CMS

Graffiti CMS

Graffiti CMS is an open source content management system built on the .NET framework, used to publish and manage websites and blogs. Because it is self hosted, it runs on the website owner infrastructure and sets only first party cookies, such as a session cookie and an authentication cookie for editors. It does not add third party tracking by default, so its privacy profile is low risk and centred on first party essentials.

Block Graffiti CMS until consent Scan my site

Overview

What does Graffiti CMS do?

What Graffiti CMS is

Graffiti CMS is an open source content management system built on the .NET framework. It is installed on your own server to publish and manage websites and blogs, which means you control the code, the data, and the hosting. Unlike a hosted platform, there is no vendor receiving data in the background.

What data and cookies it uses

Graffiti CMS sets first party cookies such as a session cookie and an authentication cookie for logged in editors. If you enable comments or contact forms, it stores the data those features collect. All of this is first party, served from your own domain, and it does not include third party advertising or analytics unless you add such tools yourself.

GDPR implications

You are the controller for any personal data the CMS handles, such as commenter names or contact submissions. Because the cookies are strictly necessary and first party, and there is no third party sharing by default, the GDPR footprint is small and focused on security, retention, and responding to data subject requests.

Consent requirements

The strictly necessary first party cookies do not require consent under the ePrivacy Directive. Consent becomes relevant only if you add analytics, embeds, or marketing tools to your Graffiti site, in which case those specific tools must be gated behind consent, not the CMS itself.

Data location and transfers

Because Graffiti CMS is self hosted, the data location is wherever you run the server. If you host within the European Economic Area, there is no international transfer. If you host elsewhere, the transfer rules apply to your hosting choice rather than to the CMS software.

Practical compliance steps

Keep the installation secure and updated, set retention for comments and form submissions, and document the first party cookies in your cookie policy as essential. Choose EU hosting if your users are European, and apply consent only to any third party tools you add on top of the CMS.

Compliance

Graffiti CMS and the GDPR

Legal basis: Legitimate interest or contract for strictly necessary first party cookies
Risk level: low
Applicable regulations: GDPR, ePrivacy Directive

Impact assessment (DPIA)

As a self hosted first party CMS, the data protection focus is on the cookies it sets, any comment or contact data it stores, the security of the server, and any third party tools you add yourself. A DPIA is rarely needed for the CMS alone.

Sample text for your banner

This site runs on Graffiti CMS and uses only strictly necessary first party cookies to function. Any analytics or marketing tools are listed separately and run only with your consent.

Cookies and trackers

What Graffiti CMS sets and contacts

Tracking method: Self hosted .NET content management system, first party cookies, no third party tracking by default
Server location: Self hosted on the website owner infrastructure

Cookies set (2)

Name	Type	Duration	Purpose
ASP.NET_SessionId	Functional	Session	First party session cookie that maintains the visitor session on the server.
.GRAFFITI_AUTH	Functional	Session	First party authentication cookie that keeps logged in editors signed in to the admin area.

Questions

Frequently asked questions about Graffiti CMS

Can't find your question? Write to us, we answer fast.

Write to us

What cookies does Graffiti CMS set?

It sets first party cookies such as a session cookie and an authentication cookie for editors. These are strictly necessary to run the site and the admin area, and they are served from your own domain.

Do I need consent for Graffiti CMS?

No, not for the strictly necessary first party cookies. Consent applies only to any analytics, embeds, or marketing tools you choose to add to your Graffiti site.

What is the legal basis for Graffiti CMS?

The essential cookies rely on the ePrivacy exemption, and any personal data the CMS stores, such as comments, relies on a basis you set such as consent or legitimate interest. You are the controller.

Does Graffiti CMS transfer data outside the EU?

Not by itself. As self hosted software it transfers nothing to a vendor, so the data location depends entirely on where you host the site. Host in the EU to avoid transfers.

Is a DPIA needed for Graffiti CMS?

Rarely for the CMS alone. A DPIA may be relevant if you build high risk features on top of it, such as large scale collection of sensitive data through forms.

How do I keep a Graffiti site compliant?

Keep it updated and secure, set retention for comments and form data, document the first party cookies as essential, and add consent only for third party tools. Honour data subject requests for any stored personal data.

Are there alternatives to Graffiti CMS?

Alternatives include WordPress, Ghost, and other self hosted content management systems. The privacy profile of any self hosted CMS is similar and depends mainly on what you add to it.

How do I update my cookie policy for Graffiti CMS?

List the first party session and authentication cookies as strictly necessary. There are no third party tracking cookies from the CMS itself, so only add entries for tools you integrate separately.

Platforma LP

Platforma LP is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Platforma LP supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Platforma LP enables informed decisions that improve experience and drive results.

Analytics

SitePad

SitePad is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. SitePad integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, SitePad helps organizations maintain robust websites that meet user expectations and technical requirements.

CMS

Piwigo

Piwigo is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Piwigo supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Piwigo ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CMS

Bolt CMS

Bolt CMS provides a robust content management platform that enables organizations to create, organize, and distribute web content efficiently. Built with scalability and performance in mind, Bolt CMS supports multi-site management, role-based access control, and advanced publishing workflows. Whether running a corporate website or a complex digital portal, Bolt CMS delivers the flexibility and reliability needed to manage content at scale while maintaining optimal page load speeds and search engine visibility.

CMS

BIGACE

BIGACE is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. BIGACE supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, BIGACE ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CMS

Mobirise

Mobirise is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Mobirise supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Mobirise enables informed decisions that improve experience and drive results.

CMS

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my banner Scan my site