Updated 18 September 2026. Our original 2018 article described this as a cookie-free shortcut. That wording was too broad, and its example used a watch-page URL rather than an embed URL.
YouTube offers a privacy-enhanced mode for embedded players. It is a useful setting, but changing a domain does not make a website automatically compliant with privacy rules.
Use an embed URL, not a watch link
In YouTube, choose Share, then Embed, and use the supplied player code. For privacy-enhanced mode, the player address follows this pattern:
https://www.youtube-nocookie.com/embed/VIDEO_IDReplace VIDEO_ID with the video’s identifier. A normal /watch?v= address is a viewing-page link, not the iframe player address. Follow YouTube’s official embedding instructions.
Understand what the setting changes
YouTube says views in this mode are not used to personalise the viewer’s YouTube experience or advertising outside your site. Ads served within that player are non-personalised. That is different from a promise that the embed makes no third-party connections, processes no data or can never require consent.
Check the whole video journey
Test the page in a fresh browser session before making a consent choice, after rejecting optional uses and after accepting them. Inspect the actual player and consent-manager behaviour rather than relying on the domain name.
A locally hosted preview with a clearly explained load control can keep the player from loading immediately. If you use that approach, check the preview itself does not fetch a remote tracking resource, and make sure any consent that is required is obtained before loading the player. A generic play click is not a substitute for an informed choice.
Use the ICO’s storage and access technology guidance when assessing your setup. We can help with the technical integration of your website videos; talk to the team about what you need.
