Bubble

Overview

Bubble is a no-code web application platform that enables users to build and deploy full-featured web applications without writing code. Applications built on Bubble are hosted on Bubble's infrastructure and served from bubbleapps.io or custom domains. Bubble's runtime JavaScript handles all application logic — form submissions, database reads/writes, user authentication, and interactive UI behavior — within the visitor's browser. This makes Bubble the underlying infrastructure of entire web applications rather than a single embedded widget.

What This Script Does

On pages built with Bubble, the Bubble runtime script handles:

• Application rendering: Delivers the complete application UI, rendering all visual elements, layouts, and dynamic content from the Bubble database
• User authentication: Manages login sessions using session cookies tied to Bubble's authentication system; authenticated users have session tokens stored in cookies or localStorage
• Data operations: Makes API calls to Bubble's backend for all data reads and writes, transmitting user-entered data to the Bubble database on the application's behalf
• Form processing: Captures form submissions and applies configured workflows (creating database records, sending emails, triggering external API calls)
• Workflow execution: Runs configured conditional logic, event triggers, and backend workflows in response to user interactions

As the application's infrastructure, Bubble processes all personal data that users enter into the application — the data model and privacy practices are entirely determined by the application developer.

Consent & Compliance

• Consent Category: Essential and Functional
• GDPR/ePrivacy: Bubble's runtime scripts are the application itself — blocking them renders the application non-functional. Authentication session cookies are strictly necessary. Privacy obligations for a Bubble-built application fall on the application developer: they are the data controller for any personal data collected through the application, and Bubble is the data processor. Ensure a DPA is in place with Bubble.
• CCPA: Personal data collected through Bubble applications is the application developer's responsibility to manage under CCPA.

Should You Block This Without Consent?

No. Bubble's runtime is the application infrastructure. Blocking it would make the application non-functional. Application developers building on Bubble are responsible for privacy compliance of their applications, including implementing appropriate consent mechanisms for any non-essential tracking or analytics tools added to their Bubble applications.