OpenStreetMap

OpenStreetMap

OpenStreetMap provides free, open-source collaborative map data embedded on websites as interactive tile maps. When an OSM map loads, tile images are fetched from openstreetmap.org servers, which may log the requesting IP address. No tracking scripts, advertising technologies, or user-identifying cookies are used.

Overview

OpenStreetMap (OSM) is a collaborative, open-source mapping platform that provides free map data and tile rendering for website integration. When embedded on a website, OSM maps load tile images from OpenStreetMap's servers, displaying interactive maps without the tracking, cookie setting, or behavioral data collection associated with commercial map services like Google Maps.

What This Script Does

OpenStreetMap embeds operate with a minimal data footprint:

  • Map tile loading: Fetches map tile images from tile.openstreetmap.org servers based on the map viewport (coordinates, zoom level). Tiles are standard image files rendered in a grid.
  • Leaflet or OpenLayers: Most OSM implementations use open-source mapping libraries (Leaflet, OpenLayers) loaded from the site's own domain or a CDN for map interactivity — panning, zooming, and marker display.
  • Standard HTTP data: Tile requests include standard HTTP headers (IP address, user agent, referrer). OpenStreetMap's tile servers may log this data for operational purposes (abuse prevention, capacity planning).
  • No cookies: OpenStreetMap does not set cookies on the website's domain or on its own domain via tile requests.
  • No tracking: No behavioral tracking, no user identification, no analytics data collection. OSM serves tiles as static images.
  • No JavaScript from OSM: The mapping library (Leaflet) is self-hosted; OSM contributes only the tile images.

Consent & Compliance

OpenStreetMap falls under the functional consent category. Map display serves a functional content purpose with minimal privacy impact.

Under GDPR and ePrivacy, OSM tile loading transmits the visitor's IP address to OpenStreetMap's servers (a third party). Under strict GDPR interpretation, this constitutes personal data processing by a third party. However, the OSM Foundation operates as a non-profit under the GDPR with legitimate interest in serving map data.

Under CCPA/CPRA, the minimal data processed (IP in HTTP logs) serves content delivery. OSM does not sell or share personal information.

Should You Block This Without Consent?

No. OpenStreetMap provides functional map display with no cookies, no tracking, and no behavioral data collection. It is the most privacy-friendly interactive map option available. Blocking it would remove map functionality without meaningful privacy benefit.

Visit website

Consent Categories

Functional

Also Known As

openstreetmaposmosm tilesopen source mapsopenstreetmap consentosm embed

Industries

Computers Electronics and TechnologyBusiness and Consumer ServicesProgramming and Developer SoftwareScience and Education

Tracked Domains (1)

openstreetmap.orgFunctional

Frequently Asked Questions

Do OpenStreetMap embeds need cookie consent?

No. OpenStreetMap does not set cookies, does not run tracking scripts, and does not collect behavioral data. Map tiles are served as static images. While tile requests transmit the visitor's IP address to OSM servers, the OSM Foundation operates as a non-profit and processes this minimally for content delivery only.

What data does an OpenStreetMap embed collect from visitors?

OpenStreetMap's data footprint is minimal. Tile requests include standard HTTP headers — IP address, user agent, and referrer — used for operational purposes like abuse prevention. No cookies are set, no JavaScript is loaded from OSM servers, and no behavioral tracking occurs. The mapping library like Leaflet is typically self-hosted.

How does ConsentStack handle OpenStreetMap tiles?

ConsentStack identifies OpenStreetMap through tile.openstreetmap.org requests and assigns it the functional category. Since OSM sets no cookies and performs no tracking, ConsentStack allows map tiles to load without requiring consent. This makes OSM the most privacy-friendly interactive map option available.

Related Vendors

Google Maps
Google Maps
Google Maps is the dominant web mapping service used for embedded maps and location features on websites. Scripts load interactive map tiles, geocoding, and Places API functionality through the Maps JavaScript API. May set cookies to remember map preferences and manage API quota.
Google Search
Google Search
Google Search appears on websites through the Programmable Search Engine, enabling custom site-specific search functionality. Scripts load the search widget from Google's servers to render search bars and display results within the host website. Sends search queries to Google's index and may set cookies for search personalization and query history.
Google
Google
Google is the dominant provider of web analytics, advertising, and infrastructure tools. Scripts like Google Analytics, Tag Manager, Ads, and reCAPTCHA collect behavioral data, manage tag firing, serve targeted ads, and detect bots. Sets persistent cookies to track users and correlate activity across sites.
Microsoft Teams
Microsoft Teams
Microsoft Teams is a workplace communication and collaboration platform that can be embedded on websites for chat, meetings, and document sharing. Embedded widgets load from Microsoft's servers to enable real-time messaging, video calls, and file collaboration. Sets authentication and session cookies to verify participant identity and maintain connection state.
Apple Maps JS
Apple Maps JS
Apple Maps JS is Apple's JavaScript mapping framework for embedding interactive maps on websites. Scripts load map tiles, location pins, and routing data from Apple's MapKit servers to render navigable maps within web pages. Requires a MapKit JS token for authentication but does not set tracking cookies or collect behavioral analytics data.
Apple Business Chat
Apple Business Chat
Apple Business Chat enables direct customer messaging between websites and Apple's Messages app. Scripts load chat buttons and conversation interfaces that connect visitors to business support agents through iMessage. Sets minimal session cookies to maintain conversation context but does not track browsing behavior or collect analytics data.

Manage consent for OpenStreetMap

ConsentStack automatically detects and manages OpenStreetMap trackers so your site stays compliant with global privacy regulations.