CMS

MaxSite CMS

Lightweight open source PHP content management system popular in the Russian and Belarusian web ecosystem, designed to deliver static pages with minimal cookies.

Block MaxSite CMS until consent Scan my site

Overview

What does MaxSite CMS do?

What MaxSite CMS is

MaxSite CMS is a free open source PHP based content management system created by Maxim Donchenko, popular in Russian speaking web communities. It targets small to medium publishers and emphasises clean URLs, minimal database usage, fast page rendering and a small footprint of cookies set on the visitor browser. The platform is self hosted, which means the data controller is the site operator.

Cookies and data collected by default

A vanilla MaxSite CMS install only sets a PHP session cookie (PHPSESSID) for logged in authors and editors, plus an optional CSRF cookie that protects forms from cross site request forgery. Anonymous visitors browse without any persistent identifier. No analytics, no advertising, no fingerprinting are bundled with the core CMS.

GDPR and ePrivacy implications

The PHP session cookie qualifies as strictly necessary under recital 66 of the ePrivacy Directive, so it can be set without prior consent. Visitor IP addresses are processed for security and routing purposes under legitimate interest (Art. 6(1)(f) GDPR). The compliance posture changes as soon as the operator activates plugins for analytics, advertising, social embeds or comments: those typically require consent.

Hosting and data location

Because MaxSite CMS is self hosted, GDPR transfer rules apply to the chosen hosting provider rather than to the software itself. If the host is in Russia or another country without an adequacy decision, document the appropriate Article 46 GDPR transfer tools (Standard Contractual Clauses) and run a Transfer Impact Assessment.

Practical compliance steps

Document the PHPSESSID cookie in your cookie register, configure session lifetime to the minimum needed, restrict admin access by IP, keep PHP and MaxSite up to date, list any third party plugin in the cookie policy, gate non essential plugins behind a CMP and provide a clear privacy notice in line with Article 13 GDPR.

Compliance

MaxSite CMS and the GDPR

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) for the strictly necessary CMS session and CSRF cookies. Consent (Art. 6(1)(a)) becomes required if optional analytics, advertising or comment plugins are activated.
Risk level: low
Applicable regulations: GDPR, ePrivacy Directive, UK GDPR, Russian Federal Law 152,FZ when deployed in Russia

Impact assessment (DPIA)

A DPIA is generally not required for a vanilla MaxSite CMS install because no behavioural tracking takes place. A DPIA may be needed if the operator adds analytics, profiling, advertising or comment moderation plugins that process visitor identifiers.

Sample text for your banner

This site runs on MaxSite CMS. The CMS itself only uses strictly necessary session cookies. With your consent, optional analytics or comment plugins may set additional cookies.

Cookies and trackers

What MaxSite CMS sets and contacts

Tracking method: PHP based content management system that runs server side. Sets a first party PHP session cookie for authenticated authors and an optional CSRF token cookie. Visitor pages are static unless plugins (analytics, comments, captcha) are added.
Server location: Operator chosen (the CMS is self hosted, typically on a Linux web server controlled by the site owner)
Cookieless mode available: Yes

Cookies set (3)

Name	Type	Duration	Purpose
PHPSESSID	first_party	Session	PHP session identifier used to keep authenticated authors logged into the MaxSite CMS admin area.
csrf_token	first_party	Session	CSRF token used to protect MaxSite admin and comment forms against cross site request forgery.
comment_author	first_party	1 year	Optional cookie that remembers the visitor name and email when posting comments through a MaxSite plugin.

Third-party domains contacted (2)

max,3000.com
maxsite.org

Questions

Frequently asked questions about MaxSite CMS

Can't find your question? Write to us, we answer fast.

Write to us

What cookies does MaxSite CMS set?

By default MaxSite CMS only sets a PHP session cookie (PHPSESSID) for authenticated authors and an optional CSRF token cookie. No tracking, advertising or analytics cookies are set by the core platform.

Is consent required for MaxSite CMS?

No prior consent is required for the core CMS, because the only cookies are strictly necessary under recital 66 of the ePrivacy Directive. Consent becomes required when optional analytics, comments, captcha or advertising plugins are activated.

What is the legal basis for processing on a MaxSite CMS site?

Strictly necessary cookies and access logs rely on legitimate interest (Art. 6(1)(f) GDPR). Any plugin that places non essential cookies or processes behavioural data must rely on consent (Art. 6(1)(a)).

Does MaxSite CMS transfer data to the United States or other third countries?

MaxSite CMS itself does not transfer data anywhere. Transfers depend on the hosting provider you choose and on plugins (Yandex.Metrica, Google Analytics, social embeds). Document the transfers per processor in your processing register.

Do I need a DPIA for MaxSite CMS?

Not for a vanilla install. A DPIA may be needed when you bolt on profiling, advertising, comment moderation or analytics plugins that process visitor identifiers at scale.

How do I implement MaxSite CMS compliantly?

Keep core and plugins up to date, restrict admin access, configure session lifetime, document the PHPSESSID and CSRF cookies, gate optional plugins behind a CMP, sign DPAs with hosting and any plugin processors, and publish a clear privacy notice.

What are the alternatives to MaxSite CMS?

Other lightweight self hosted CMS options include WordPress (with privacy plugins), Grav, Bludit, Kirby, Statamic, Hugo (static), Eleventy (static) and Ghost. Each has its own cookie posture and ecosystem of trackers.

How do I update my cookie policy when running MaxSite CMS?

List PHPSESSID and any CSRF cookie as strictly necessary. Add every plugin cookie with name, purpose, retention and processor. Mention the hosting provider and the country of processing. Update the policy whenever you add or remove a plugin.

Postman API Documentation

Postman API Documentation is an integration and connectivity platform that enables businesses to connect web applications, APIs, and services seamlessly. It provides pre-built connectors, webhook management, and data synchronization. Postman API Documentation supports real-time data flow between marketing, sales, and operational tools, eliminating data silos and manual processes. With visual workflow builders and robust API management, Postman API Documentation helps create unified digital ecosystems.

CMS

MadCap Software

MadCap Software is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. MadCap Software provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, MadCap Software helps deliver the right message to the right audience at the right time.

CMS

Enjin CMS

Enjin CMS is a powerful content management system (CMS) designed to help businesses and developers build, manage, and publish digital content with ease. It offers a flexible architecture that supports custom content types, templates, and workflows, making it ideal for websites of any scale. With Enjin CMS, teams can streamline content creation, improve collaboration, and deliver engaging web experiences. Its extensible plugin ecosystem and API-first approach ensure seamless integration with existing.

CMS

vBulletin

vBulletin is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. vBulletin supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, vBulletin ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CMS

InterRed

InterRed is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. InterRed integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, InterRed helps organizations maintain robust websites that meet user expectations and technical requirements.

CMS

CSSIgniter Olsen Light

CSSIgniter Olsen Light is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. CSSIgniter Olsen Light supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, CSSIgniter Olsen Light ensures your website delivers a smooth, uninterrupted experience to every visitor and.

CMS

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my banner Scan my site