StackPath

StackPath

Edge delivery and web security platform providing CDN, WAF, and DDoS mitigation services. Assets served through StackPath's CDN appear as StackPath hostnames in network requests. When bot protection is active, StackPath may inject a challenge script that collects browser fingerprint data to validate human visitors.

Back to Vendor Library

Overview

StackPath is an edge computing platform that provides CDN, WAF, and DDoS protection services. Assets served through StackPath appear as StackPath hostnames in network requests.

What This Script Does

  • Delivers cached static assets (JavaScript, CSS, images) through its CDN network
  • When bot protection is active, injects a challenge script that collects browser fingerprint data
  • Validates visitors as human through JavaScript challenges before allowing access
  • Provides SSL termination and request routing at the edge
  • Does not typically set its own tracking cookies; fingerprinting is limited to security validation

Consent & Compliance

  • Category: Essential
  • GDPR: CDN delivery is essential infrastructure. Bot protection fingerprinting serves a legitimate security interest.
  • CCPA: Data collected is limited to security validation and does not constitute sale of personal information.
  • ePrivacy: Security-related device checks generally fall under the essential exemption for network security.

Should You Block This Without Consent?

No. StackPath provides essential infrastructure services including content delivery and security protection. Blocking it would prevent the site from loading or leave it vulnerable to attacks.

Visit website

Consent Categories

Essential

Also Known As

StackPathCDNWAFDDoS protectionedge computingbot mitigationcontent delivery network

Industries

Programming and Developer SoftwareComputers Electronics and Technology

Tracked Domains (3)

bootstrapcdn.comEssential
netdna-ssl.comEssential
cdn-qualiteamsoftwar.netdna-ssl.comEssential

Frequently Asked Questions

Does StackPath require cookie consent?

No. StackPath is a CDN and edge security provider that delivers website assets and provides DDoS protection. It operates as infrastructure rather than a tracker and does not set persistent behavioral cookies, placing it in the essential category under GDPR and CCPA.

What does StackPath collect when serving website content?

StackPath processes standard HTTP request metadata including IP addresses, request headers, and URLs to route traffic and enforce security rules. Any data handling is governed by the site operator's agreement with StackPath and is incidental to CDN delivery, not advertising.

How does ConsentStack classify StackPath on a website?

ConsentStack recognizes StackPath as an essential infrastructure vendor. It is not placed behind a consent gate, as blocking CDN delivery would break the site. ConsentStack surfaces it in the vendor list for transparency without requiring visitor opt-in.

Related Vendors

Firebase
Firebase
Firebase is Google's mobile and web application development platform offering authentication, real-time database, cloud functions, and analytics. Web SDK scripts initialize Firebase services and may track app events via Firebase Analytics, which is powered by Google Analytics 4. Widely used in single-page apps and PWAs for backend infrastructure and usage tracking.
Google
Google
Google is the dominant provider of web analytics, advertising, and infrastructure tools. Scripts like Google Analytics, Tag Manager, Ads, and reCAPTCHA collect behavioral data, manage tag firing, serve targeted ads, and detect bots. Sets persistent cookies to track users and correlate activity across sites.
Google Tag Manager
Google Tag Manager
Google Tag Manager is a tag management system that lets marketers deploy and update analytics and marketing scripts without code changes. The GTM container script loads synchronously in the page head and injects configured tags, triggers, and variables on behalf of other vendors. No data collection of its own — acts as a loader for other scripts.
Google Fonts
Google Fonts
Google Fonts is a free font hosting service that serves hundreds of typeface families via a global CDN. Stylesheets and font files load from fonts.googleapis.com and fonts.gstatic.com to deliver web fonts to visitors. No advertising or tracking functionality is included.
reCAPTCHA
reCAPTCHA
Google reCAPTCHA is a bot detection and spam prevention service protecting web forms, login pages, and checkout flows. Scripts analyze user behavior, mouse movements, and browser fingerprints to distinguish humans from bots. The invisible reCAPTCHA v3 scores interactions without requiring user challenges.
Sign in with Google
Sign in with Google
Sign in with Google is an OAuth-based authentication service that enables users to log into websites using their Google account credentials. Scripts load the Google Identity Services library, display sign-in buttons, and handle token exchange for secure authentication. Stores session tokens and authentication cookies to maintain login state across page visits.

Manage consent for StackPath

ConsentStack automatically detects and manages StackPath trackers so your site stays compliant with global privacy regulations.

Get started free