> How Hostinger Website Builder uses cookies, analytics, and ecommerce trackers, and how to keep sites compliant with GDPR and ePrivacy across the EU. > > Canonical: https://www.flowconsent.com/en/services/cms/hostinger-website-builder CMS # Hostinger Website Builder Analytics · [Official website](https://www.hostinger.com) Hostinger Website Builder is a hosted, drag and drop site builder, formerly known as Zyro, that lets users publish responsive websites, blogs, and small ecommerce stores from a single dashboard with built-in analytics, forms, and optional marketing integrations. [Block Hostinger Website Builder until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=cms) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [CMS](https://www.flowconsent.com/en/services/cms) - Consent Analytics - Prior consent Required - Documented cookies 6 - Third-party domains 7 - Servers European Union (Hostinger data centres in Lithuania, the Netherlands, and other EU regions for the publishing layer), with global content delivery via Cloudflare. Hostinger International Ltd is established in Cyprus and Lithuania, and edge nodes serve cached assets worldwide. Overview ## What does Hostinger Website Builder do? ## **What Hostinger Website Builder is** Hostinger Website Builder is the hosted no code editor offered by Hostinger International, the Lithuanian web hosting provider. It evolved from the Zyro product, which Hostinger acquired and merged into its main control panel. Users sign up, pick a template or use the AI generator, customise pages with a drag and drop editor, and publish to a Hostinger subdomain or a custom domain. The platform handles hosting, certificates, image optimisation, and basic SEO. It also bundles modules for blog, contact forms, newsletter sign-ups, simple ecommerce, online booking, and live chat, often with optional integrations to Google Analytics 4, Google Tag Manager, and Meta Pixel. ## **Cookies and storage on visitor devices** A baseline Hostinger Website Builder site sets a small number of strictly necessary cookies to maintain the session, the cart on ecommerce pages, CSRF protection, language preference, and the consent banner state. As soon as integrations are enabled, additional cookies appear, including the GA4 \_ga family, Meta Pixel \_fbp, Google Tag Manager identifiers, embedded YouTube or Vimeo cookies, third-party live chat identifiers, and any custom code added through the integrations panel. The builder also uses local storage for editor previews on the staff side, but for visitors the main artefacts remain HTTP cookies and the occasional pixel. ## **GDPR and ePrivacy obligations** Even though the builder is hosted in the EU by an EU established provider, the site operator remains the data controller for visitor data. GDPR applies to forms, ecommerce orders, comments, and any analytics. ePrivacy Article 5(3) applies to all non strictly necessary cookies and similar storage. The CNIL, the AEPD, and the German DSK have made it clear that the convenience of a builder does not exempt operators from showing a clear consent banner, refusing tracking by default, and providing genuine opt out mechanisms once tracking is enabled. ## **Third party integrations and data transfers** Most compliance risk on Hostinger Website Builder comes from optional third-party integrations rather than the platform itself. GA4 sends event data and IP based identifiers to Google in the United States, Meta Pixel transmits browsing and conversion events to Meta, embedded YouTube videos load Google cookies, and live chat or booking widgets may host their data outside the EEA. Each integration must be assessed against Standard Contractual Clauses, the EU: US Data Privacy Framework, and a transfer impact assessment, and disclosed clearly in the privacy notice. ## **Consent management and configuration** Hostinger ships a basic cookie banner that operators can enable and customise, but for a serious site the recommended setup is a dedicated consent management platform. Configure it to block GA4, Meta Pixel, embedded videos, and live chat scripts until the visitor opts in for the corresponding categories. Use Google consent mode v2 if you keep GA4, restrict ecommerce identifiers to what is needed for fulfilment, and ensure that the builder's own forms and newsletter sign-ups capture consent for marketing communications separately. ## **Practical compliance checklist for operators** Map every cookie and integration in your site, including those added through custom HTML. Update the privacy notice and cookie policy to list each purpose, controller, retention, and transfer mechanism. Sign Hostinger's data processing addendum, plus separate addenda for each third-party integration. Set retention on GA4, disable signals you do not need, and document a DPIA for ecommerce or sensitive forms. Test the site with consent denied to verify that no analytics or advertising cookie is dropped before opt in. Compliance ## Hostinger Website Builder and the GDPR Hostinger Website Builder is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Article 6(1)(a) GDPR consent for analytics, advertising pixels, and any non-essential cookie deployed through the builder, combined with ePrivacy Article 5(3) consent for storage and access on the visitor device. Strictly necessary cookies that keep the cart, login session, and security tokens working rely on Article 6(1)(f) legitimate interest and the Article 5(3) exemption. - Risk level medium - Applicable regulations GDPR, ePrivacy Directive 2002/58/EC, French Data Protection Act, German TDDDG, Spanish LSSI Article 22.2, UK PECR, EU: US Data Privacy Framework where applicable, and EDPB guidelines on cookies and consent. ### Impact assessment (DPIA) A full DPIA is not always required for a basic showcase site, but it is recommended whenever the builder is used with ecommerce, contact forms processing sensitive data, GA4 with extended retention, or advertising pixels such as Meta Pixel. Document the categories of personal data, the cookies and storage used, the legal basis for each purpose, the transfers triggered by integrations, and the retention. The CNIL, BfDI, and AEPD all expect this analysis to be available before activating tracking integrations. ### Sample text for your banner > This site is built with Hostinger Website Builder. We use strictly necessary cookies to keep the site, login, and cart working, and, with your consent, additional cookies for analytics, marketing pixels, and embedded widgets that may transfer data to the United States. You can accept, refuse, or change your choice at any time from the cookie settings link in the footer. Cookies and trackers ## What Hostinger Website Builder sets and contacts - Tracking method Standard hosted CMS that serves static assets and dynamic forms from Hostinger infrastructure, with a built-in analytics module that uses first-party cookies, optional Google Analytics 4 and Meta Pixel integrations, ecommerce checkout cookies, and built-in marketing automations such as forms, newsletter sign-ups, and pop-ups. Live chat, embedded widgets, and visitor session storage rely on additional first-party identifiers. - Server location European Union (Hostinger data centres in Lithuania, the Netherlands, and other EU regions for the publishing layer), with global content delivery via Cloudflare. Hostinger International Ltd is established in Cyprus and Lithuania, and edge nodes serve cached assets worldwide. - Data transferred outside the EU When merchants enable Google Analytics 4, Meta Pixel, or other third-party widgets, hashed identifiers, IP addresses, page URLs, and ecommerce events are transferred to the United States and other third countries. Hostinger's own platform may also process backups in regions outside the EEA, with transfers covered by Standard Contractual Clauses and the EU: US Data Privacy Framework where the recipient is certified. ### Cookies set (6) | Name | Type | Duration | Purpose | | ------------------ | ------------ | -------- | -------------------------------------------------------------------------------------------------------------------------------------------------- | | hostinger\_session | first\_party | Session | Strictly necessary session cookie used by Hostinger Website Builder to keep the visitor logged in to member areas and to maintain CSRF protection. | | cart | first\_party | 30 days | Strictly necessary ecommerce cookie that stores the contents of the shopping cart while the visitor browses the site. | | lang | first\_party | 1 year | First-party cookie that remembers the visitor language preference selected on the site. | | consent\_state | first\_party | 6 months | First-party cookie that stores the visitor cookie banner choices so the banner is not shown again on each page view. | | \_ga | third\_party | 2 years | Optional Google Analytics 4 cookie used to distinguish users when the GA4 integration is enabled in the builder. | | \_fbp | third\_party | 90 days | Optional Meta Pixel cookie used to identify visitors for advertising attribution when the Meta Pixel integration is enabled. | ### Third-party domains contacted (7) - `hostinger.com` - `builder.hostinger.com` - `zyro.com` - `cdn.zyrosite.com` - `cdn.hostinger.com` - `www.google-analytics.com` - `connect.facebook.net` Questions ## Frequently asked questions about Hostinger Website Builder Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Does the Hostinger Website Builder set cookies by default? Yes, but only a small number of strictly necessary cookies for the session, security, language, and the consent banner. Tracking and marketing cookies are only set when the operator activates integrations such as GA4, Google Tag Manager, Meta Pixel, embedded videos, or live chat. Those non essential cookies require prior consent under ePrivacy Article 5(3). ### Is consent required for the analytics module? If you enable Google Analytics 4 or any third-party analytics through the builder, consent is required before the cookies are set. Hostinger's built-in basic analytics also rely on identifiers stored on the visitor device, so they should be configured to either run in an anonymous, identifier free mode or be gated behind consent. The CNIL, AEPD, and BfDI all consider general purpose audience analytics as non essential. ### What is the legal basis for ecommerce orders on Hostinger Website Builder? Order processing relies on Article 6(1)(b) GDPR for the performance of the contract, since the data is necessary to deliver and invoice the order. Strictly necessary cart cookies fall under the Article 5(3) ePrivacy exemption. Marketing emails, abandoned cart sequences, and personalised retargeting need a separate Article 6(1)(a) consent and an opt in moment in the checkout flow. ### Are data transfers outside the EEA involved? Hostinger hosts the publishing layer in EU regions, but Cloudflare delivers cached assets globally and most optional integrations route data to the United States. Transfers should be covered by Standard Contractual Clauses and, where applicable, the EU: US Data Privacy Framework certification of the recipient. A transfer impact assessment is recommended for GA4, Meta Pixel, and live chat. ### Do I need a DPIA for a Hostinger Website Builder site? A DPIA is not always required for a small showcase site, but it becomes recommended for ecommerce, sensitive contact forms, GA4 with long retention, or advertising pixels. Document the data flows, the legal basis, the integrations, the retention, and the residual risk after consent gating, and review the DPIA whenever you enable a new module or integration. ### How do I implement a compliant cookie banner? Either configure Hostinger's built-in banner to block scripts before opt in, or install a dedicated consent management platform via the integrations panel. Make the refuse choice as easy as the accept choice, group cookies by purpose, and ensure the banner blocks GA4, Meta Pixel, embedded videos, and live chat until consent is granted. Log the proof of consent and offer a link to change preferences. ### What are the alternatives if consent is refused? When consent is refused, keep the site fully functional through strictly necessary cookies and offer aggregated, identifier free reporting. You can switch to a privacy first analytics tool like Matomo configured without cookies, embed videos in privacy enhanced mode where supported, and rely on contextual marketing rather than retargeting pixels. Forms still work, but should not pre fill from analytics signals. ### How should the cookie policy describe Hostinger Website Builder? List Hostinger International Ltd as the hosting provider and processor of the publishing layer, mention Cloudflare for content delivery, and detail every cookie set, its duration, and purpose. Add separate entries for each enabled integration such as GA4, Meta Pixel, or live chat, including the controller, the legal basis, the transfer mechanism, and the contact details for exercising data subject rights. Same category ## More services: CMS [See the whole category](https://www.flowconsent.com/en/services/cms) ### [Geonetric](https://www.flowconsent.com/en/services/cms/geonetric) [Geonetric is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Geonetric supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Geonetric ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/cms/geonetric) [CMS](https://www.flowconsent.com/en/services/cms/geonetric) · ### [Textpattern CMS](https://www.flowconsent.com/en/services/cms/textpattern-cms) [Textpattern CMS provides a robust content management platform that enables organizations to create, organize, and distribute web content efficiently. Built with scalability and performance in mind, Textpattern CMS supports multi-site management, role-based access control, and advanced publishing workflows. Whether running a corporate website or a complex digital portal, Textpattern CMS delivers the flexibility and reliability needed to manage content at scale while maintaining optimal page load speeds.](https://www.flowconsent.com/en/services/cms/textpattern-cms) [CMS](https://www.flowconsent.com/en/services/cms/textpattern-cms) · ### [Piwigo](https://www.flowconsent.com/en/services/cms/piwigo) [Piwigo is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Piwigo supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Piwigo ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/cms/piwigo) [CMS](https://www.flowconsent.com/en/services/cms/piwigo) · ### [Clinic Sites](https://www.flowconsent.com/en/services/cms/clinic-sites) [Clinic Sites is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Clinic Sites supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Clinic Sites ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/cms/clinic-sites) [CMS](https://www.flowconsent.com/en/services/cms/clinic-sites) · ### [Motion.page](https://www.flowconsent.com/en/services/cms/motion-page) [Motion.page is a web animation library that enables developers and designers to create smooth, engaging animations for websites and applications. It provides a comprehensive API for complex animations, transitions, and interactive effects with optimal performance. Motion.page supports CSS, SVG, and JavaScript animations with hardware acceleration and timeline control, helping create immersive user experiences that enhance engagement without compromising speed.](https://www.flowconsent.com/en/services/cms/motion-page) [CMS](https://www.flowconsent.com/en/services/cms/motion-page) · ### [STUDIO](https://www.flowconsent.com/en/services/cms/studio) [STUDIO is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. STUDIO offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, STUDIO empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/cms/studio) [Analytics](https://www.flowconsent.com/en/services/cms/studio) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)