Overview
Prismic is a headless content management system that delivers structured content through APIs. Similar to Sanity, its client-side scripts appear on websites only during authenticated content editing sessions — the live preview toolbar connects the editor's browser to Prismic's Draft API for real-time content preview. Regular website visitors do not encounter any Prismic scripts on the published site.
What This Script Does
Prismic's browser-side scripts are limited to authenticated editor sessions:
- Preview toolbar: When an authenticated editor accesses a preview URL, Prismic's scripts render a toolbar overlay that allows navigating between draft and published content, switching between content revisions, and sharing preview links.
- Draft content loading: Connects to the Prismic Draft API to fetch unpublished content changes and render them on the preview page in real time. This requires an authenticated API token.
- Authentication: Preview functionality requires a valid Prismic auth token, typically set via a preview cookie when the editor initiates a preview session from Prismic's dashboard.
- No visitor-facing scripts: On the published production site, content is served as static HTML or fetched server-side. Prismic's client scripts are not loaded in the visitor's browser.
- No visitor cookies: Prismic does not set cookies on the production domain for regular visitors.
Consent & Compliance
Prismic falls under the functional consent category. Its scripts serve a content editing function used exclusively by authenticated editors.
Under GDPR and ePrivacy, Prismic's scripts are not loaded for regular visitors, so no ePrivacy consent trigger applies to the public. Preview session cookies are used only by authenticated CMS users in the course of their work.
Under CCPA/CPRA, Prismic does not collect personal information from website visitors.
Should You Block This Without Consent?
No. Prismic's scripts are loaded only for authenticated content editors during preview sessions, not for regular website visitors. There is nothing to block in the visitor-facing context.
Is Prismic GDPR compliant?
Prismic typically loads functional trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Prismic can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Prismic, not on Prismic itself.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
prismic.ioFunctionalprismic.io is a functional domain operated by Prismic, used to run site features like chat, video, embeds, and preferences.
Frequently Asked Questions
Related Vendors
Manage consent for Prismic
ConsentStack automatically detects and manages Prismic trackers so your site stays compliant with global privacy regulations.