FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
CMS

Alinea

UnclassifiedOfficial website

Open source TypeScript headless CMS that runs in the operator's own infrastructure with only essential session and authentication cookies.

Block Alinea until consentScan my site
Overview

What does Alinea do?

What is Alinea

Alinea is an open source, TypeScript first headless CMS. The content is edited through an admin panel and stored in the operator's own repository or database, making the project a community driven, self hosted solution rather than a SaaS tracking tool.

Data collected and how it works

The CMS itself does not run any analytics or marketing tracking. The admin panel sets only essential cookies, typically a session cookie and a CSRF token, to authenticate editors. These cookies are limited to admin paths and are not exposed to public website visitors.

GDPR considerations

The cookies set by Alinea are strictly necessary to operate the admin interface and therefore fall under the exemption of Article 5(3) of the ePrivacy Directive. Personal data processed (editor account, login timestamps, IP address in server logs) is justified by the legitimate interest of operating the editorial workflow.

Risks and mitigations

Risks are low because there is no public tracking and the operator controls the hosting. Mitigations include limiting admin access to a defined IP range, applying strong authentication, choosing an EU hosting provider when EU personal data is processed, and keeping the editorial database backups secure.

Implementation best practices

Because the cookies are essential and only set on the admin panel, no consent banner is required for the public site as long as no third party scripts are added. Document the admin session cookies in your privacy notice for editors, configure secure cookie attributes (HttpOnly, Secure, SameSite) and apply standard hardening of the hosting environment.

Compliance

Alinea and the GDPR

Legal basis
Legitimate interest (GDPR Art. 6(1)(f)) for essential session and authentication of admin users, no Art. 5(3) consent required for strictly necessary cookies
Risk level
low
Applicable regulations
GDPR, ePrivacy Directive, TTDSG, LIL, LOPDGDD

Impact assessment (DPIA)

A DPIA is generally not required for the CMS itself, as it only processes editor authentication data with no large scale or systematic monitoring. A DPIA may still be useful for the overall website if combined with other tools or sensitive content.

Sample text for your banner

No consent is required for the admin panel of Alinea since only strictly necessary session cookies are set. If you embed third party tools on the public site, configure consent for those tools separately.
Cookies and trackers

What Alinea sets and contacts

Tracking method
Open source TypeScript headless CMS embedded in the operator's codebase. Only essential cookies are set by the admin panel for authentication and session management; no analytics or tracking is performed by the CMS itself.
Server location
Self-hosted by the operator (location depends on the chosen hosting provider)
Cookieless mode available
Yes

Cookies set (3)

NameTypeDurationPurpose
alinea.sessionnecessarySessionAuthenticates an editor logged into the Alinea admin panel and maintains the active session.
alinea.csrfnecessarySessionCSRF token used to protect form submissions inside the Alinea admin panel.
alinea.previewnecessary1 hourShort lived token enabling content preview for authenticated editors of the Alinea CMS.
Questions

Frequently asked questions about Alinea

Can't find your question? Write to us, we answer fast.

What cookies does Alinea set?

Alinea only sets essential cookies on the admin panel, typically a session identifier and a CSRF token. These cookies authenticate editors and protect form submissions. They are not deployed on the public website and are not used for tracking.

Is user consent required before loading Alinea?

No consent banner is required for the admin panel because the cookies set are strictly necessary for the requested service (the CMS itself), which falls under the exemption in Article 5(3) of the ePrivacy Directive. Consent may still be needed for unrelated tools embedded on the public website.

What is the legal basis for processing personal data via Alinea?

Processing editor accounts, login data and server logs typically relies on legitimate interests under Article 6(1)(f) of the GDPR, or on the performance of a contract for employees. The essential session cookies do not require Article 5(3) consent.

Does Alinea transfer data outside the EU?

Because Alinea is self hosted, the location of data depends entirely on the operator. If you choose an EU based hosting provider, no transfer occurs. Transfers to third countries should only happen if you select a non EU host, in which case standard safeguards apply.

Is a DPIA required when using Alinea?

A DPIA is generally not required for the CMS alone since processing is limited to authenticating editors. A DPIA may still be valuable for the overall website if it processes sensitive content or large volumes of user data, in which case the CMS is one of many components to document.

How do I correctly implement Alinea in a GDPR compliant way?

Self host Alinea on an EU server when handling EU personal data, restrict admin access, configure secure cookie attributes, enable strong authentication for editors and document the editorial workflow in your records of processing. Keep the CMS up to date and review hosting provider commitments.

Are there privacy friendly alternatives to Alinea?

Alinea is already a privacy friendly option due to its self hosted, open source nature. Comparable alternatives include Payload CMS, Sanity (self hosted via DAM), Strapi, KeystoneJS and TinaCMS, all of which can be deployed in an EU environment without external tracking.

How should I update my cookie policy to mention Alinea?

If the admin panel is exposed to data subjects who are not employees, list the strictly necessary session and CSRF cookies in your cookie policy as essential cookies with their durations and purposes. Otherwise, document them only in your internal records and the editor privacy notice.

Same category

More services: CMS

See the whole category

MoinMoin

MoinMoin is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. MoinMoin integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, MoinMoin helps organizations maintain robust websites that meet user expectations and technical requirements.

CMS

KIT CMS

KIT CMS is a powerful content management system (CMS) designed to help businesses and developers build, manage, and publish digital content with ease. It offers a flexible architecture that supports custom content types, templates, and workflows, making it ideal for websites of any scale. With KIT CMS, teams can streamline content creation, improve collaboration, and deliver engaging web experiences. Its extensible plugin ecosystem and API-first approach ensure seamless integration with existing tools and services.

CMS

Totara

Totara is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Totara integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Totara helps organizations maintain robust websites that meet user expectations and technical requirements.

CMS

Canvas LMS

Canvas LMS is a learning management system (LMS) that enables organizations to create, deliver, and track online courses and training programs. It supports multimedia content, interactive quizzes, certification management, and progress tracking. Canvas LMS provides customizable learning paths, mobile-friendly delivery, and social learning features. With SCORM compliance and detailed analytics, Canvas LMS helps deliver effective learning experiences at scale.

CMS

platformOS

PlatformOS is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. PlatformOS integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, PlatformOS helps organizations maintain robust websites that meet user expectations and technical requirements.

CMS

EverWeb

EverWeb is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. EverWeb supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, EverWeb enables informed decisions that improve experience and drive results.

CMS

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site