I notice that Chrome puts service workers, indexed databases and local/session storage under "cookies" in the site info dropdown. Are these things in any way considered ways to access personal information or uniquely identify and track a visitor as per GDPR scope? Or is it at least theoretically possible to do so?

2 Answers 2


I am not a lawyer nor do I reside in the EU, but to the best of my understanding GDPR is a law about user tracking, not a law about which browser APIs you can use. In the eyes of the law it doesn't matter whether the Service Worker API is able to be used to uniquely identify and track a visitor - the law only cares about whether you actually use the API to do so.

So yes, Service Workers are theoretically possible to track users with. But if you're using them in a way that doesn't result in user-tracking, then no worries. Again, AFAIK.

  • If you use workbox as library, and import it from the Google-Servers, this alone might be considered tracking in Europe, because by requesting it from the user's browser it inevitably transmits its IP, and the IP is considered personal information in Europe - just be aware of this my fellow Developers! Commented Sep 2, 2023 at 20:51
  • @SebastianG.Marinescu To generalize that line of reasoning, all externally hosted website assets (images, scripts and styles) result in the exposure of the user's IP address to a third party domain. According to that reasoning, a web page's content would need to be loaded entirely from first-party domains to avoid the GDPR popup requirement. Does that sound right to you? Commented Sep 2, 2023 at 21:50

Let me make it more simple for you. GDPR means that you're handling the data of people in Europe. Whenever a user comes on your website, the website stores a small amount of data (also known as Cookies), and when your website is storing that small amount of data, then you have to declare it by law, and that is GDPR.

No matter what kind of website or business you own but if you have European audience, you must have to add GDPR consent.

Even if you're not using Google Analytics or any other Tracking plugin but your CMS (Wordpress, Joomla etc) will keep some data from your visitors. So it's a must for you to have GDPR.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.