Overview
TomTom is a Dutch location technology company known for its navigation devices and digital mapping platform. TomTom Maps provides web-embeddable mapping functionality through its Maps SDK for Web, offering an alternative to Google Maps and Mapbox for developers who need interactive maps, geocoding, routing, and search capabilities. TomTom's mapping data covers over 200 countries and is also licensed by major technology companies for their own mapping products.
What This Script Does
TomTom Maps SDK loads from api.tomtom.com and related CDN domains. The JavaScript library renders interactive map tiles, handles user interactions (pan, zoom, click), and provides search/geocoding functionality through the Maps, Search, and Routing APIs.
When a map is rendered, the SDK fetches vector or raster map tiles from api.tomtom.com as the user navigates the map viewport. Each tile request includes the map coordinates, zoom level, and the developer's API key. If the implementation uses TomTom's Search API (for address lookup or points of interest), the user's search queries are transmitted to TomTom's servers along with optional location bias parameters.
TomTom's SDK sets a limited number of cookies for session management and API authentication. These are typically session-scoped and tied to the API key validation process. No persistent user tracking cookies are set by the mapping SDK itself.
If the implementation requests the user's geolocation (via the browser's Geolocation API), this is triggered by the website's code rather than by TomTom's SDK directly. The browser will prompt the user for permission before sharing location data. Any geolocation data shared with TomTom's APIs for nearby search or routing is transmitted as API request parameters.
Data collected by TomTom during normal map usage includes tile request metadata (IP address, user agent), search queries, and route calculation parameters. TomTom's privacy policy states this data is used for service delivery and aggregate usage analytics.
Consent & Compliance
TomTom Maps is classified as functional. It provides interactive mapping services that enhance the user experience for location-related features such as store finders, contact pages, and delivery area displays.
Under GDPR and the ePrivacy Directive, TomTom's session-scoped cookies for API authentication are considered functional and do not require consent. However, the transmission of IP addresses and search queries to TomTom's servers constitutes data processing that should be disclosed in the site's privacy policy. If the implementation collects the user's geolocation, additional transparency requirements apply, though the browser's built-in permission prompt provides a consent mechanism.
Under CCPA/CPRA, location-related data transmitted to TomTom constitutes personal information. The website operator should disclose this data sharing in their privacy policy and ensure a data processing agreement is in place with TomTom.
Should You Block This Without Consent?
No. TomTom Maps provides functional mapping services with minimal data collection. Its cookies are session-scoped and necessary for API operation. Blocking TomTom Maps would disable store finders, location search, and other mapping features that visitors expect to use. If the implementation collects precise geolocation, the browser's native permission dialog provides an appropriate consent mechanism for that specific data point.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
tomtom.comFunctionalFrequently Asked Questions
Does TomTom Maps require consent before loading on a website?
No. TomTom Maps provides functional mapping services for store finders, contact pages, and location search. Its cookies are session-scoped and necessary for API authentication. Under GDPR, functional mapping tools with no persistent tracking cookies are not subject to the ePrivacy opt-in requirement, and TomTom can load without prior consent.
What data does TomTom Maps transmit when a visitor uses the map?
TomTom's SDK sends tile request metadata — IP address and user agent — to api.tomtom.com as the visitor pans and zooms the map. Search queries and geocoding requests are transmitted with an API key. If the site requests the visitor's browser geolocation, the browser shows its own permission prompt before coordinates are shared.
How does ConsentStack classify TomTom Maps for consent management purposes?
ConsentStack classifies TomTom Maps as functional, allowing it to load automatically. Since TomTom sets no persistent tracking cookies, ConsentStack does not flag it as a marketing or analytics concern. Store finder and location search features remain active for all visitors who have accepted functional consent.
Related Vendors
Manage consent for TomTom Maps
ConsentStack automatically detects and manages TomTom Maps trackers so your site stays compliant with global privacy regulations.