Sanity.io

Sanity.io

Enables Sanity Studio's visual editing overlay and live content preview on content-managed pages by connecting the browser to the Sanity content API. Active only for authenticated editors accessing preview URLs and not loaded during standard visitor sessions.

Overview

Sanity.io is a headless content management platform that provides structured content through APIs. Its client-side scripts appear on websites only during authenticated content editing sessions — the Visual Editing overlay and live preview functionality connect the editor's browser to the Sanity Content API. Standard visitors browsing the published website do not encounter any Sanity scripts.

What This Script Does

Sanity's browser-side scripts are limited to authenticated editor sessions:

  • Visual Editing overlay: When an authenticated content editor accesses a preview URL, Sanity's scripts render a visual editing interface overlaying the page content. This allows editors to click on content elements and edit them in place.
  • Live preview: Connects to the Sanity Content API via WebSocket or polling to display real-time draft content changes as editors make them in Sanity Studio.
  • Authentication: The preview/editing scripts require authenticated access — typically via a Sanity auth token or cookie. Only users with editor permissions can access these scripts.
  • No visitor-facing scripts: On the published, production version of the website, content is delivered as static or server-rendered HTML. Sanity's scripts are not loaded in the visitor's browser.
  • No cookies for visitors: Sanity does not set cookies on the production domain for regular site visitors. Authentication cookies are limited to the editing context.

Consent & Compliance

Sanity falls under the functional consent category. Its scripts serve a content editing function used exclusively by authenticated editors.

Under GDPR and ePrivacy, Sanity's scripts are not loaded for regular website visitors, so there is no ePrivacy consent trigger for the general public. The editing cookies are used only by authenticated CMS users in the course of their work, which falls under the site operator's internal tooling.

Under CCPA/CPRA, Sanity does not collect personal information from website visitors. Content editors interact with Sanity as part of their professional duties, governed by the organization's employment or contractor agreements.

Should You Block This Without Consent?

No. Sanity's scripts are loaded only for authenticated content editors during preview sessions, not for regular website visitors. There is nothing to block in the visitor-facing context. The editing tools serve an essential content management function for the site operator's team.

Visit website

Consent Categories

Functional

Also Known As

sanitysanity iosanity cmssanity studioheadless cms sanitysanity content platformsanity live preview

Industries

Programming and Developer SoftwareComputers Electronics and Technology

Tracked Domains (1)

sanity.ioFunctional

Frequently Asked Questions

Does Sanity.io require consent on published websites?

Generally no. Sanity.io is a headless CMS whose scripts only load during authenticated editor sessions. Regular visitors browsing the published site do not encounter any Sanity scripts. The Visual Editing overlay and live preview are restricted to editors accessing preview URLs, so no consent is typically required for Sanity.

What scripts does Sanity.io run in the browser?

Sanity's browser scripts are limited to authenticated editor sessions. They render a Visual Editing overlay for clicking and editing content elements in place. The scripts also connect to the Sanity Content API for live preview of real-time content changes. None of these scripts appear on published pages viewed by regular visitors.

How does ConsentStack categorize Sanity.io scripts?

ConsentStack identifies Sanity.io's Visual Editing overlay and live preview scripts as functional. Because these only activate during authenticated editor sessions and never load for regular visitors, ConsentStack treats them as non-tracking editorial tools within the functional consent category.

Related Vendors

Google Maps
Google Maps
Google Maps is the dominant web mapping service used for embedded maps and location features on websites. Scripts load interactive map tiles, geocoding, and Places API functionality through the Maps JavaScript API. May set cookies to remember map preferences and manage API quota.
Google Search
Google Search
Google Search appears on websites through the Programmable Search Engine, enabling custom site-specific search functionality. Scripts load the search widget from Google's servers to render search bars and display results within the host website. Sends search queries to Google's index and may set cookies for search personalization and query history.
Google
Google
Google is the dominant provider of web analytics, advertising, and infrastructure tools. Scripts like Google Analytics, Tag Manager, Ads, and reCAPTCHA collect behavioral data, manage tag firing, serve targeted ads, and detect bots. Sets persistent cookies to track users and correlate activity across sites.
Microsoft Teams
Microsoft Teams
Microsoft Teams is a workplace communication and collaboration platform that can be embedded on websites for chat, meetings, and document sharing. Embedded widgets load from Microsoft's servers to enable real-time messaging, video calls, and file collaboration. Sets authentication and session cookies to verify participant identity and maintain connection state.
Apple Maps JS
Apple Maps JS
Apple Maps JS is Apple's JavaScript mapping framework for embedding interactive maps on websites. Scripts load map tiles, location pins, and routing data from Apple's MapKit servers to render navigable maps within web pages. Requires a MapKit JS token for authentication but does not set tracking cookies or collect behavioral analytics data.
Apple Business Chat
Apple Business Chat
Apple Business Chat enables direct customer messaging between websites and Apple's Messages app. Scripts load chat buttons and conversation interfaces that connect visitors to business support agents through iMessage. Sets minimal session cookies to maintain conversation context but does not track browsing behavior or collect analytics data.

Manage consent for Sanity.io

ConsentStack automatically detects and manages Sanity.io trackers so your site stays compliant with global privacy regulations.