DataDome
Bot detection and protection platform that operates as a client-side signal collector. The DataDome script runs behavioral checks in the browser — mouse movement patterns, keystroke timing, JS environment fingerprinting — and submits signals to DataDome's servers to classify traffic as human or automated in real time.
Overview
DataDome is a bot detection and protection platform that runs client-side behavioral analysis to classify traffic as human or automated in real time. It protects sites against scraping, credential stuffing, and other automated attacks.
What This Script Does
The DataDome script runs behavioral checks in the browser — analyzing mouse movement patterns, keystroke timing, scroll behavior, and JavaScript environment characteristics. These signals are submitted to DataDome's servers, which classify the traffic as human or bot in real time. The script sets a cookie to persist the classification result so verified humans are not re-challenged on subsequent requests. It acts as a security layer that may trigger CAPTCHAs or block requests identified as automated.
Consent & Compliance
- Consent Category: Essential
- Applicable Regulations: GDPR, ePrivacy Directive
- Opt-In Required: No — security and fraud prevention are strictly necessary
DataDome provides essential security functionality. The behavioral signals it collects are used exclusively for bot detection, not for marketing, analytics, or user profiling. Under GDPR and ePrivacy, security measures are classified as strictly necessary.
Should You Block This Without Consent?
No. DataDome is essential security infrastructure for bot detection and fraud prevention. Blocking it would leave your site vulnerable to automated attacks. The data it collects is used exclusively for security classification, not user tracking. It is strictly necessary and must load without consent.
Is DataDome GDPR compliant?
DataDome's trackers are classified as essential (strictly necessary), so they are generally exempt from prior consent under the GDPR. You should still list them in your cookie policy and privacy notice so visitors know they are there.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
DataDome's trackers are rarely seen, seen on under 1% of the sites ConsentStack has scanned. Scan your own site to see which of these are firing before consent.
datadome.coEssentialdatadome.co is an essential domain operated by DataDome, used to keep the site working, including security, load balancing, and sessions. Seen on under 1% of scanned sites.
Cookies DataDome Sets (1)
datadomeDataDome bot-mitigation challenge state and risk score for the current visitor.
Frequently Asked Questions
Related Vendors
Manage consent for DataDome
ConsentStack automatically detects and manages DataDome trackers so your site stays compliant with global privacy regulations.