Do Moz embedded widgets require consent?

Yes. Moz widgets set attribution and engagement cookies and transmit interaction data to Moz's analytics platform. These track which widgets drive traffic to Moz.com and are not necessary for any service the page visitor requested — they require consent under GDPR and ePrivacy before loading.

What cookies does a Moz widget set?

Moz widgets set moz_referral (30-day attribution cookie tracking widget-driven visits), mozbar_session (session-scoped context on moz.com), and _moz_uid (365-day identifier linking engagement to Moz accounts). Interaction data including clicks, hover events, and page URL are sent to Moz analytics infrastructure.

How does ConsentStack handle Moz widgets?

ConsentStack blocks Moz widget scripts until analytics consent is granted. Blocking prevents the embedded Domain Authority visualization from rendering; ConsentStack can display a placeholder in its place. Once analytics consent is given, ConsentStack releases the script and the widget loads normally.

What tracker domains does Moz use?

ConsentStack has catalogued tracker domains for Moz including moz.com. These are the network destinations Moz's scripts contact, which a consent platform blocks until a visitor agrees.

Moz - SEO Metrics Widget & Cookie Consent Profile

Back to Vendor Library

Overview

Moz is an established SEO software company founded in 2004, widely recognised for introducing the Domain Authority (DA) metric — a logarithmic scale from 1–100 that predicts a domain's ability to rank in search engine results. In addition to DA, Moz publishes Page Authority (PA), spam scores, and link profile metrics that are referenced across the digital marketing industry. On third-party websites, Moz's presence typically takes the form of Domain Authority badges, link count widgets, and MozBar-powered overlays that publishers and agencies embed to demonstrate the strength of their web properties.

What This Script Does

Moz embeddable widgets load JavaScript from moz.com and CDN infrastructure on mozbar.moz.com and assets.moz.com. The scripts render data visualisations that query the Moz Link Explorer API to display live metrics for the embedding domain.

Cookies and identifiers set:

mozbar_session — First-party session cookie scoped to moz.com, set when a visitor clicks through to the Moz platform from an embedded widget; expires at session end.
moz_referral — First-party attribution cookie tracking which embedded widget drove a visit to Moz.com; typical expiry 30 days.
_moz_uid — Long-lived first-party identifier used to stitch widget engagement events to a Moz platform account if the visitor is logged in; expiry up to 365 days.

Data transmitted per widget load:

Page URL and referrer of the embedding page
Widget type and DA/PA metric displayed
Timestamp and user agent string
Interaction events (hover, click-through to Moz platform)
Attribution click data when referral cookies are set

CDN and script filenames: widget.js, mozbar-embed.js served from widget.moz.com. API calls go to lsapi.moz.com/linkscape/url-metrics/ for live metric retrieval.

Widget engagement data feeds Moz's internal analytics on widget distribution and conversion paths from third-party embeds to Moz Pro trial signups.

Consent & Compliance

Moz embedded widgets are classified under the analytics category. While the visual display of SEO metrics is informational, the attribution tracking (referral cookies, click-through attribution) and engagement analytics constitute non-essential third-party data processing. Under GDPR Article 6 and the ePrivacy Directive, cookies set for measuring widget engagement and attributing referrals are not strictly necessary for any service explicitly requested by the site visitor — they require prior opt-in consent. Under CCPA/CPRA, the collection of interaction data, device identifiers, and referral attribution by Moz as a third party must be disclosed in the host site's privacy policy. Moz as a US-based processor participates in the EU-US Data Privacy Framework, enabling data transfers under GDPR adequacy provisions. Site owners should ensure their privacy notices list Moz as a third-party analytics sub-processor when embedding widgets.

Should You Block This Without Consent?

Yes. Moz embedded widgets set analytics and attribution cookies and transmit engagement data to a third-party platform. The widgets are not essential to the host site's functionality. Block them until the visitor consents to analytics tracking.

Is Moz GDPR compliant?

Moz typically loads analytics trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Moz can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Moz, not on Moz itself.

Visit website