Third-party scripts and privacy
type: TechArticle
description: Every script loaded from another domain can read cookies, see the URL, and exfiltrate data from your page. Audit them, justify them, and lock them down.
language: en
is part of: Web Specification Studio
author: Web Specification Studio
publisher: Web Specification Studio
license: https://creativecommons.org/licenses/by/4.0/
date modified: 2026-07-09T00:00:00.000Z
citation: MDN — Content Security Policy (CSP)
  type: CreativeWork
  publisher: MDN
citation: EDPB Guidelines 2/2023 on Technical Scope of Art. 5(3) ePrivacy Directive
  type: CreativeWork
  publisher: EDPB
citation: MDN — Subresource Integrity
  type: CreativeWork
  publisher: MDN

Web Specification Studio
type: WebSite

Web Specification Studio
type: Organization

breadcrumb
type: BreadcrumbList
item list element: Home
  type: ListItem
  position: 1
  item: https://webspecification.com/
item list element: Spec
  type: ListItem
  position: 2
  item: https://webspecification.com/spec/
item list element: Privacy
  type: ListItem
  position: 3
  item: https://webspecification.com/spec/privacy/
item list element: Third-party scripts and privacy
  type: ListItem
  position: 4
  item: https://webspecification.com/spec/privacy/third-party-scripts/