Does the TikTok Pixel require consent?

Yes. The TikTok Pixel sets the _ttp cookie (13-month persistent identifier) and transmits behavioral data to TikTok's advertising platform on every page load. Explicit opt-in consent is required under GDPR and ePrivacy before the pixel is allowed to fire.

What does the TikTok Pixel track?

The pixel loads analytics.tiktok.com/i18n/pixel/events.js and sets _ttp (13-month visitor ID) and _ttclid (click attribution). It fires PageView on every page and captures standard events — ViewContent, AddToCart, CompletePayment — with product metadata sent to analytics.tiktok.com.

How does ConsentStack block the TikTok Pixel?

ConsentStack classifies the TikTok Pixel as marketing. The pixel script is blocked entirely until the visitor grants marketing consent. ConsentStack prevents _ttp and _ttclid cookies from being set until the appropriate consent signal is received.

What tracker domains does TikTok Pixel use?

ConsentStack has catalogued tracker domains for TikTok Pixel including pixel.tiktok.com. These are the network destinations TikTok Pixel's scripts contact, which a consent platform blocks until a visitor agrees.

TikTok Pixel (pixel.tiktok.com) - Conversion Tracking Consent Guide

Back to Vendor Library

Overview

The TikTok Pixel is TikTok's browser-side conversion tracking tag, functioning as the primary measurement tool for TikTok's advertising platform (TikTok for Business). Advertisers place the pixel on their websites to track visitor actions — page views, product views, add-to-cart events, and purchases — and attribute these conversions to TikTok ad campaigns. The pixel also feeds TikTok's machine learning models for ad delivery optimization and builds retargeting audiences from website visitors.

What This Script Does

The TikTok Pixel loads from TikTok's analytics domain and tracks visitor behavior on the advertiser's website.

Script loaded: analytics.tiktok.com/i18n/pixel/events.js — the TikTok Pixel base code that initializes tracking and provides the ttq event API
Page tracking: On every page load, the pixel fires a beacon to analytics.tiktok.com containing the page URL, referrer, browser information, and visitor identifiers.
Cookies set:
- _ttp — First-party cookie (13-month expiry). TikTok's persistent visitor identifier, linking browsing sessions for cross-session attribution and audience building.
- _ttclid — First-party cookie. Stores the TikTok Click ID from ad clicks for conversion attribution.
Event tracking: Advertisers configure the pixel to fire standard events (ViewContent, AddToCart, CompletePayment, Subscribe, etc.) or custom events on specific user actions. Each event transmits event name, parameters (product ID, value, currency), and visitor identifiers.
Advanced matching: The pixel supports sending hashed personally identifiable information (email, phone number) to TikTok for deterministic matching of website visitors to TikTok user accounts.
Retargeting audiences: Visitor identifiers collected by the pixel are used to build custom audiences on TikTok — enabling advertisers to serve ads to people who visited specific pages or completed specific actions on their website.

Consent & Compliance

The TikTok Pixel falls under the marketing consent category.

Under GDPR and ePrivacy, the TikTok Pixel requires explicit opt-in consent. The _ttp cookie is a persistent first-party identifier used for advertising attribution and audience building, constituting storage of non-essential information under the ePrivacy Directive. Advanced matching with hashed PII constitutes processing of personal data for advertising under GDPR. TikTok's EU user data is processed under the EU-US Data Privacy Framework, though TikTok's data handling practices have faced increased scrutiny from EU DPAs. TikTok also operates a European data center (Project Clover) for EU user data.

Under CCPA/CPRA, the pixel's transmission of visitor identifiers and behavioral data to TikTok for advertising optimization constitutes "sharing" of personal information for cross-context behavioral advertising. Advertisers must support opt-out mechanisms and honor the Global Privacy Control signal.

Should You Block This Without Consent?

Yes. The TikTok Pixel sets persistent tracking cookies, transmits page-level behavioral data to TikTok's advertising platform, and builds retargeting audiences from website visitors. Block the pixel entirely until the user grants marketing consent.

Is TikTok Pixel GDPR compliant?

TikTok Pixel typically loads marketing trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So TikTok Pixel can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads TikTok Pixel, not on TikTok Pixel itself.

Visit website