Do embedded YouTube videos need cookie consent?
A standard YouTube embed can set advertising and tracking cookies the moment the page loads, before anyone clicks play or accepts anything. That makes it a consent issue, even on an otherwise simple site.
Why a video embed is a consent issue
The default YouTube iframe loads content from Google's ad domain and can set cookies used for advertising right away. Under PECR and GDPR those are non-essential, so setting them before consent is the same problem as any marketing cookie firing early.
Privacy-enhanced mode helps, but is not a free pass
YouTube offers a privacy-enhanced embed (the youtube-nocookie.com domain) that holds off on some cookies until the visitor interacts with the player. It reduces what is set on load, but it does not fully remove tracking, so most compliance guidance still treats it as requiring consent.
How to stay compliant
- Gate the embed behind consent: do not load the iframe until the visitor accepts, often done by swapping in a placeholder thumbnail first.
- Or use privacy-enhanced embeds and still cover video cookies in your cookie policy and banner.
This is one of the sneakiest ways an ad-free site ends up needing a cookie banner: the video does the tracking you did not realise you had.
Want us to check your tracking in 10 seconds?
Pop in your domain and we will show you what is firing, what is not, and where data is leaking. Free, no signup.
Check my tracking freeGet a plain-English audit
We check your live GA4, Google Tag Manager and consent setup by hand and tell you exactly what is wrong. The audit comes off any build.
See how it works & pricingDatahound are analytics and ad-tracking specialists. We fix broken GA4, Google Tag Manager and server-side tracking so every sale, form and call gets counted. Back to datahound.agency · All tracking guides · Do Google Fonts need consent?