Free whiteglove setup from a ConsentStack Concierge
OpenStreetMap

OpenStreetMap

OpenStreetMap provides free, open-source collaborative map data embedded on websites as interactive tile maps. When an OSM map loads, tile images are fetched from openstreetmap.org servers, which may log the requesting IP address. No tracking scripts, advertising technologies, or user-identifying cookies are used.

Back to Vendor Library

Overview

OpenStreetMap (OSM) is a collaborative, open-source mapping platform that provides free map data and tile rendering for website integration. When embedded on a website, OSM maps load tile images from OpenStreetMap's servers, displaying interactive maps without the tracking, cookie setting, or behavioral data collection associated with commercial map services like Google Maps.

What This Script Does

OpenStreetMap embeds operate with a minimal data footprint:

  • Map tile loading: Fetches map tile images from tile.openstreetmap.org servers based on the map viewport (coordinates, zoom level). Tiles are standard image files rendered in a grid.
  • Leaflet or OpenLayers: Most OSM implementations use open-source mapping libraries (Leaflet, OpenLayers) loaded from the site's own domain or a CDN for map interactivity — panning, zooming, and marker display.
  • Standard HTTP data: Tile requests include standard HTTP headers (IP address, user agent, referrer). OpenStreetMap's tile servers may log this data for operational purposes (abuse prevention, capacity planning).
  • No cookies: OpenStreetMap does not set cookies on the website's domain or on its own domain via tile requests.
  • No tracking: No behavioral tracking, no user identification, no analytics data collection. OSM serves tiles as static images.
  • No JavaScript from OSM: The mapping library (Leaflet) is self-hosted; OSM contributes only the tile images.

Consent & Compliance

OpenStreetMap falls under the functional consent category. Map display serves a functional content purpose with minimal privacy impact.

Under GDPR and ePrivacy, OSM tile loading transmits the visitor's IP address to OpenStreetMap's servers (a third party). Under strict GDPR interpretation, this constitutes personal data processing by a third party. However, the OSM Foundation operates as a non-profit under the GDPR with legitimate interest in serving map data.

Under CCPA/CPRA, the minimal data processed (IP in HTTP logs) serves content delivery. OSM does not sell or share personal information.

Should You Block This Without Consent?

No. OpenStreetMap provides functional map display with no cookies, no tracking, and no behavioral data collection. It is the most privacy-friendly interactive map option available. Blocking it would remove map functionality without meaningful privacy benefit.

Is OpenStreetMap GDPR compliant?

OpenStreetMap typically loads functional trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So OpenStreetMap can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads OpenStreetMap, not on OpenStreetMap itself.

Visit website

Consent Categories

Functional

Also Known As

openstreetmaposmosm tilesopen source mapsopenstreetmap consentosm embed

Industries

Computers Electronics and TechnologyBusiness and Consumer ServicesProgramming and Developer SoftwareScience and Education

Tracked Domains (1)

openstreetmap.orgFunctional

openstreetmap.org is a functional domain operated by OpenStreetMap, used to run site features like chat, video, embeds, and preferences.

Frequently Asked Questions

Related Vendors

Contact Form 7
Contact Form 7
Contact Form 7 is a WordPress plugin that renders and processes contact forms on WordPress pages via AJAX. Scripts handle field validation, spam filtering through optional reCAPTCHA, and form submission. Only data entered by the user is collected and transmitted to the site administrator.
Livestorm
Livestorm
Livestorm is a video engagement platform for webinars, virtual events, and online meetings. Its scripts embed event registration widgets and video players on web pages, set cookies to track attendee engagement, and make requests to Livestorm servers to manage registrations and stream content.
Activepieces
Activepieces
Activepieces is an open-source workflow automation platform that connects applications through server-side triggers and actions. It operates entirely as backend infrastructure with no client-side scripts deployed on end-user websites; all automations execute on self-hosted or cloud servers.
Drupal
Drupal
Drupal is an open-source CMS whose pages load core JavaScript for UI components, form handling, and AJAX requests. Additional scripts depend on installed modules and site configuration; analytics, advertising, or tracking may be present based on the site operator's module and theme choices.
BigMarker
BigMarker
BigMarker hosts webinars and virtual events. Browser scripts embed registration forms, countdown timers, and livestream video players on event landing pages. Collects attendee registration data including name and email, and tracks attendance and engagement during live and on-demand events.
Brizy Cloud
Brizy Cloud
Brizy Cloud serves website content through its visual builder platform. Scripts render page components and manage dynamic content, and may load conversion tracking or analytics integrations configured by the site owner on Brizy-hosted websites.

Manage consent for OpenStreetMap

ConsentStack automatically detects and manages OpenStreetMap trackers so your site stays compliant with global privacy regulations.

Get started free