Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Craftum is a Russian no code website builder that hosts landing pages, online stores and small business sites with built in Yandex analytics and advertising integrations.
Craftum is a no code website builder operated by a Russian company. It is used to publish landing pages, online stores and small business sites, with a strong focus on the Russian and CIS markets. Pages built with Craftum are hosted on Craftum infrastructure inside Russia, and the platform integrates tightly with Yandex Metrica analytics, Yandex Direct advertising and Russian payment providers.
A page hosted on Craftum sets first party builder session cookies, an A/B testing cookie and, when integrations are enabled, Yandex Metrica analytics cookies (_ym_uid, _ym_d, _ym_isad), Yandex advertising cookies and any third party scripts the operator adds. Form submissions on a Craftum page are stored in the Craftum database and forwarded to email or CRM connectors.
Russia has no adequacy decision under the GDPR. Hosting a page on Craftum and serving it to European visitors is therefore a transfer to a third country covered by chapter V of the regulation. The Schrems II case law expects Standard Contractual Clauses, a transfer impact assessment and supplementary measures whenever the destination country lacks adequacy and grants broad intelligence access powers.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
For an EU audience the only safe path is explicit, informed consent before the visitor''s data is processed by Craftum and its Yandex integrations. Disable optional analytics and advertising features by default, gate them behind a CMP, and prefer an EU based builder for any new EU oriented project.
Russian Federal Law 152 FZ on Personal Data and the broader access regime for security services significantly limit the effectiveness of supplementary measures. Encryption in transit is the bare minimum; encryption at rest with keys outside Russia is rarely available on a hosted builder. Most EU data protection authorities recommend migrating to an EU host for any European facing project.
Migrate EU oriented sites to an EU based builder such as Webflow EU, Strikingly, Tilda EU mirror, Wix EU or a self hosted CMS. If a Craftum page must remain online for EU visitors, sign SCCs, complete a TIA, disable Yandex Metrica unless consent is captured, document the transfer and offer a fallback EU page.
Websites using Craftum must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is strongly recommended for any European brand using Craftum to host pages aimed at EU visitors. Hosting in Russia, automatic Yandex Metrica integration and advertising pixels combine to create a transfer profile that requires explicit assessment, SCCs and supplementary measures.
Sample consent text
This page is built and hosted on Craftum, a Russian platform. By accepting, you allow Craftum and its analytics partners to set cookies and to process your data on servers located in the Russian Federation, a country without a European Commission adequacy decision.
Third-party domains contacted
craftum.rucraftum.commc.yandex.ruyandex.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| craftum_session | Strictly necessary | Session | Maintains the visitor session on a Craftum hosted page. |
| craftum_ab | Functional | 30 days | Persists the A/B testing variant assigned to the visitor on a Craftum landing page. |
| _ym_uid | Analytics | 1 year | Yandex Metrica visitor identifier loaded by default on Craftum hosted sites with Yandex integration. |
| _ym_d | Analytics | 1 year | Yandex Metrica session date cookie used together with _ym_uid for visit attribution. |
Craftum collects user analytics data — you legally need a consent banner. Try FlowConsent free.
A Craftum hosted site sets first party builder session cookies, an A/B testing cookie and, when integrations are enabled, Yandex Metrica cookies (_ym_uid, _ym_d, _ym_isad) plus any additional pixels added by the operator.
Yes for any European audience. The Yandex Metrica and advertising cookies are non essential, and the Russian hosting itself triggers a third country transfer that requires informed consent on top of SCCs.
Legitimate interest covers the strictly necessary builder session cookies. Consent is required for analytics and advertising cookies and as the most defensible basis for the international transfer to Russia.
Yes. Craftum is hosted in Russia and stores customer data there. Russia has no adequacy decision under the GDPR, so any EU data flowing to Craftum is a chapter V transfer requiring SCCs and a transfer impact assessment.
Yes for any European audience. The combination of Russian hosting, Yandex Metrica integration and advertising cookies meets the WP248 thresholds for high risk and requires a DPIA and a documented transfer impact assessment.
Disable Yandex Metrica unless consent is captured, sign SCCs with Craftum, complete a transfer impact assessment, gate the page behind a CMP for EU traffic and provide an EU hosted alternative.
EU friendly site builders include Webflow EU, Strikingly with EU hosting, the EU mirror of Tilda, Wix EU, Squarespace, IONOS MyWebsite and self hosted CMS such as WordPress, Webflow Enterprise EU or Statamic.
State clearly that the site is hosted on Craftum in Russia, list every Craftum and Yandex cookie with its lifetime and purpose, document the Yandex Metrica integration, declare the third country transfer and provide instructions to revoke consent.