> How Piwik PRO Core handles cookies, consent and personal data under the GDPR and ePrivacy rules, with practical steps for a compliant EU deployment. > > Canonical: https://www.flowconsent.com/en/services/analytics/piwik-pro-core Analytics # Piwik PRO Core Analytics Piwik PRO is a privacy first analytics and tag management suite hosted in the European Union and built as a GDPR friendly alternative to Google Analytics. [Block Piwik PRO Core until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=analytics) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Analytics](https://www.flowconsent.com/en/services/analytics) - Consent Analytics - Prior consent Required - Documented cookies 4 - Third-party domains 3 - Servers European Union (Germany), with optional United States or private cloud hosting Overview ## What does Piwik PRO Core do? ## **What Piwik PRO Core is** Piwik PRO Core is the analytics module of the Piwik PRO Analytics Suite, a privacy oriented platform for measuring website and product usage. European organisations, public bodies and regulated industries often adopt it as an alternative to Google Analytics because data can be hosted inside the European Union and the product is built around data ownership and granular consent. ## **Cookies and data it collects** In its standard configuration Piwik PRO sets first party cookies such as \_pk\_id and \_pk\_ses to recognise returning visitors and group page views into sessions. It records page URLs, referrers, device and browser details, approximate location derived from the IP address and on site interactions. IP addresses can be anonymised and the platform also offers a fully cookieless tracking mode that relies on no persistent identifiers. ## **GDPR and ePrivacy implications** Because the standard mode stores and reads identifiers on the user device, it falls under Article 5(3) of the ePrivacy Directive, which requires prior consent for non essential storage. The data collected, including online identifiers and IP addresses, is personal data under the GDPR, so a lawful basis, transparency and respect for data subject rights all apply. ## **Consent requirements** When Piwik PRO runs in standard analytics mode you must obtain prior, informed and freely given consent before the tracking tag sets cookies. The suite includes its own Consent Manager that can hold analytics back until the visitor agrees. In the anonymous, cookieless mode you may be able to rely on legitimate interest, but confirm this with your data protection officer. ## **Data transfers** With the default European Union hosting, visitor data stays on servers inside the EU and is not transferred to third countries. Piwik PRO also offers United States and private cloud hosting; selecting those options introduces international transfers that must be covered by a safeguard such as Standard Contractual Clauses or the EU US Data Privacy Framework. ## **Practical compliance steps** Load the Piwik PRO tag only after consent, list its cookies in your cookie policy and confirm the hosting region in the administration panel. Enable IP anonymisation, set proportionate retention periods, sign the data processing agreement offered by Piwik PRO and record the platform in your register of processing activities. Compliance ## Piwik PRO Core and the GDPR Piwik PRO Core is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent under Article 6(1)(a) GDPR, or legitimate interest in fully anonymised mode - Risk level low - Applicable regulations GDPR, ePrivacy Directive ### Impact assessment (DPIA) A full DPIA is rarely mandatory for standard consented web analytics, but it is recommended when Piwik PRO is combined with cross device tracking, user IDs or large scale behavioural profiling. Document data minimisation, retention periods and the anonymisation settings applied. ### Sample text for your banner > We use Piwik PRO analytics cookies to understand how visitors use our website and to improve it. These cookies are set only if you accept analytics. Cookies and trackers ## What Piwik PRO Core sets and contacts - Tracking method First party cookies and JavaScript tag - Server location European Union (Germany), with optional United States or private cloud hosting - Cookieless mode available Yes ### Cookies set (4) | Name | Type | Duration | Purpose | | ------------------------------ | --------- | ------------------------ | --------------------------------------------------------------------------------- | | \_pk\_id | Analytics | 13 months (configurable) | Stores a unique visitor identifier so Piwik PRO can recognise returning visitors. | | \_pk\_ses | Analytics | 30 minutes | Marks a short lived session to group page views from the same visit. | | \_pk\_ref | Analytics | 6 months | Stores attribution data about the source that referred the visitor. | | stg\_traffic\_source\_priority | Analytics | 30 minutes | Used by Piwik PRO Tag Manager to determine how traffic sources are attributed. | ### Third-party domains contacted (3) - `piwik.pro` - `containers.piwik.pro` - `cdn.piwik.pro` Questions ## Frequently asked questions about Piwik PRO Core Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Which cookies does Piwik PRO set? In standard mode Piwik PRO sets first party cookies such as \_pk\_id, which identifies the visitor, and \_pk\_ses, which marks the current session. Their lifetimes are configurable and the suite can also run without any cookies. ### Do I need consent to use Piwik PRO? Yes, in its standard analytics mode you need prior consent because it stores and reads cookies on the device. In the fully anonymous, cookieless mode consent may not be required, but you should confirm this for your jurisdiction. ### What is the legal basis for Piwik PRO? Standard analytics relies on consent under Article 6(1)(a) of the GDPR together with Article 5(3) of the ePrivacy Directive. Anonymous mode can sometimes rely on legitimate interest under Article 6(1)(f). ### Does Piwik PRO send data to the United States? Not when you use the default European Union hosting, where data stays in the EU. If you choose US or private cloud hosting, transfers must be protected by Standard Contractual Clauses or the EU US Data Privacy Framework. ### Do I need a DPIA for Piwik PRO? A DPIA is not usually required for standard consented analytics, but it becomes advisable when you enable user IDs, cross device tracking or large scale profiling. Document your reasoning either way. ### How do I deploy Piwik PRO compliantly? Place the tag behind a consent gate, enable IP anonymisation, set short retention periods, sign the data processing agreement and describe the cookies in your policy. Keep the EU hosting region unless you have a reason to change it. ### What are the alternatives to Piwik PRO? Other privacy oriented analytics include Matomo, Plausible, Fathom and Umami, while Google Analytics 4 remains the most common but more transfer heavy option. The right choice depends on hosting location and consent strategy. ### How do I update my cookie policy for Piwik PRO? List each Piwik PRO cookie with its name, purpose and duration, state that analytics runs only after consent and explain how visitors can withdraw it. Review the entry whenever you change tracking settings or hosting. Same category ## More services: Analytics [See the whole category](https://www.flowconsent.com/en/services/analytics) ### [Session Rewind](https://www.flowconsent.com/en/services/analytics/session-rewind) [Session Rewind is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Session Rewind offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Session Rewind empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/session-rewind) [Analytics](https://www.flowconsent.com/en/services/analytics/session-rewind) · ### [Lead Forensics](https://www.flowconsent.com/en/services/analytics/lead-forensics) [Lead Forensics is a lead generation platform designed to help businesses capture, qualify, and convert website visitors into sales-ready leads. It offers smart forms, interactive content, and behavioral tracking to identify high-intent prospects. Lead Forensics integrates with CRM and marketing automation tools to streamline lead nurturing. With scoring models and analytics, Lead Forensics helps teams focus on the most promising opportunities, improving pipeline quality and revenue growth.](https://www.flowconsent.com/en/services/analytics/lead-forensics) [Analytics](https://www.flowconsent.com/en/services/analytics/lead-forensics) · ### [51Degrees](https://www.flowconsent.com/en/services/analytics/52degrees) [52Degrees is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. 52Degrees offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, 52Degrees empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/52degrees) [Analytics](https://www.flowconsent.com/en/services/analytics/52degrees) · ### [Spotler Activate](https://www.flowconsent.com/en/services/analytics/spotler-activate) [Spotler Activate is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Spotler Activate supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Spotler Activate enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/spotler-activate) [Analytics](https://www.flowconsent.com/en/services/analytics/spotler-activate) · ### [Woopra](https://www.flowconsent.com/en/services/analytics/woopra) [Woopra is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Woopra offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Woopra empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/woopra) [Analytics](https://www.flowconsent.com/en/services/analytics/woopra) · ### [Luigi's Box](https://www.flowconsent.com/en/services/analytics/luigi-s-box) [Luigi's Box is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Luigi's Box offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Luigi's Box empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/luigi-s-box) [Analytics](https://www.flowconsent.com/en/services/analytics/luigi-s-box) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)