Free whiteglove setup from a ConsentStack Concierge
Bubble

Bubble

Bubble is a no-code web application builder. Its scripts render complete web application interfaces including frontend logic, form handling, user authentication, and database interactions. Pages built with Bubble set session cookies and process user input data directly within the browser environment.

Back to Vendor Library

Overview

Bubble is a no-code web application platform that enables users to build and deploy full-featured web applications without writing code. Applications built on Bubble are hosted on Bubble's infrastructure and served from bubbleapps.io or custom domains. Bubble's runtime JavaScript handles all application logic — form submissions, database reads/writes, user authentication, and interactive UI behavior — within the visitor's browser. This makes Bubble the underlying infrastructure of entire web applications rather than a single embedded widget.

What This Script Does

On pages built with Bubble, the Bubble runtime script handles:

  • Application rendering: Delivers the complete application UI, rendering all visual elements, layouts, and dynamic content from the Bubble database
  • User authentication: Manages login sessions using session cookies tied to Bubble's authentication system; authenticated users have session tokens stored in cookies or localStorage
  • Data operations: Makes API calls to Bubble's backend for all data reads and writes, transmitting user-entered data to the Bubble database on the application's behalf
  • Form processing: Captures form submissions and applies configured workflows (creating database records, sending emails, triggering external API calls)
  • Workflow execution: Runs configured conditional logic, event triggers, and backend workflows in response to user interactions

As the application's infrastructure, Bubble processes all personal data that users enter into the application — the data model and privacy practices are entirely determined by the application developer.

Consent & Compliance

  • Consent Category: Essential and Functional
  • GDPR/ePrivacy: Bubble's runtime scripts are the application itself — blocking them renders the application non-functional. Authentication session cookies are strictly necessary. Privacy obligations for a Bubble-built application fall on the application developer: they are the data controller for any personal data collected through the application, and Bubble is the data processor. Ensure a DPA is in place with Bubble.
  • CCPA: Personal data collected through Bubble applications is the application developer's responsibility to manage under CCPA.

Should You Block This Without Consent?

No. Bubble's runtime is the application infrastructure. Blocking it would make the application non-functional. Application developers building on Bubble are responsible for privacy compliance of their applications, including implementing appropriate consent mechanisms for any non-essential tracking or analytics tools added to their Bubble applications.

Is Bubble GDPR compliant?

Bubble typically loads functional trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Bubble can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Bubble, not on Bubble itself.

Visit website

Consent Categories

EssentialFunctional

Also Known As

bubble.iobubble no-codebubble web app builderbubble cookiesbubble application platformno-code builder privacy

Industries

Programming and Developer SoftwareComputers Electronics and Technology

Tracked Domains (1)

bubble.ioEssential

bubble.io is an essential domain operated by Bubble, used to keep the site working, including security, load balancing, and sessions.

Frequently Asked Questions

Related Vendors

AfterSell
AfterSell
AfterSell is a Shopify post-purchase upsell application. Its scripts display targeted upsell and cross-sell offers on order confirmation and thank-you pages, track which offers are viewed and accepted, and set cookies to associate conversions with the original purchase.
Freshsales
Freshsales
Freshsales is a CRM platform by Freshworks. Its scripts track website visitor behavior including page views, button clicks, and form interactions. It sets persistent cookies for visitor identification and lead scoring, sending browsing activity data to Freshsales servers for sales pipeline management.
ALTCHA
ALTCHA
ALTCHA is an open-source CAPTCHA alternative that uses proof-of-work challenges for bot protection. Its scripts present computational puzzles to verify human visitors without setting tracking cookies, collecting personal data, or relying on third-party services.
Metomic
Metomic
Metomic is a data privacy and consent management platform. Its scripts scan web pages for cookies and third-party trackers, display consent banners to visitors, and block or allow other scripts based on recorded consent choices. It stores visitor preferences in cookies to persist consent decisions.
Axeptio
Axeptio
Axeptio is a cookie consent management platform based in France. Its scripts display interactive consent banners, record visitor cookie preferences, and conditionally load or block third-party scripts based on consent choices. Visitor decisions are stored in cookies to maintain preferences across visits.
Postmark
Postmark
Postmark is a transactional email delivery service built for reliable inbox placement. It operates as a backend API for sending emails such as password resets, receipts, and notifications. Postmark has minimal browser-side presence on customer websites, with no tracking scripts or cookies set in visitors' browsers.

Manage consent for Bubble

ConsentStack automatically detects and manages Bubble trackers so your site stays compliant with global privacy regulations.

Get started free