Heroku
Cloud platform as a service for deploying and scaling web applications. Heroku is primarily backend infrastructure with no direct script presence on end-user sites. Applications hosted on Heroku may set standard session and authentication cookies.
Overview
Heroku is a cloud platform as a service (PaaS) owned by Salesforce, used by developers to deploy, manage, and scale web applications. Heroku is backend infrastructure — it hosts applications but doesn't inject scripts into the websites it serves. Applications running on Heroku may set their own cookies for session management, but these come from the application itself, not from Heroku as a third-party.
If Heroku appears in a third-party script audit, it's because the application is hosted on Heroku's infrastructure, not because Heroku is loading external tracking scripts.
What This Script Does
Heroku itself has no third-party script presence:
- Application hosting: Runs web applications on Heroku's cloud infrastructure with managed deployment and scaling
- No client-side scripts: Heroku does not inject scripts, pixels, or tracking code into hosted applications
- Application cookies: Any cookies set are from the hosted application itself, not from Heroku as a third party
Consent & Compliance
- GDPR: Heroku as infrastructure doesn't process visitor personal data beyond hosting. The hosted application's own data processing determines consent requirements.
- ePrivacy Directive: No third-party cookies or scripts from Heroku.
Should You Block This Without Consent?
Heroku does not load third-party scripts on websites. It's infrastructure that hosts applications. There is nothing to block in the context of website consent management.
No.
Is Heroku GDPR compliant?
Heroku typically loads functional trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Heroku can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Heroku, not on Heroku itself.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
heroku.comEssentialheroku.com is an essential domain operated by Heroku, used to keep the site working, including security, load balancing, and sessions.
Frequently Asked Questions
Related Vendors
Manage consent for Heroku
ConsentStack automatically detects and manages Heroku trackers so your site stays compliant with global privacy regulations.