Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Vue Storefront is a self hosted website tool. This page explains its cookies, your GDPR and ePrivacy obligations, data transfers and how to deploy it with valid consent.
Vue Storefront is provided by Alokai (Vue Storefront) and runs on infrastructure that you control. It supports your website functionality directly, so you act as the controller for any personal data it processes.
Vue Storefront processes the data your visitors and members submit and stores first party cookies for sessions or preferences in your own database, so no data leaves your environment unless you connect an external provider.
Even when software is self hosted you remain fully responsible under the GDPR. You decide the purposes and the means, so you must document the processing, secure the data and respect the rights of the people whose data you hold.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
The cookies Vue Storefront needs are strictly necessary for the service to work, so they are exempt from prior consent under the ePrivacy rules, but you must still inform visitors about them.
Vue Storefront is a frontend framework that you host yourself, so it does not by itself transfer personal data to the vendor or to a third country. Even so, record the hosting location in your records of processing to demonstrate accountability under Article 30 GDPR.
Keep Vue Storefront updated, restrict who can access the data, set a sensible retention period, describe any cookies it sets in your cookie policy and, if you forward data to an external provider, sign a data processing agreement with that provider.
Websites using Vue Storefront must obtain user consent under GDPR regulations.
DPIA considerations
Vue Storefront is limited in scope and low risk, so a full DPIA is usually not required, but you should document your screening decision to evidence accountability.
Sample consent text
We use Vue Storefront to provide core features of this website. With your consent we store the cookies described in our cookie policy. You can accept, refuse or withdraw your choice at any time.
Third-party domains contacted
vuestorefront.ioalokai.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| vsf-locale | Functional | 1 year | Stores the selected language and country of the storefront |
| vsf-cart | Functional | 30 days | Keeps a reference to the shopping cart created by the visitor |
Vue Storefront collects user analytics data — you legally need a consent banner. Try FlowConsent free.
Vue Storefront sets the following cookies: vsf-locale, vsf-cart. Each one is listed in the cookie table on this page with its type, duration and purpose, and you should mirror that list in your own cookie policy.
No prior consent is needed for the strictly necessary cookies Vue Storefront uses to function, but you must still describe them in your privacy and cookie policy under the transparency rules.
The lawful basis is Legitimate interest (Art. 6(1)(f) GDPR). Record this basis in your records of processing and state it in the privacy notice shown to visitors.
By default no transfer to a third country takes place. Vue Storefront is a frontend framework that you host yourself, so it does not by itself transfer personal data to the vendor or to a third country. Reassess if you later enable an external integration.
A DPIA is usually not required for Vue Storefront on its own because the processing is limited and low risk, but document your reasoning.
Implement Vue Storefront through your consent layer: keep strictly necessary functions always on, gate optional ones behind consent, sign a data processing agreement with Alokai (Vue Storefront) where it acts as a processor and keep your cookie policy in sync with the real cookies.
Alternatives include other self hosted or privacy friendly tools. Hosting the data yourself avoids an external transfer, which simplifies your compliance position.
List every cookie Vue Storefront sets in your cookie policy with its name, purpose and retention, state the legal basis, name Alokai (Vue Storefront) where relevant, and update the policy whenever the tool changes so refusals in your banner are always honoured.