Microsoft Power Apps

Microsoft Power Apps

Microsoft Power Apps is a low-code application development platform that enables embedded business applications on websites. Scripts load custom app interfaces from Microsoft's cloud, render form controls and data views, and connect to backend data sources through Power Platform connectors. Sets session cookies to maintain application state and user authentication.

Microsoft
Part of Microsoft
Back to Vendor Library

Overview

Microsoft Power Apps enables organizations to build and embed custom business applications on their websites without extensive coding. These embedded apps render interactive forms, data views, dashboards, and workflow interfaces powered by Microsoft's Power Platform cloud infrastructure. Power Apps embeds are typically found on enterprise portals, internal tools exposed to external users, and customer-facing service interfaces.

What This Script Does

Power Apps embeds load from Microsoft's cloud infrastructure and render custom application interfaces within the host page.

  • Scripts loaded: Power Apps embeds load via iframes from apps.powerapps.com or make.powerapps.com, pulling the app's configuration and UI components from Microsoft's servers
  • Application rendering: The embedded app renders form controls (text inputs, dropdowns, date pickers, file uploads), data tables, galleries, and custom UI components defined by the app creator
  • Cookies set:
    • Authentication cookies on login.microsoftonline.com for Microsoft Entra ID (Azure AD) sign-in when the app requires authenticated access
    • Session cookies to maintain the app's state, user context, and data connections during the interaction
  • Data connections: Power Apps connect to backend data sources (SharePoint, Dataverse, SQL Server, custom APIs) through Power Platform connectors. Data flows between the browser, Microsoft's servers, and the connected data sources.
  • No tracking: Power Apps does not set advertising or analytics cookies. Its scripts serve the application interface and data connectivity.

Consent & Compliance

Microsoft Power Apps falls under the functional consent category.

Under GDPR and ePrivacy, embedded Power Apps provide functional application capabilities. Authentication and session cookies are strictly necessary for delivering the requested application experience under the ePrivacy Directive's exemption. The data processing through Power Platform connectors must comply with GDPR requirements, but the embedding mechanism itself does not introduce non-essential tracking.

Under CCPA/CPRA, data entered into Power Apps forms and processed through backend connectors constitutes personal information governed by the site operator's privacy practices. Microsoft acts as a data processor under its Power Platform terms.

Should You Block This Without Consent?

No. Power Apps embeds provide functional application interfaces that users interact with intentionally. Blocking them would remove the application functionality from the page. The cookies set are limited to authentication and session management required for the app to function.

Visit website

Consent Categories

Functional

Also Known As

Microsoft Power AppsPower Platform appslow-code platformMicrosoft business apps

Industries

Computers Electronics and TechnologyProgramming and Developer Software

Tracked Domains (2)

powerapps.comFunctional
apps.powerapps.comFunctional

Frequently Asked Questions

Does Microsoft Power Apps require cookie consent?

No. Power Apps embeds provide functional application interfaces — forms, data views, and workflow controls — that users interact with intentionally. Authentication and session cookies are strictly necessary for the app to function under ePrivacy's exemption. No advertising or behavioral tracking cookies are set.

What cookies does Microsoft Power Apps set?

Power Apps sets authentication cookies on login.microsoftonline.com for Microsoft Entra ID sign-in when the app requires authenticated access, plus session cookies to maintain application state during the interaction. Apps load via iframes from apps.powerapps.com or make.powerapps.com with no advertising scripts embedded.

How does ConsentStack categorize Microsoft Power Apps?

ConsentStack classifies Power Apps as functional. Because its cookies are limited to authentication and session management for a user-requested application, ConsentStack does not gate Power Apps behind a consent prompt. The application iframe loads without restriction, keeping embedded business tools operational for all site visitors.

Other Microsoft Products

Bing Ads
Bing Ads
Microsoft Advertising (Bing Ads) is the advertising platform for search campaigns on Bing, Yahoo, and partner networks. The Universal Event Tracking (UET) tag fires on advertiser sites to record conversions and build remarketing audiences. Data flows into the Microsoft Advertising dashboard for campaign reporting and bid optimization.
Microsoft Advertising UET Tag
Microsoft Advertising UET Tag
Microsoft Advertising UET Tag is the Universal Event Tracking pixel for Microsoft's ad platform, formerly Bing Ads. The JavaScript tag fires on advertiser websites to track page views, conversions, and custom events for campaign optimization. Sets cookies to identify visitors across sessions and attribute conversions to Microsoft Search and Audience Network ad clicks.
Bing Webmaster Tools
Bing Webmaster Tools
Sets a meta tag or BingSiteAuth.xml file to confirm site ownership with Microsoft Bing. The verification asset collects no personal data; Bing then provides search performance, crawl error, and keyword analytics accessible only through authenticated Webmaster Tools dashboard sessions.
LinkedIn
LinkedIn
LinkedIn Insight Tag is a conversion tracking and audience analytics tool for LinkedIn advertising. Scripts set a first-party cookie and send page view and conversion events to LinkedIn's servers. Data supports campaign attribution, demographic reporting on site visitors, and LinkedIn retargeting audience creation.
Microsoft Azure AD
Microsoft Azure AD
Microsoft Azure AD (now Microsoft Entra ID) is a cloud identity and access management service for single sign-on and user authentication on websites. Scripts load the Microsoft Authentication Library to handle OAuth flows, display login prompts, and manage access tokens. Stores authentication cookies and session tokens to maintain user login state across visits.
Microsoft Dynamics 365
Microsoft Dynamics 365
Microsoft Dynamics 365 is a suite of CRM and ERP applications that integrates with websites through tracking scripts and embedded forms. Web tracking code captures visitor behavior, page views, and form submissions to build customer profiles and score leads. Sets cookies to identify returning visitors and attribute marketing touchpoints across sessions.
Microsoft Power Automate
Microsoft Power Automate
Microsoft Power Automate is a workflow automation platform that connects to websites through embedded triggers and action widgets. Scripts load form interfaces, approval flows, and automated process components that interact with Microsoft's cloud services. Sets session cookies to authenticate users and maintain workflow state during multi-step automated processes.
Microsoft Teams
Microsoft Teams
Microsoft Teams is a workplace communication and collaboration platform that can be embedded on websites for chat, meetings, and document sharing. Embedded widgets load from Microsoft's servers to enable real-time messaging, video calls, and file collaboration. Sets authentication and session cookies to verify participant identity and maintain connection state.
Microsoft Viva
Microsoft Viva
Microsoft Viva is an employee experience platform that surfaces on websites through embedded engagement and learning modules. Scripts load content feeds and knowledge cards from Microsoft's cloud infrastructure. Sets authentication cookies for user identity and personalized workplace content delivery.
Power BI
Power BI
Power BI is Microsoft's business intelligence and data visualization platform. Its embedded scripts render interactive dashboards and reports within web pages, loading data visualizations through iframes or JavaScript APIs. Embedded reports may set authentication cookies and make requests to Microsoft's cloud services.
Xandr
Xandr
Xandr scripts serve programmatic display and video ads by placing cookies, collecting audience data, and participating in real-time bidding auctions. Scripts match visitors against audience segments and transmit behavioral data to Microsoft's advertising marketplace for targeting and measurement.

Related Vendors

Google Search
Google Search
Google Search appears on websites through the Programmable Search Engine, enabling custom site-specific search functionality. Scripts load the search widget from Google's servers to render search bars and display results within the host website. Sends search queries to Google's index and may set cookies for search personalization and query history.
Google Maps
Google Maps
Google Maps is the dominant web mapping service used for embedded maps and location features on websites. Scripts load interactive map tiles, geocoding, and Places API functionality through the Maps JavaScript API. May set cookies to remember map preferences and manage API quota.
Google
Google
Google is the dominant provider of web analytics, advertising, and infrastructure tools. Scripts like Google Analytics, Tag Manager, Ads, and reCAPTCHA collect behavioral data, manage tag firing, serve targeted ads, and detect bots. Sets persistent cookies to track users and correlate activity across sites.
Microsoft Viva
Microsoft Viva
Microsoft Viva is an employee experience platform that surfaces on websites through embedded engagement and learning modules. Scripts load content feeds and knowledge cards from Microsoft's cloud infrastructure. Sets authentication cookies for user identity and personalized workplace content delivery.
Microsoft Teams
Microsoft Teams
Microsoft Teams is a workplace communication and collaboration platform that can be embedded on websites for chat, meetings, and document sharing. Embedded widgets load from Microsoft's servers to enable real-time messaging, video calls, and file collaboration. Sets authentication and session cookies to verify participant identity and maintain connection state.
Microsoft Power Automate
Microsoft Power Automate
Microsoft Power Automate is a workflow automation platform that connects to websites through embedded triggers and action widgets. Scripts load form interfaces, approval flows, and automated process components that interact with Microsoft's cloud services. Sets session cookies to authenticate users and maintain workflow state during multi-step automated processes.

Manage consent for Microsoft Power Apps

ConsentStack automatically detects and manages Microsoft Power Apps trackers so your site stays compliant with global privacy regulations.

Get started free