Overview
Microsoft Teams is a workplace communication platform that supports chat, video meetings, and document collaboration within the Microsoft 365 ecosystem. When detected on third-party websites, Teams typically appears as an embedded meeting join widget, a chat integration for customer support, or a scheduling link that initiates a Teams call. The embed enables real-time communication directly within the host site without requiring visitors to navigate to the Teams application.
What This Script Does
Microsoft Teams embeds load from teams.microsoft.com and related Microsoft domains, establishing real-time communication channels.
- Scripts loaded: Teams embeds load via iframes from
teams.microsoft.comor through the Teams JavaScript SDK fromres.cdn.office.net. The embed renders the meeting interface, chat widget, or scheduling component. - WebRTC connections: For video meetings, the Teams client establishes WebRTC connections through Microsoft's media relay servers for real-time audio, video, and screen sharing.
- Cookies set:
- Authentication cookies on
microsoft.comandlogin.microsoftonline.comto verify the participant's Microsoft account identity - Session cookies to maintain connection state, participant roster, and meeting context during active calls
- Authentication cookies on
- Data transmitted: Audio and video streams, chat messages, screen share content, and participant identity are processed through Microsoft's communication infrastructure. Meeting telemetry (join/leave events, call quality metrics) is collected for service reliability.
- Permissions: The browser prompts for camera and microphone permissions when the user joins a video meeting.
Consent & Compliance
Microsoft Teams falls under the functional consent category.
Under GDPR and ePrivacy, embedded Teams interfaces provide functional communication capabilities explicitly initiated by the user. Authentication cookies required for participant verification and session cookies for maintaining the meeting connection qualify as strictly necessary for the requested service under the ePrivacy Directive's exemption. Pre-loading a Teams embed on page load (before user interaction) may set Microsoft cookies proactively, which could require consent.
Under CCPA/CPRA, meeting data processed by Microsoft is governed by Microsoft's data processing terms. Communication content is processed to deliver the requested service, not for advertising purposes.
Microsoft Teams operates under Microsoft's Online Services Data Protection Addendum with EU data boundary options.
Should You Block This Without Consent?
No. Microsoft Teams provides functional communication capabilities that users explicitly invoke by joining a meeting or initiating a chat. Blocking it would prevent the communication feature from working. Load the Teams embed on user interaction (click-to-join) rather than pre-loading it on page render to minimize cookie exposure before the user engages.
Is Microsoft Teams GDPR compliant?
Microsoft Teams typically loads functional trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Microsoft Teams can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Microsoft Teams, not on Microsoft Teams itself.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
teams.microsoft.comFunctionalteams.microsoft.com is a functional domain operated by Microsoft Teams, used to run site features like chat, video, embeds, and preferences.
Frequently Asked Questions
Other Microsoft Products
Related Vendors
Manage consent for Microsoft Teams
ConsentStack automatically detects and manages Microsoft Teams trackers so your site stays compliant with global privacy regulations.