CMS

Aksara CMS

Aksara CMS is a content management system and lightweight PHP framework developed by Aksara Laboratory. It can run a classic website or serve content in headless mode, and relies on a modular structure where each module brings its own pages and features. Because it is self-hosted, the cookies it sets depend on the modules and services installed on the site.

Block Aksara CMS until consent Scan my site

Overview

What does Aksara CMS do?

What is Aksara CMS

Aksara CMS is an open source content management system built on the Laravel PHP framework. It is self hosted, which means the operator decides where the database and uploads live and which third party services are integrated. Because it ships without any built in analytics or advertising, the privacy footprint of a vanilla install is small and limited to strictly necessary functionality.

Data and cookies collected

Out of the box Aksara CMS sets a Laravel session cookie and a CSRF token cookie, both first party and tied to authenticated areas of the site. Standard web server logs may record the IP address, user agent and request timestamp. Anonymous visitors who only consult published content do not generate additional personal data unless the operator enables extensions.

GDPR and ePrivacy implications

The strictly necessary cookies set by Aksara CMS qualify for the exemption in article 5(3) of the ePrivacy Directive: they are needed to deliver the service explicitly requested by the user. They can be deployed without consent, but must still be documented in the cookie policy. As soon as the operator adds third party analytics, embeds or chat widgets, those become subject to the standard consent rules.

Consent and legal basis

Strictly necessary cookies rest on article 6(1)(b) GDPR (performance of a contract) or article 6(1)(f) GDPR (legitimate interest in operating the site securely). Any optional cookie or pixel added on top of Aksara CMS, for example for analytics or remarketing, must rely on the visitor explicit consent under article 6(1)(a) GDPR and be loaded only after that consent.

Data transfers

Aksara CMS itself does not transfer data anywhere. The location of personal data depends on where the operator hosts the application and the database. EU operators usually pick an EEA hosting provider to avoid international transfer formalities, and document any third country involvement through Standard Contractual Clauses.

Practical compliance steps

Choose an EU hosting provider, sign a data processing agreement with it, document the Aksara session and CSRF cookies in your cookie policy and put any analytics or marketing extension behind a CMP. Keep the framework patched, restrict admin access and review the integration of third party modules at least once a year.

Compliance

Aksara CMS and the GDPR

Legal basis: Article 6(1)(b) GDPR (performance of a contract) and article 6(1)(f) GDPR (legitimate interest in operating the website securely) for strictly necessary session and CSRF cookies; consent (article 6(1)(a)) is required for any optional analytics or marketing extensions.
Risk level: low
Applicable regulations: GDPR, ePrivacy Directive 2002/58/EC, national data protection laws of the EU member state where the site is hosted

Impact assessment (DPIA)

A DPIA is generally not required for a vanilla Aksara CMS deployment. It becomes relevant when third party analytics, marketing or member features are added and when large volumes of personal data or special categories are processed through the CMS.

Sample text for your banner

Our website runs on Aksara CMS. Strictly necessary cookies keep your session secure. Optional analytics or marketing cookies are loaded only after you accept them in our cookie banner.

Cookies and trackers

What Aksara CMS sets and contacts

Tracking method: self-hosted PHP/Laravel CMS with first-party session cookies for authenticated users and CSRF protection
Server location: depends on the hosting provider chosen by the site operator

Cookies set (2)

Name	Type	Duration	Purpose
aksara_session	first-party	2 hours	Laravel session cookie used to identify the authenticated user and persist their state between requests.
XSRF-TOKEN	first-party	2 hours	CSRF protection token verified on every state changing request to prevent cross site request forgery attacks.

Third-party domains contacted (2)

aksaracms.com
github.com/aksaracms

Questions

Frequently asked questions about Aksara CMS

Can't find your question? Write to us, we answer fast.

Write to us

Which cookies does Aksara CMS set by default?

A standard Aksara CMS install sets a Laravel session cookie (typically named after the application key) and an XSRF token cookie used for CSRF protection. Both are first party, short lived and limited to authenticated areas of the site. No analytics or advertising cookie is set unless an extension is enabled.

Is consent required for Aksara CMS cookies?

No, not for the strictly necessary session and CSRF cookies, which are exempt under article 5(3) of the ePrivacy Directive. Consent is required as soon as the operator adds non essential cookies through plugins, embeds or third party services such as analytics, chats or social media widgets.

What is the legal basis for processing data via Aksara CMS?

For the necessary cookies, the legal basis is article 6(1)(b) GDPR (performance of the contract with the user) or article 6(1)(f) GDPR (legitimate interest in operating the website securely). Optional cookies and third party integrations rely on consent under article 6(1)(a) GDPR.

Does Aksara CMS transfer data to the United States?

Aksara CMS by itself does not transfer data anywhere. Transfers depend entirely on the hosting provider and on any third party services the operator integrates. EU operators usually pick an EEA host and document any third country access through Standard Contractual Clauses.

Do I need a DPIA before using Aksara CMS?

A DPIA is not mandatory for a vanilla Aksara CMS site that only manages public content. It becomes relevant when the platform processes large volumes of personal data, special categories such as health, or supports member areas, profiling and behavioural analytics modules.

How do I implement Aksara CMS in a GDPR compliant way?

Host on an EU server, sign a DPA with the host, keep the framework patched, restrict admin access and document the session and CSRF cookies in the cookie policy. Any analytics, marketing or embed must go through a CMP and be loaded only after explicit consent.

Are there privacy friendly alternatives to Aksara CMS?

Comparable self hosted CMS solutions that ship with a small privacy footprint include Statamic, Kirby, Grav, Strapi and Directus. They share the same approach as Aksara: minimal default cookies and full operator control over which third party services are added.

How should I update the cookie policy for Aksara CMS?

List the Aksara session and XSRF cookies as strictly necessary, with their name, duration and purpose. Then enumerate every cookie added by extensions or third party services with their consent category. Provide a clear link to the CMP preference centre so users can change their choices at any time.

InstantCMS

InstantCMS is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. InstantCMS integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, InstantCMS helps organizations maintain robust websites that meet user expectations and technical requirements.

CMS

pirobase CMS

pirobase CMS is a powerful content management system (CMS) designed to help businesses and developers build, manage, and publish digital content with ease. It offers a flexible architecture that supports custom content types, templates, and workflows, making it ideal for websites of any scale. With pirobase CMS, teams can streamline content creation, improve collaboration, and deliver engaging web experiences. Its extensible plugin ecosystem and API-first approach ensure seamless integration with.

CMS

Helix Ultimate

Helix Ultimate is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Helix Ultimate supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Helix Ultimate remains a leading web development choice.

CMS

PIXNET

Pixnet is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Pixnet supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Pixnet ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CMS

FASO

FASO is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. FASO offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, FASO empowers organizations to optimize strategy and maximize return on investment.

CMS

Make (The Theme Foundry)

The Theme Foundry Make is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. The Theme Foundry Make supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, The Theme Foundry Make remains a leading web.

CMS

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my banner Scan my site