diff --git a/src/embeds/index.html b/src/embeds/index.html
index a42cb54..1725464 100644
--- a/src/embeds/index.html
+++ b/src/embeds/index.html
@@ -6,6 +6,8 @@
     <link rel="stylesheet" type="text/css" href="../embed.css">
     <%= t.include("partials/_webfonts.html") %>
     <base target="_blank">
+    <!-- GDPR compliance -->
+    <script src="https://apps.npr.org/gdpr/gdprCompliance.js"></script>
   </head>
   <body>
     <script>
diff --git a/src/embeds/iowa.html b/src/embeds/iowa.html
index 441cf94..65306a7 100644
--- a/src/embeds/iowa.html
+++ b/src/embeds/iowa.html
@@ -6,6 +6,8 @@
     <link rel="stylesheet" type="text/css" href="../embed.css">
     <%= t.include("partials/_webfonts.html") %>
     <base target="_blank">
+    <!-- GDPR compliance -->
+    <script src="https://apps.npr.org/gdpr/gdprCompliance.js"></script>
   </head>
   <body>
     <script>
diff --git a/src/embeds/liveblog-headlines.html b/src/embeds/liveblog-headlines.html
index 8ea30bc..22162e6 100644
--- a/src/embeds/liveblog-headlines.html
+++ b/src/embeds/liveblog-headlines.html
@@ -6,6 +6,8 @@
     <meta name="viewport" content="width=device-width,initial-scale=1">
     <link rel="stylesheet" type="text/css" href="../embed.css">
     <base target="_blank">
+    <!-- GDPR compliance -->
+    <script src="https://apps.npr.org/gdpr/gdprCompliance.js"></script>
   </head>
   <body>
     <script>
diff --git a/src/embeds/nevada.html b/src/embeds/nevada.html
index 86f2310..92c8653 100644
--- a/src/embeds/nevada.html
+++ b/src/embeds/nevada.html
@@ -6,6 +6,8 @@
     <meta name="viewport" content="width=device-width,initial-scale=1">
     <link rel="stylesheet" type="text/css" href="../embed.css">
     <base target="_blank">
+    <!-- GDPR compliance -->
+    <script src="https://apps.npr.org/gdpr/gdprCompliance.js"></script>
   </head>
   <body>
     <script>
diff --git a/src/embeds/new-hampshire.html b/src/embeds/new-hampshire.html
index 92b64fe..c6c9d3e 100644
--- a/src/embeds/new-hampshire.html
+++ b/src/embeds/new-hampshire.html
@@ -6,6 +6,8 @@
     <meta name="viewport" content="width=device-width,initial-scale=1">
     <link rel="stylesheet" type="text/css" href="../embed.css">
     <base target="_blank">
+    <!-- GDPR compliance -->
+    <script src="https://apps.npr.org/gdpr/gdprCompliance.js"></script>
   </head>
   <body>
     <script>
diff --git a/src/embeds/results-june-2.html b/src/embeds/results-june-2.html
index d1e33c1..335705a 100644
--- a/src/embeds/results-june-2.html
+++ b/src/embeds/results-june-2.html
@@ -6,6 +6,8 @@
     <link rel="stylesheet" type="text/css" href="../embed.css">
     <%= t.include("partials/_webfonts.html") %>
     <base target="_blank">
+    <!-- GDPR compliance -->
+    <script src="https://apps.npr.org/gdpr/gdprCompliance.js"></script>
   </head>
   <body>
     <script>
diff --git a/src/embeds/results-march-10.html b/src/embeds/results-march-10.html
index afb54be..c057538 100644
--- a/src/embeds/results-march-10.html
+++ b/src/embeds/results-march-10.html
@@ -6,6 +6,8 @@
     <link rel="stylesheet" type="text/css" href="../embed.css">
     <%= t.include("partials/_webfonts.html") %>
     <base target="_blank">
+    <!-- GDPR compliance -->
+    <script src="https://apps.npr.org/gdpr/gdprCompliance.js"></script>
   </head>
   <body>
     <script>
diff --git a/src/embeds/results-march-17.html b/src/embeds/results-march-17.html
index 016835e..00db1bb 100644
--- a/src/embeds/results-march-17.html
+++ b/src/embeds/results-march-17.html
@@ -6,6 +6,8 @@
     <link rel="stylesheet" type="text/css" href="../embed.css">
     <%= t.include("partials/_webfonts.html") %>
     <base target="_blank">
+    <!-- GDPR compliance -->
+    <script src="https://apps.npr.org/gdpr/gdprCompliance.js"></script>
   </head>
   <body>
     <script>
diff --git a/src/embeds/super-tuesday.html b/src/embeds/super-tuesday.html
index e5b6126..6432588 100644
--- a/src/embeds/super-tuesday.html
+++ b/src/embeds/super-tuesday.html
@@ -6,6 +6,8 @@
     <link rel="stylesheet" type="text/css" href="../embed.css">
     <%= t.include("partials/_webfonts.html") %>
     <base target="_blank">
+    <!-- GDPR compliance -->
+    <script src="https://apps.npr.org/gdpr/gdprCompliance.js"></script>
   </head>
   <body>
     <script>
diff --git a/src/partials/_head.html b/src/partials/_head.html
index 3f4fe3e..391dd35 100644
--- a/src/partials/_head.html
+++ b/src/partials/_head.html
@@ -13,9 +13,10 @@
 <!-- Safari, you're the worst -->
 <meta name='format-detection' content='telephone=no'>
 
-<% if (!project.embedded) { %>
 <!-- GDPR compliance -->
-<script src="https://apps.npr.org/gdpr/gdprCompliance.js" async defer></script>
+<script src="https://apps.npr.org/gdpr/gdprCompliance.js"></script>
+
+<% if (!project.embedded) { %>
 
 <!-- BEGIN TWITTER SUMMARY CARD -->
 <meta name="twitter:card" content="summary_large_image">
