CMS

Melis Platform

Melis Platform is a French open source PHP CMS and e commerce platform built on Zend Framework, designed for self hosted, multi site deployments in Europe.

Block Melis Platform until consent Scan my site

Overview

What does Melis Platform do?

What Melis Platform is

Melis Platform is a French open source PHP CMS and e commerce platform built on Zend Framework. It is designed for multi site deployments and is widely used by European publishers and retailers that prefer self hosted infrastructure. Because Melis is self hosted, the operator chooses the data centre, the database location and the security stack.

Cookies and data set by Melis

In a vanilla configuration Melis Platform sets a PHP session cookie that maintains the editor session and any logged in customer area, plus a CSRF token cookie that protects forms. The bundled e commerce module adds a cart cookie when a visitor places an item in the basket. No third party tracking is shipped by default.

GDPR and ePrivacy implications

Strictly necessary session, security and cart cookies fall under the legitimate interest exception of article 5(3) of the ePrivacy Directive. As soon as the operator adds analytics, marketing automation, retargeting, embedded videos or social plugins, those modules become subject to consent and must be blocked until the visitor has accepted the relevant categories.

Consent and configuration

Document the Melis cookies in your privacy notice, integrate a CMP for additional modules, store editor and customer data in EU regions, and audit the modules and templates installed during a CMS migration to confirm none of them silently load third party scripts.

Data transfers and hosting

Because Melis Platform is self hosted, third country transfers only occur if the operator selects a non EU host, uses an external CDN or integrates US based modules. Choosing an EU hosting region and hosting fonts and assets locally keeps the deployment inside the EEA by default.

Practical compliance steps

Choose an EU host, configure session and CSRF cookies as strictly necessary, integrate a CMP for any non essential module, restrict editor accounts to least privilege, and run a quarterly tag review to detect new third party scripts introduced through modules or templates.

Compliance

Melis Platform and the GDPR

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) for the strictly necessary session and CSRF cookies; consent (Art. 6(1)(a)) for any analytics, marketing or third party module that the operator activates
Risk level: low
Applicable regulations: GDPR, ePrivacy Directive, French Loi Informatique et Libertés, NIS2 if the deployment is critical

Impact assessment (DPIA)

A DPIA is generally not required for a vanilla Melis Platform installation that only uses session and CSRF cookies. It becomes appropriate when the operator adds analytics, marketing automation, e commerce profiling, or hosts large amounts of customer data through the e commerce module.

Sample text for your banner

This site is powered by the open source Melis Platform CMS. Strictly necessary session and security cookies are set so the site can function. Tracking or marketing cookies are only loaded if you accept them in the cookie banner.

Cookies and trackers

What Melis Platform sets and contacts

Tracking method: Self hosted PHP CMS and e commerce platform built on Zend Framework; serves pages from the operator infrastructure with PHP session and CSRF cookies, optional integrated analytics module
Server location: Self hosted (operator chosen); commonly deployed in France and other EU regions because Melis Platform is developed by a French company

Cookies set (3)

Name	Type	Duration	Purpose
PHPSESSID	Strictly necessary	Session	Maintains the editor and customer session in Melis Platform.
melis_csrf	Strictly necessary	Session	Anti CSRF token cookie used to validate form submissions in Melis Platform.
melis_cart	Strictly necessary	30 days	Stores the cart identifier on Melis e commerce sites so the visitor can resume the order.

Third-party domains contacted (3)

melisplatform.com
github.com/melisplatform
packagist.org

Questions

Frequently asked questions about Melis Platform

Can't find your question? Write to us, we answer fast.

Write to us

What cookies does Melis Platform set by default?

A vanilla Melis Platform installation only sets a PHP session cookie that keeps editors and customers signed in, an anti CSRF token cookie and, when the e commerce module is active, a cart cookie. No analytics or advertising cookies are dropped.

Do I need consent to run a Melis powered website?

No for the strictly necessary session, security and cart cookies. Consent is required as soon as the operator adds analytics, marketing automation or third party embeds.

What is the legal basis for processing data through Melis Platform?

Legitimate interest, article 6(1)(f) GDPR, covers the strictly necessary cookies and editorial workflow. Customer accounts and orders are processed under article 6(1)(b) for contract performance, and added analytics or marketing modules require consent.

Does Melis Platform transfer data to the United States?

Not by itself. Melis is self hosted and stores data wherever the operator chooses. Transfers only occur if the operator selects a non EU host, a US CDN or US sub processors for added modules.

Do I need a DPIA for Melis Platform?

A DPIA is usually not required for an editorial only installation. It becomes appropriate when Melis hosts large customer accounts via the e commerce module, when added modules profile users, or when the deployment relies on providers outside the EEA.

How do I implement Melis Platform compliance correctly?

Use an EU host, host fonts and assets locally, document the session, CSRF and cart cookies, integrate a CMP for any non essential module and apply least privilege to editor accounts.

What are the alternatives to Melis Platform?

Other self hostable European or French CMS and e commerce options include TYPO3, Drupal, PrestaShop, Sylius, Spip, eZ Platform now Ibexa and Statamic.

How should I update my cookie policy when I deploy Melis Platform?

List the strictly necessary session, CSRF and cart cookies with their purpose and lifetime, name the operator as controller and the hosting provider as processor, and update the policy each time you add an analytics or marketing module.

Clinic Sites

Clinic Sites is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Clinic Sites supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Clinic Sites ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CMS

Elementor Header & Footer Builder

Elementor Header & Footer Builder is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Elementor Header & Footer Builder offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Elementor Header & Footer Builder empowers organizations to optimize strategy.

CMS

Quick.CMS

Quick.CMS is a powerful content management system (CMS) designed to help businesses and developers build, manage, and publish digital content with ease. It offers a flexible architecture that supports custom content types, templates, and workflows, making it ideal for websites of any scale. With Quick.CMS, teams can streamline content creation, improve collaboration, and deliver engaging web experiences. Its extensible plugin ecosystem and API-first approach ensure seamless integration with existing.

CMS

Zenler

Zenler is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Zenler supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Zenler ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CMS

TiddlyWiki

TiddlyWiki is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. TiddlyWiki supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, TiddlyWiki ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CMS

Appy Pie Builder

Appy Pie Builder is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Appy Pie Builder supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Appy Pie Builder enables informed decisions that improve experience and drive results.

Analytics

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my banner Scan my site