Yelp for Business

Yelp for Business

Yelp for Business provides review and rating widgets for embedding on business websites. Scripts render star ratings, review counts, and review excerpts sourced from Yelp's platform. Scripts may set cookies to track widget impressions and user interactions with the embedded content.

Overview

Yelp for Business provides embeddable review widgets that allow businesses to showcase their Yelp ratings, review counts, and customer testimonials directly on their own websites. These widgets pull live data from Yelp's platform and are typically embedded on restaurant sites, local service provider pages, and retail storefronts. Yelp operates one of the largest local business review networks in the US and has significant presence in Canada, the UK, and Australia.

What This Script Does

Widget Rendering and Data Fetching

  • Loads a Yelp review badge or widget via JavaScript from yelp.com domains
  • Fetches the business's current Yelp rating, review count, and recent review excerpts from the Yelp API
  • Renders a styled embed component showing star rating, review count, and a "Read our reviews on Yelp" call-to-action
  • Widget assets (JavaScript, CSS) served from Yelp's CDN infrastructure

Script Files

  • Badge embed: https://www.yelp.com/staticmap/v2/widget/assets/js/Yelp_widget.js or equivalent badge script
  • API requests to api.yelp.com for live business data
  • Some implementations use the Yelp Fusion API with a server-side key, avoiding client-side scripts entirely

Cookies and Tracking

  • _ga, _gid — if Yelp's widget loads Google Analytics within its context; third-party, standard GA durations
  • Yelp session cookies (yelp_tracking_id, ab_sampling) — Yelp's own tracking identifiers that persist in the yelp.com cookie jar when widget resources are loaded; these may be accessible to Yelp's advertising and analytics systems
  • Impression tracking pixels fire when the widget loads, recording the host URL and business ID to Yelp's analytics

Data Collected and Transmitted

  • Widget load event: host page URL, business ID, timestamp
  • Click events when visitors click through to the full Yelp profile
  • Visitor IP address transmitted to Yelp servers (US-based)
  • Referrer URL passed when the visitor navigates to yelp.com

Yelp Advertising Ecosystem

  • Yelp runs a local advertising network where businesses can purchase sponsored placements
  • Impression data collected through widget loads may inform Yelp's audience modeling for its ad products
  • Businesses that advertise on Yelp benefit from cross-referencing widget impression data with ad campaign attribution

Consent & Compliance

Consent category: Functional

Yelp for Business widgets primarily display publicly available review content. The core widget function — rendering a business's review score — serves a legitimate business interest. Under GDPR Article 6(1)(f), displaying social proof for a local business is unlikely to override visitor privacy interests when the tracking is limited to impression events. However, if Yelp uses widget impression data for its advertising platform (audience modeling, ad attribution), this goes beyond the functional purpose and would require consent under the ePrivacy Directive. Under CCPA, widget interaction data shared with Yelp for advertising purposes could constitute "sharing" of personal information for cross-context behavioral advertising, requiring disclosure and opt-out rights.

Should You Block This Without Consent?

Conditional. The core review display is functional, but Yelp may collect impression and interaction data that feeds into its advertising ecosystem. Sites under strict GDPR enforcement should consider gating the widget behind functional consent. Under a permissive interpretation, the widget can load without consent as a functional review display, provided its presence is disclosed in the cookie notice.

Visit website

Consent Categories

Functional

Also Known As

Yelp widgetYelp reviews embedYelp for BusinessYelp cookiesYelp tracking

Industries

Business and Consumer ServicesBusiness Services

Tracked Domains (1)

yelp.comFunctional

Frequently Asked Questions

Does a Yelp review widget require visitor consent?

Conditionally. The core review display serves a functional purpose and can load without consent under legitimate interest. If Yelp uses widget impression data for audience modeling in its ad platform, that requires ePrivacy consent. Sites under strict GDPR enforcement should gate the widget behind functional consent to be safe.

What does the Yelp for Business widget track?

The widget fires an impression pixel on load, recording the host page URL, business ID, and timestamp to Yelp's analytics. Click events are logged when visitors navigate to the full Yelp profile. Yelp session cookies including yelp_tracking_id and ab_sampling may be set in the yelp.com context when widget resources load.

How does ConsentStack handle the Yelp widget?

ConsentStack classifies Yelp for Business as functional with a conditional consent note. It can be configured to load freely as functional social proof, or gated behind functional consent for stricter compliance postures. Either way, ConsentStack surfaces the vendor in your cookie notice so visitors are informed of its presence and data practices.

Related Vendors

Google Maps
Google Maps
Google Maps is the dominant web mapping service used for embedded maps and location features on websites. Scripts load interactive map tiles, geocoding, and Places API functionality through the Maps JavaScript API. May set cookies to remember map preferences and manage API quota.
Google Search
Google Search
Google Search appears on websites through the Programmable Search Engine, enabling custom site-specific search functionality. Scripts load the search widget from Google's servers to render search bars and display results within the host website. Sends search queries to Google's index and may set cookies for search personalization and query history.
Google
Google
Google is the dominant provider of web analytics, advertising, and infrastructure tools. Scripts like Google Analytics, Tag Manager, Ads, and reCAPTCHA collect behavioral data, manage tag firing, serve targeted ads, and detect bots. Sets persistent cookies to track users and correlate activity across sites.
Microsoft Teams
Microsoft Teams
Microsoft Teams is a workplace communication and collaboration platform that can be embedded on websites for chat, meetings, and document sharing. Embedded widgets load from Microsoft's servers to enable real-time messaging, video calls, and file collaboration. Sets authentication and session cookies to verify participant identity and maintain connection state.
Apple Maps JS
Apple Maps JS
Apple Maps JS is Apple's JavaScript mapping framework for embedding interactive maps on websites. Scripts load map tiles, location pins, and routing data from Apple's MapKit servers to render navigable maps within web pages. Requires a MapKit JS token for authentication but does not set tracking cookies or collect behavioral analytics data.
Apple Business Chat
Apple Business Chat
Apple Business Chat enables direct customer messaging between websites and Apple's Messages app. Scripts load chat buttons and conversation interfaces that connect visitors to business support agents through iMessage. Sets minimal session cookies to maintain conversation context but does not track browsing behavior or collect analytics data.

Manage consent for Yelp for Business

ConsentStack automatically detects and manages Yelp for Business trackers so your site stays compliant with global privacy regulations.