Overview
Apple Maps JS (MapKit JS) is Apple's JavaScript framework for embedding interactive maps into websites. It renders map tiles, location pins, directions, and geographic data using Apple's mapping infrastructure. Sites use it as an alternative to Google Maps, often chosen for its privacy-first design and integration with the Apple ecosystem.
What This Script Does
MapKit JS loads scripts from cdn.apple-mapkit.com and fetches map tile data from Apple's mapping servers. The framework requires a MapKit JS JSON Web Token (JWT) for authentication, which the developer generates server-side and passes to the client. This token authorizes map tile requests but does not identify end users.
When the map renders, the SDK makes network requests to Apple's tile servers to load map imagery, satellite views, and geographic data. If the site uses directions or search features, requests go to Apple's geocoding and routing APIs. These requests include the map's viewport coordinates and any search queries but are not tied to persistent user identifiers.
MapKit JS does not set cookies — neither first-party nor third-party. It does not use localStorage or sessionStorage for tracking. It does not load advertising scripts or participate in any ad network. The only data transmitted to Apple is the geographic context needed to render the requested map view.
Apple's privacy documentation confirms that MapKit JS requests are not associated with Apple IDs or used to build user profiles. Map tile requests are handled by Apple's CDN infrastructure with standard server logs that are not used for tracking purposes.
Consent & Compliance
Apple Maps JS is classified as functional. It provides an interactive map feature that enhances the user experience (e.g., store locators, venue maps, directions) but is not strictly necessary for a website's core operation.
Under the GDPR, MapKit JS has minimal privacy implications. It does not process personal data beyond transient network request metadata (IP addresses in server logs). No consent is required for the map scripts themselves, though organizations embedding maps should note that IP addresses transmitted to Apple's servers constitute personal data processing.
Under the ePrivacy Directive, MapKit JS does not access or store information on the user's device (no cookies, no local storage), so Article 5(3) consent requirements do not apply. The network requests to Apple's servers are standard HTTP requests necessary to deliver the map functionality.
Under CCPA/CPRA, Apple Maps JS does not sell or share personal information. Apple does not use MapKit JS data for advertising or cross-context behavioral profiling.
Should You Block This Without Consent?
No. Apple Maps JS is a functional mapping tool that sets no cookies, performs no tracking, and collects no behavioral data. It is one of the most privacy-friendly mapping solutions available. Blocking it would remove useful map functionality with no privacy benefit to the user.
Is Apple Maps JS GDPR compliant?
Apple Maps JS typically loads functional trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Apple Maps JS can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Apple Maps JS, not on Apple Maps JS itself.
Consent Categories
Also Known As
Industries
Tracked Domains (2)
cdn.apple-mapkit.comFunctionalcdn.apple-mapkit.com is a functional domain operated by Apple Maps JS, used to run site features like chat, video, embeds, and preferences.
mapkit.apple.comFunctionalmapkit.apple.com is a functional domain operated by Apple Maps JS, used to run site features like chat, video, embeds, and preferences.
Frequently Asked Questions
Other Apple Products
Related Vendors
Manage consent for Apple Maps JS
ConsentStack automatically detects and manages Apple Maps JS trackers so your site stays compliant with global privacy regulations.