Shutterstock

Shutterstock

Shutterstock is a stock media marketplace and content licensing platform. Scripts appear on sites that use Shutterstock images, editorial content, or its TurboSquid 3D asset library, delivering licensed media assets and verifying proper content attribution and usage rights compliance.

Back to Vendor Library

Overview

Shutterstock is one of the world's largest stock media marketplaces, licensing photography, vector illustrations, video footage, and music to creative professionals and businesses. Its CDN and API scripts appear on websites that dynamically embed Shutterstock-licensed content, use Shutterstock's image search API to power editorial or creative tools, or integrate with Shutterstock's TurboSquid 3D asset library. Shutterstock is a US company certified under the EU-US Data Privacy Framework.

What This Script Does

Content Delivery

  • Delivers licensed media assets (images, video previews, audio samples) from Shutterstock's CDN infrastructure at ak.picdn.net and shutterstock.com media endpoints
  • Serves image preview watermarks and full-resolution licensed assets based on license verification
  • Optimizes image delivery via Shutterstock's CDN (backed by Akamai) with format negotiation (WebP, AVIF)

API Integration

  • Sites using the Shutterstock API (api.shutterstock.com/v2/...) load JavaScript to handle OAuth flows, search queries, and asset rendering
  • The Shutterstock API JavaScript SDK (shutterstock-api) enables programmatic image search, lightbox management, and download initiation
  • License verification calls are made server-to-server; client-side scripts handle the display layer only

Script Files and CDN Domains

  • Media CDN: ak.picdn.net (Akamai-backed Shutterstock CDN)
  • API endpoint: api.shutterstock.com
  • Preview images: thumb7.shutterstock.com, thumb9.shutterstock.com
  • TurboSquid assets: media.turbosquid.com

Cookies Set

  • ss_ab_test — A/B test assignment for Shutterstock.com UI experiments; set when navigating to Shutterstock properties
  • user_session — authenticated user session if the visitor is logged into a Shutterstock account
  • CDN/session cookies for delivery optimization: short-lived, scoped to Shutterstock domains
  • No advertising or behavioral tracking cookies are set on the host website's domain

Data Collected

  • IP address of requesting browser (transmitted to Shutterstock CDN nodes)
  • License key and content ID included in authenticated API requests
  • Download and preview events logged by Shutterstock for license enforcement and abuse detection
  • No visitor behavioral profiling or advertising data collection occurs through content delivery scripts

Consent & Compliance

Consent category: Functional

Shutterstock scripts serve licensed media content that the site operator has contractually obtained rights to display. Under GDPR Article 6(1)(b) or (f), delivering content the site operator has licensed is a legitimate operational activity. Under the ePrivacy Directive, CDN delivery cookies are necessary for efficient content delivery and do not constitute tracking. No advertising or cross-site behavioral cookies are set. Data transfers to the US are covered by Shutterstock's EU-US DPF certification. Under CCPA, content delivery does not constitute a sale or sharing of personal information.

Should You Block This Without Consent?

No. Shutterstock scripts deliver licensed media content with no advertising or behavioral tracking functionality. They are purely functional content delivery infrastructure and can load without consent.

Visit website

Consent Categories

Functional

Also Known As

shutterstock embedshutterstock javascriptshutterstock GDPRTurboSquid consentstock media licensing privacyshutterstock cookies

Industries

Computers Electronics and Technology

Tracked Domains (1)

shutterstock.comEssential

Frequently Asked Questions

Do Shutterstock scripts require visitor consent to load?

No. Shutterstock scripts deliver licensed stock media content with no advertising or behavioral tracking. CDN delivery cookies are necessary for efficient content serving and do not constitute tracking. No advertising or cross-site behavioral cookies are set on the host domain, making consent unnecessary for standard content delivery.

What do Shutterstock scripts load and what data is collected?

Shutterstock delivers licensed images and video previews from its Akamai CDN at ak.picdn.net and api.shutterstock.com. Download events and abuse detection are handled server-side. No behavioral profiling or advertising data collection occurs through content delivery scripts. Visitor IP addresses are transmitted to CDN nodes for routing.

How does ConsentStack classify Shutterstock?

ConsentStack classifies Shutterstock as functional and permits its scripts without a consent gate. It is listed in your ConsentStack vendor inventory and cookie notice for transparency. Because Shutterstock performs no cross-site advertising or behavioral profiling, no consent management is needed beyond disclosure in your privacy policy.

Related Vendors

Google Maps
Google Maps
Google Maps is the dominant web mapping service used for embedded maps and location features on websites. Scripts load interactive map tiles, geocoding, and Places API functionality through the Maps JavaScript API. May set cookies to remember map preferences and manage API quota.
Google Search
Google Search
Google Search appears on websites through the Programmable Search Engine, enabling custom site-specific search functionality. Scripts load the search widget from Google's servers to render search bars and display results within the host website. Sends search queries to Google's index and may set cookies for search personalization and query history.
Google
Google
Google is the dominant provider of web analytics, advertising, and infrastructure tools. Scripts like Google Analytics, Tag Manager, Ads, and reCAPTCHA collect behavioral data, manage tag firing, serve targeted ads, and detect bots. Sets persistent cookies to track users and correlate activity across sites.
Microsoft Teams
Microsoft Teams
Microsoft Teams is a workplace communication and collaboration platform that can be embedded on websites for chat, meetings, and document sharing. Embedded widgets load from Microsoft's servers to enable real-time messaging, video calls, and file collaboration. Sets authentication and session cookies to verify participant identity and maintain connection state.
Apple Maps JS
Apple Maps JS
Apple Maps JS is Apple's JavaScript mapping framework for embedding interactive maps on websites. Scripts load map tiles, location pins, and routing data from Apple's MapKit servers to render navigable maps within web pages. Requires a MapKit JS token for authentication but does not set tracking cookies or collect behavioral analytics data.
Apple Business Chat
Apple Business Chat
Apple Business Chat enables direct customer messaging between websites and Apple's Messages app. Scripts load chat buttons and conversation interfaces that connect visitors to business support agents through iMessage. Sets minimal session cookies to maintain conversation context but does not track browsing behavior or collect analytics data.

Manage consent for Shutterstock

ConsentStack automatically detects and manages Shutterstock trackers so your site stays compliant with global privacy regulations.

Get started free