Google APIs / GStatic
General-purpose Google CDN and API endpoints (covers Maps, Identity, Firebase, etc.).
Catch-all for googleapis.com and gstatic.com requests not already attributed to a more specific Google product.
Detected by domain patterns
googleapis.comgstatic.comgoogleusercontent.comggpht.comaccounts.google.comgoogle.figoogle.nogoogle.segoogle.dkEuropean alternatives
GDPR & Data Residency
Google APIs / GStatic is owned by a US company. Under GDPR Chapter V, transferring personal data to the US requires an appropriate safeguard (typically Standard Contractual Clauses or adequacy decisions. The 2020 Schrems II ruling invalidated Privacy Shield and increased scrutiny on US data transfers, requiring case-by-case Transfer Impact Assessments (TIAs).
If your website loads Google APIs / GStatic scripts or sends user data to their servers, your users' data may be processed in the United States. Review Google APIs / GStatic's DPA (Data Processing Agreement) and ensure it covers SCCs.
Tip: Consider replacing Google APIs / GStatic with one of the EU-based alternatives listed above to simplify GDPR compliance and remove cross-border transfer obligations.
Does your website use Google APIs / GStatic?
Run a free StackPatrol scan to see all third-party services on your front page.