Free whiteglove setup from a ConsentStack Concierge
StackPath

StackPath

Edge delivery and web security platform providing CDN, WAF, and DDoS mitigation services. Assets served through StackPath's CDN appear as StackPath hostnames in network requests. When bot protection is active, StackPath may inject a challenge script that collects browser fingerprint data to validate human visitors.

Back to Vendor Library

Overview

StackPath is an edge computing platform that provides CDN, WAF, and DDoS protection services. Assets served through StackPath appear as StackPath hostnames in network requests.

What This Script Does

  • Delivers cached static assets (JavaScript, CSS, images) through its CDN network
  • When bot protection is active, injects a challenge script that collects browser fingerprint data
  • Validates visitors as human through JavaScript challenges before allowing access
  • Provides SSL termination and request routing at the edge
  • Does not typically set its own tracking cookies; fingerprinting is limited to security validation

Consent & Compliance

  • Category: Essential
  • GDPR: CDN delivery is essential infrastructure. Bot protection fingerprinting serves a legitimate security interest.
  • CCPA: Data collected is limited to security validation and does not constitute sale of personal information.
  • ePrivacy: Security-related device checks generally fall under the essential exemption for network security.

Should You Block This Without Consent?

No. StackPath provides essential infrastructure services including content delivery and security protection. Blocking it would prevent the site from loading or leave it vulnerable to attacks.

Is StackPath GDPR compliant?

StackPath's trackers are classified as essential (strictly necessary), so they are generally exempt from prior consent under the GDPR. You should still list them in your cookie policy and privacy notice so visitors know they are there.

Visit website

Consent Categories

Essential

Also Known As

StackPathCDNWAFDDoS protectionedge computingbot mitigationcontent delivery network

Industries

Programming and Developer SoftwareComputers Electronics and Technology

Tracked Domains (3)

StackPath's trackers are common, seen on about 4% of the sites ConsentStack has scanned. Scan your own site to see which of these are firing before consent.

bootstrapcdn.comEssential

bootstrapcdn.com is an essential domain operated by StackPath, used to keep the site working, including security, load balancing, and sessions. Seen on about 4% of scanned sites.

netdna-ssl.comEssential

netdna-ssl.com is an essential domain operated by StackPath, used to keep the site working, including security, load balancing, and sessions. Seen on a small share of scanned sites.

cdn-qualiteamsoftwar.netdna-ssl.comEssential

cdn-qualiteamsoftwar.netdna-ssl.com is an essential domain operated by StackPath, used to keep the site working, including security, load balancing, and sessions. Seen on a small share of scanned sites.

Frequently Asked Questions

Related Vendors

New Relic
New Relic
Application performance monitoring and error tracking platform for engineering teams. The New Relic browser agent collects real-user monitoring (RUM) data — page load times, AJAX calls, JavaScript errors — and sends it to New Relic's observability platform. Does not track user behavior for advertising or retargeting.
Shopify
Shopify
The underlying e-commerce platform for millions of online stores. Shopify's scripts handle storefront rendering, cart state, checkout flows, and payment processing. Also loads Shop Pay analytics and attribution scripts that track orders and referral sources across the Shopify merchant network.
ConsentManager
ConsentManager
Consent management platform (CMP) that delivers cookie consent banners and manages consent signals across websites. ConsentManager scripts block non-consented vendor scripts and transmit consent records to a hosted compliance platform.
Akamai
Akamai
Enterprise CDN and security platform used by large companies to distribute assets globally and protect against DDoS and bot attacks. The mPulse script measures real-user performance (page load, resource timing) and sends metrics to Akamai's telemetry platform. Bot Manager may inject browser fingerprinting scripts to classify traffic.
unpkg
unpkg
Open-source JavaScript package registry served via CDN. The unpkg CDN delivers npm package files globally. No behavioral tracking or advertising cookies are set; access logs record standard request metadata.
OpenJS Foundation
OpenJS Foundation
Open-source JavaScript module hosting CDN provided by the OpenJS Foundation. The jsDelivr and similar CDNs serve JavaScript packages globally. No behavioral tracking or advertising cookies are set by the CDN itself.

Manage consent for StackPath

ConsentStack automatically detects and manages StackPath trackers so your site stays compliant with global privacy regulations.

Get started free