Overview
WhatsApp Business provides a chat widget that websites embed to connect visitors with a business's WhatsApp account for customer support, sales inquiries, and service communication. The widget appears as a floating chat button, and when clicked, opens a WhatsApp conversation in the visitor's WhatsApp app or WhatsApp Web. As a Meta-owned product, the Business API processes messages through Meta's infrastructure, though the widget itself has a minimal tracking footprint compared to other Meta products.
What This Script Does
WhatsApp Business chat widgets embed on websites through JavaScript or simple link-based implementations.
- Widget rendering: Third-party WhatsApp chat plugins (not a first-party Meta embed script) render a floating button on the page. Various implementations exist — some use simple
wa.melinks, others use JavaScript widgets from plugin providers. - Click behavior: When the visitor clicks the chat button, it opens
wa.me/{phone_number}orapi.whatsapp.com/send?phone={number}in a new tab, launching the WhatsApp app or WhatsApp Web with a pre-filled message to the business's number. - Cookies set: The WhatsApp widget itself sets minimal cookies. Third-party widget implementations may set session cookies for widget state (open/closed, pre-chat form data). The
wa.meredirect does not set cookies on the host domain. - Data collected: No visitor data is collected by the widget before the visitor clicks. Once a chat is initiated, the visitor's WhatsApp phone number and message content are processed through Meta's WhatsApp Business Platform. If the WhatsApp Business API is used, message metadata (delivery receipts, read receipts) is logged.
- No pre-interaction tracking: Unlike other Meta products (Facebook SDK, Instagram embeds), the WhatsApp chat widget does not load Meta's advertising scripts or set
_fbp/datrcookies on the host page.
Consent & Compliance
WhatsApp Business chat falls under the functional consent category.
Under GDPR and ePrivacy, the chat widget serves a functional communication purpose. Simple link-based implementations (wa.me links) have no ePrivacy implications as they set no cookies and store no data on the visitor's device. JavaScript-based widgets that set session cookies for widget state should be assessed based on whether those cookies are strictly necessary for the requested service. Message processing through WhatsApp's platform falls under Meta's data processing terms, and the visitor consents to WhatsApp's terms by using the messaging service.
Under CCPA/CPRA, message content and phone numbers are personal information processed by Meta under its WhatsApp Business data processing terms. This processing is for the requested communication service, not for advertising.
Should You Block This Without Consent?
No. WhatsApp Business chat widgets serve a functional communication purpose and have minimal tracking impact. The widget does not load Meta's advertising scripts or set marketing cookies. Visitors explicitly initiate the conversation by clicking the button. For the most privacy-conservative implementation, use a simple wa.me link rather than a JavaScript widget to eliminate all cookie exposure.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
api.whatsapp.comFunctionalFrequently Asked Questions
Does WhatsApp Business chat require cookie consent?
No. WhatsApp Business chat widgets serve a functional communication purpose. Unlike other Meta products, the widget does not load Meta's advertising scripts or set _fbp/datr cookies on the host page. Visitors explicitly initiate contact by clicking the button.
What data does WhatsApp Business collect?
The chat widget itself collects no visitor data before interaction. Once a chat is initiated, the visitor's WhatsApp phone number and message content are processed by Meta's WhatsApp Business Platform. No Meta advertising cookies are set on the host domain.
How does ConsentStack categorize WhatsApp Business?
ConsentStack classifies WhatsApp Business as functional. The widget is not blocked by the consent layer. For the lowest possible tracking footprint, ConsentStack recommends using a simple wa.me link rather than a JavaScript-based widget.
Related Vendors
Manage consent for WhatsApp Business
ConsentStack automatically detects and manages WhatsApp Business trackers so your site stays compliant with global privacy regulations.