Sanity.io

Sanity.io

Enables Sanity Studio's visual editing overlay and live content preview on content-managed pages by connecting the browser to the Sanity content API. Active only for authenticated editors accessing preview URLs and not loaded during standard visitor sessions.

Overview

Sanity.io is a headless content management platform that provides structured content through APIs. Its client-side scripts appear on websites only during authenticated content editing sessions — the Visual Editing overlay and live preview functionality connect the editor's browser to the Sanity Content API. Standard visitors browsing the published website do not encounter any Sanity scripts.

What This Script Does

Sanity's browser-side scripts are limited to authenticated editor sessions:

  • Visual Editing overlay: When an authenticated content editor accesses a preview URL, Sanity's scripts render a visual editing interface overlaying the page content. This allows editors to click on content elements and edit them in place.
  • Live preview: Connects to the Sanity Content API via WebSocket or polling to display real-time draft content changes as editors make them in Sanity Studio.
  • Authentication: The preview/editing scripts require authenticated access — typically via a Sanity auth token or cookie. Only users with editor permissions can access these scripts.
  • No visitor-facing scripts: On the published, production version of the website, content is delivered as static or server-rendered HTML. Sanity's scripts are not loaded in the visitor's browser.
  • No cookies for visitors: Sanity does not set cookies on the production domain for regular site visitors. Authentication cookies are limited to the editing context.

Consent & Compliance

Sanity falls under the functional consent category. Its scripts serve a content editing function used exclusively by authenticated editors.

Under GDPR and ePrivacy, Sanity's scripts are not loaded for regular website visitors, so there is no ePrivacy consent trigger for the general public. The editing cookies are used only by authenticated CMS users in the course of their work, which falls under the site operator's internal tooling.

Under CCPA/CPRA, Sanity does not collect personal information from website visitors. Content editors interact with Sanity as part of their professional duties, governed by the organization's employment or contractor agreements.

Should You Block This Without Consent?

No. Sanity's scripts are loaded only for authenticated content editors during preview sessions, not for regular website visitors. There is nothing to block in the visitor-facing context. The editing tools serve an essential content management function for the site operator's team.

Is Sanity.io GDPR compliant?

Sanity.io typically loads functional trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Sanity.io can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Sanity.io, not on Sanity.io itself.

Visit website

Consent Categories

Also Known As

sanitysanity iosanity cmssanity studioheadless cms sanitysanity content platformsanity live preview

Industries

Programming and Developer SoftwareComputers Electronics and Technology

Tracked Domains (1)

sanity.ioFunctional

sanity.io is a functional domain operated by Sanity.io, used to run site features like chat, video, embeds, and preferences.

Frequently Asked Questions

Related Vendors

Beamer
Beamer
Beamer is a product changelog and in-app notification center embedded in SaaS products and websites. Scripts inject a notification bell or sidebar panel that displays product updates, new features, and announcements. User engagement with posts — views, clicks, and reactions — is tracked for content effectiveness reporting.
Elfsight
Elfsight
Loads embeddable widgets including social media feeds, review carousels, contact forms, and countdown timers by connecting to Elfsight's delivery servers. May collect user interaction data and load third-party content depending on the widget type and configuration selected by the site owner.
Prismic
Prismic
Enables Prismic's live preview editing toolbar on content-managed pages, connecting the browser to the Prismic Draft API for real-time draft content previews. Active only during authenticated editor sessions and not present in standard visitor page loads.
Wufoo
Wufoo
Embeds contact forms, surveys, payment forms, and event registration forms directly on web pages. Collects all personally identifiable information users enter into form fields, including names, email addresses, phone numbers, and payment details depending on the form configuration.
GoToWebinar
GoToWebinar
Embeds registration forms, countdown widgets, and live attendee join interfaces on event landing pages. Collects registrant contact details, attendance duration, poll responses, and engagement metrics that event hosts access for follow-up communications and reporting.
On24
On24
Embeds event registration forms, webinar console players, and virtual event portal interfaces on B2B marketing sites. Collects registrant contact details, session attendance duration, poll responses, and content engagement data for event analytics and post-event follow-up communications.

Manage consent for Sanity.io

ConsentStack automatically detects and manages Sanity.io trackers so your site stays compliant with global privacy regulations.