Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
SiteWright is a website builder and site management tool that lets businesses create, host and maintain websites. It sets functional storefront and session cookies for the builder and published sites, and may offer optional analytics for visitor measurement.
SiteWright is a website builder and site management platform that lets businesses design, publish and maintain websites without deep technical skill. It typically bundles hosting, templates, content management and security features such as SSL and backups, and is often used for small business and storefront sites that need a managed, reliable presence online.
In a standard deployment SiteWright sets functional cookies that keep the builder logged in and maintain visitor sessions on published sites, for example preserving language, basket or form state. Where the operator enables analytics or embeds third party widgets, additional measurement cookies may be set. The platform processes account data for the site owner and basic technical data such as IP addresses for visitors.
Strictly necessary cookies that make the builder and the published site function can rely on the ePrivacy exemption and do not require consent. Any analytics or marketing cookies the operator chooses to enable are not strictly necessary and require prior consent. The site owner is the controller for visitor data and SiteWright acts as a processor under a data processing agreement.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
No consent is needed for the functional cookies that keep the site working, but a consent banner is required before loading any analytics, advertising or embedded social cookies on the published site. Site owners should configure their SiteWright site so that non essential cookies and third party embeds only fire after the visitor accepts, with refusal being just as easy as acceptance.
Where the data lives depends on the hosting plan and any embedded services. If hosting, content delivery or analytics run on US based infrastructure, site and visitor data may be transferred outside the European Economic Area, including to the United States. Such transfers need an appropriate safeguard such as Standard Contractual Clauses or reliance on a provider certified under the EU US Data Privacy Framework, supported by a transfer impact assessment.
Confirm where SiteWright hosts your site, sign the data processing agreement, and document transfer safeguards if data leaves the EEA. Add a consent banner that blocks analytics and embeds until accepted, list all cookies in your cookie notice, and review any third party widgets you embed. Choose EEA hosting where available to minimise transfer obligations.
Websites using SiteWright must obtain user consent under GDPR regulations.
DPIA considerations
A full DPIA is rarely required for a standard managed website, but assess the cookies and embeds you enable, where your site is hosted, and whether visitor data is transferred to the United States. Risk rises if you add analytics, advertising pixels or third party social widgets to the published site.
Sample consent text
We use optional analytics cookies to understand how visitors use this website. These are only set if you accept. You can change your choice in our cookie settings at any time, and the site works fully if you decline.
Third-party domains contacted
sitewright.iocdn.sitewright.ioCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| sitewright_session | functional | Session | Maintains the editor and visitor session so logins and page state persist during a visit. |
| sitewright_csrf | functional | Session | Provides cross site request forgery protection for builder forms and account actions. |
| sitewright_prefs | functional | 1 year | Stores site preferences such as language and layout choices for returning visitors. |
| sitewright_analytics | analytics | 13 months | Optional cookie that measures visitor traffic on the published site when analytics is enabled by the owner. |
SiteWright collects user analytics data — you legally need a consent banner. Try FlowConsent free.
SiteWright typically sets functional cookies that keep the builder logged in and maintain visitor sessions on published sites, for example language, basket or form state. Where the site owner enables analytics or embeds third party widgets, additional non essential measurement cookies may be set, which require consent.
No consent is needed for the strictly necessary functional cookies that keep the site working. Consent is required before loading any analytics, advertising or embedded social cookies on the published site, and these should only fire after the visitor accepts.
Core site and builder cookies rely on necessity or legitimate interest because they are needed to deliver the website. Analytics and marketing cookies rely on consent under the ePrivacy Directive, with the resulting personal data processing governed by the GDPR.
It depends on the hosting plan and any embedded services. If hosting, content delivery or analytics run on US based infrastructure, site and visitor data may be transferred to the United States, which requires Standard Contractual Clauses or an EU US Data Privacy Framework certified provider plus a transfer impact assessment. EEA hosting avoids this.
A full DPIA is rarely required for a standard managed website. Assess the cookies and embeds you enable, where the site is hosted and whether visitor data is transferred to the United States. Risk rises if you add analytics, advertising pixels or third party social widgets.
Confirm where your site is hosted, sign the data processing agreement, and add a consent banner that blocks analytics and embeds until accepted. List all cookies in your cookie notice, review embedded third party widgets, and prefer EEA hosting where available to reduce transfer obligations.
EU based and self hostable website builders and content management systems such as WordPress with EU hosting, Webflow, Jimdo or open source options like Ghost can deliver similar capability. The right alternative depends on your need for managed hosting, design flexibility and whether you want to keep data in the EEA.
List the functional site cookies and any analytics or embedded cookies you enable, with their purpose and duration, and state the lawful basis for each category. Disclose where the site is hosted and any US transfer with its safeguard, and keep the policy synchronised with the consent banner on your site.