What is the VISITOR_PRIVACY_METADATA cookie?
VISITOR_PRIVACY_METADATA is an HTTP cookie placed by YouTube, a Google-owned service, when a visitor views or interacts with an embedded YouTube video on a third-party site or directly on youtube.com.
It typically appears when the video player loads, regardless of whether the visitor is signed into a Google account, and is associated with internal mechanisms Google uses to manage a visitor's privacy and consent options for video services.
What data it stores
The cookie stores technical metadata related to the privacy preferences detected or set for the visitor, used by Google's systems to decide what type of personalization or tracking may apply.
The exact format of the value is not publicly documented by Google, and its content may vary. The data is sent to Google/YouTube servers (the .youtube.com domain and associated Google infrastructure).
What it is used for
The main purpose is to help Google determine and enforce a visitor's privacy preferences across the YouTube ecosystem, including whether personalized ads can be shown alongside video content.
For a website owner embedding YouTube videos, this cookie provides no direct functional benefit — it is part of Google's advertising and tracking infrastructure that activates automatically along with the standard embed player.
Does it require consent?
- CookieFix category: marketing (advertising/tracking).
- Under GDPR and the ePrivacy Directive, this cookie requires the visitor's prior consent, since it is tied to advertising/tracking mechanisms rather than being strictly necessary for the site to function.
- Website owners must disclose this cookie in their cookie policy and avoid loading the standard YouTube player before consent for the marketing category has been obtained.
How to block or delete VISITOR_PRIVACY_METADATA
Visitors can delete or block this cookie through their browser settings (per-site cookie management or clearing browsing data for youtube.com), or by using tracking-blocking browser extensions.
Website owners should avoid auto-loading the standard YouTube embed before consent, using either the privacy-enhanced mode (youtube-nocookie.com) where applicable or a click-to-load approach. A CMP such as CookieFix can automatically block the YouTube embed script and show a placeholder, only loading the real player once the visitor accepts the marketing category.
Frequently asked questions
It is an HTTP cookie set by YouTube (Google) on the .youtube.com domain, related to managing a visitor's privacy preferences within Google's video services.
Yes. Since it is classified as marketing/tracking, GDPR and ePrivacy rules require explicit consent before this cookie is set.
The typical observed duration is around 6 months, after which it expires automatically unless renewed by a new interaction.
You can prevent the standard YouTube player from loading before consent by using a CMP that blocks the embed script until the marketing category is accepted.