Disqus

Overview

Disqus is an embeddable comment platform used by millions of blogs, news sites, and content publishers to add community discussion features without building commenting infrastructure. While the comment functionality is its primary value proposition, Disqus also operates its own advertising network (Disqus Ads) that runs within the comment widget — making it a hybrid functional/marketing vendor. The advertising revenue model means Disqus bundles significant tracking infrastructure alongside the commenting feature.

What This Script Does

Comment Widget Initialization

• Loads a heavyweight JavaScript bundle from disqus.com CDN: https://<shortname>.disqus.com/embed.js
• Renders a full comment thread interface: post composition, threaded replies, upvote/downvote, social sharing, and moderation tools
• Fetches existing comments from Disqus's API for the current page (matched by URL or disqus_identifier)
• Authenticates logged-in Disqus users via SSO or Disqus accounts

Advertising Network

• Disqus Ads (enabled by default on free plans) serves targeted display advertisements within the comment widget
• Ad targeting uses behavioral data from Disqus's cross-site tracking network — Disqus tracks users across all sites running its comment widget
• Ad impressions and clicks are tracked and monetized by Disqus/Zeta Global (Disqus's parent company)

Cookies Set

• disqus_unique — persistent cross-site visitor identifier set on .disqus.com; used for behavioral ad targeting across all Disqus-enabled sites; third-party, ~1 year
• __jid — Disqus session identifier; session
• G_ENABLED_IDPS — Google social login state
• __utmz, __utma — legacy Google Analytics cookies if Disqus uses GA internally
• Zeta Global DSP cookies may be set as part of Disqus's integration with its parent company's advertising platform

Behavioral Tracking

• Tracks page scrolls, comment reads, time spent reading, and user engagement within the widget
• Builds behavioral profiles from cross-site activity (pages visited, topics read, comment interactions) across the entire Disqus publisher network
• Data is shared with Zeta Global's advertising data platform and potentially other advertising partners

Script Payload Size

• The Disqus embed script is notably large (200KB+ uncompressed), contributing to page performance impact
• The script initializes numerous sub-modules for analytics, ads, social integrations, and real-time updates

Consent & Compliance

Consent category: Functional / Marketing

Disqus is a mixed-purpose vendor. The commenting functionality is functional; the advertising and behavioral tracking are marketing. Under GDPR, the persistent disqus_unique cross-site identifier and advertising targeting require explicit consent. The ePrivacy Directive requires consent for the advertising cookies and behavioral tracking. Critically, because the advertising components are bundled into the same script as the commenting feature, the tracking cannot be easily separated on free plans. Under CCPA, Disqus's cross-site behavioral data collection and sharing with advertising partners constitutes "selling" or "sharing" of personal information, triggering opt-out rights. The Belgian DPA and UK ICO have cited bundled consent (consent to tracking as a condition of service features) as a GDPR violation pattern — Disqus's free/ads model is a textbook example.

Should You Block This Without Consent?

Conditional. On free Disqus plans (ads enabled), block the script until marketing consent is obtained — the advertising and behavioral tracking are inseparable from the commenting functionality. On paid Disqus plans with ads disabled, the tracking footprint is reduced, though the disqus_unique cross-site cookie is still set and may require consent. For strict compliance, consent is recommended regardless of plan tier.