only reloads the video once consent has been given – a consent tool handles this automatically.