Privacy

Configure your site to help comply with regional privacy regulations.

Responsibility

Site authors are responsible for ensuring compliance with regional privacy regulations, including but not limited to:

GDPR (General Data Protection Regulation): Applies to individuals within the European Union and the European Economic Area.
CCPA (California Consumer Privacy Act): Applies to California residents.
CPRA (California Privacy Rights Act): Expands upon the CCPA with stronger consumer privacy protections.
Virginia Consumer Data Protection Act (CDPA): Applies to businesses that collect, process, or sell the personal data of Virginia residents.

Hugo’s privacy settings can assist in compliance efforts.

Embedded templates

Hugo provides embedded templates to simplify site and content creation. Some of these templates interact with external services. For example, the youtube shortcode connects with YouTube’s servers to embed videos on your site.

Some of these templates include settings to enhance privacy.

Configuration

These settings affect the behavior of some of Hugo’s embedded templates. These settings may or may not affect the behavior of templates provided by third parties in their modules or themes.

These are the default privacy settings for Hugo’s embedded templates:

privacy:
  disqus:
    disable: false
  googleAnalytics:
    disable: false
    respectDoNotTrack: false
  instagram:
    disable: false
    simple: false
  twitter:
    disable: false
    enableDNT: false
    simple: false
  vimeo:
    disable: false
    enableDNT: false
    simple: false
  x:
    disable: false
    enableDNT: false
    simple: false
  youTube:
    disable: false
    privacyEnhanced: false

[privacy]
  [privacy.disqus]
    disable = false
  [privacy.googleAnalytics]
    disable = false
    respectDoNotTrack = false
  [privacy.instagram]
    disable = false
    simple = false
  [privacy.twitter]
    disable = false
    enableDNT = false
    simple = false
  [privacy.vimeo]
    disable = false
    enableDNT = false
    simple = false
  [privacy.x]
    disable = false
    enableDNT = false
    simple = false
  [privacy.youTube]
    disable = false
    privacyEnhanced = false

{
   "privacy": {
      "disqus": {
         "disable": false
      },
      "googleAnalytics": {
         "disable": false,
         "respectDoNotTrack": false
      },
      "instagram": {
         "disable": false,
         "simple": false
      },
      "twitter": {
         "disable": false,
         "enableDNT": false,
         "simple": false
      },
      "vimeo": {
         "disable": false,
         "enableDNT": false,
         "simple": false
      },
      "x": {
         "disable": false,
         "enableDNT": false,
         "simple": false
      },
      "youTube": {
         "disable": false,
         "privacyEnhanced": false
      }
   }
}

See each template’s documentation for a description of its privacy settings:

Last updated: February 17, 2025 : all: Change shortcode usage and design to prevent invalid HTML (0fca8ef25)

Improve this page