Free whiteglove setup from a ConsentStack Concierge
Directus

Directus

Directus is an open-source headless CMS and data platform that serves structured content via APIs. Its backend delivers content to frontend applications through REST or GraphQL endpoints. Directus does not typically load tracking scripts in the browser, functioning primarily as a server-side content source.

Back to Vendor Library

Overview

Directus is an open-source headless CMS and data platform that exposes structured content through REST and GraphQL APIs. It is primarily a backend service, meaning its presence in a technology stack does not typically result in client-side script execution on end-user browsers. When Directus does appear in a browser context, it is usually because developers have integrated the Directus JavaScript SDK into a frontend application to query content directly from the API.

What This Script Does

Because Directus operates as an API server rather than a tag-injected script, its browser footprint is minimal. When developers use the Directus JS SDK (@directus/sdk), the library makes authenticated fetch requests to the Directus API endpoint—typically a subdomain operated by the site owner, not a third-party domain. No persistent tracking cookies are set by the SDK itself. Session authentication may use short-lived tokens stored in memory or localStorage, but these are scoped to the application and are not shared with external parties. No fingerprinting, behavioral tracking, or advertising identifiers are collected.

Consent & Compliance

Under GDPR and ePrivacy, Directus SDK requests are analogous to first-party API calls—they retrieve content from a server operated by or on behalf of the data controller. No third-party personal data processing occurs. Under CCPA/CPRA, there is no sale or sharing of personal information with Experian or other third parties. Because Directus does not set cookies or collect behavioral data for tracking purposes, it falls into the essential or functional consent category. Consent is not legally required under ePrivacy for first-party technical requests of this nature.

Should You Block This Without Consent?

No. Directus serves as a content delivery mechanism rather than a tracking or advertising tool. Blocking it would typically break content rendering on pages that depend on the Directus API. No user profiling or cross-site tracking is involved.

Is Directus GDPR compliant?

Directus typically loads functional trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Directus can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Directus, not on Directus itself.

Visit website

Consent Categories

EssentialFunctional

Also Known As

directus cmsdirectus headlessdirectus privacydirectus consentdirectus API content

Industries

Computers Electronics and TechnologyProgramming and Developer SoftwareBusiness and Consumer ServicesMarketing and Advertising

Tracked Domains (1)

directus.ioEssential

directus.io is an essential domain operated by Directus, used to keep the site working, including security, load balancing, and sessions.

Frequently Asked Questions

Related Vendors

CHEQ
CHEQ
CHEQ is an ad fraud prevention and go-to-market security platform. Its scripts analyze visitor behavior, device fingerprints, and network signals in real time to detect bot traffic, invalid ad clicks, and fake form submissions, blocking fraudulent interactions before they corrupt analytics data.
LiveRamp
LiveRamp
Marketing attribution and identity resolution platform that enables publishers and advertisers to recognize users without cookies. LiveRamp's Authenticated Traffic Solution script captures hashed email identifiers and resolves them to RampIDs for cross-site audience matching and campaign attribution.
ImageKit
ImageKit
ImageKit is an image CDN and optimization service that serves transformed images from edge servers. Its scripts handle URL-based image transformations including resizing, format conversion, and lazy loading. ImageKit makes network requests to its CDN endpoints but does not typically set tracking cookies.
Clym
Clym
Clym is a privacy compliance and consent management platform. Its scripts display cookie consent banners, store visitor consent preferences in cookies, manage granular consent categories, and facilitate data subject access requests in accordance with GDPR and other privacy regulations.
Google Tag Manager
Google Tag Manager
Google Tag Manager is a tag management system that lets marketers deploy and update analytics and marketing scripts without code changes. The GTM container script loads synchronously in the page head and injects configured tags, triggers, and variables on behalf of other vendors. No data collection of its own — acts as a loader for other scripts.
Axeptio
Axeptio
Axeptio is a cookie consent management platform based in France. Its scripts display interactive consent banners, record visitor cookie preferences, and conditionally load or block third-party scripts based on consent choices. Visitor decisions are stored in cookies to maintain preferences across visits.

Manage consent for Directus

ConsentStack automatically detects and manages Directus trackers so your site stays compliant with global privacy regulations.

Get started free