Optimizely Content Management
Optimizely Content Management is a digital experience platform and CMS that can set functional, analytics and experimentation cookies, with data potentially processed in the United States.
What does Optimizely Content Management do?
What it is
Optimizely Content Management, formerly known as Episerver, is an enterprise content management system and digital experience platform. It powers websites and often comes with built in experimentation and personalisation features. Optimizely is a United States company, although it offers regional cloud hosting.
Cookies and data it collects
The CMS itself sets functional cookies for sessions and editor logins, while its experimentation and personalisation modules set analytics cookies that assign visitors to test variations and measure behaviour. It can process the visitor IP address, pages viewed, test assignments and interaction events. The experimentation cookies are non essential.
GDPR and ePrivacy implications
Functional CMS cookies can be treated as strictly necessary, but experimentation, personalisation and analytics cookies are not, so they fall under the ePrivacy consent rule. The behavioural data they collect is personal data under the GDPR, and Optimizely typically acts as your processor.
Consent requirements
You must obtain consent before experimentation, personalisation or analytics cookies are set. Configure the platform so tests and tracking only run after the visitor accepts, and present the categories clearly. Strictly necessary CMS cookies can load without consent.
Data transfers
Optimizely is based in the United States and offers regional hosting. Where data is processed in the United States, transfers rely on the EU US Data Privacy Framework or Standard Contractual Clauses. Confirm your hosting region and sign the data processing agreement.
Practical compliance steps
Integrate Optimizely with your consent manager so experimentation and analytics scripts are blocked until consent, choose an EU hosting region where possible, and document the cookies, the processor relationship and any transfer. Minimise the behavioural data you collect for tests.
Optimizely Content Management and the GDPR
Optimizely Content Management is classified as “Unclassified”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent under Article 6(1)(a) GDPR for analytics and experimentation cookies; contract or legitimate interest for core CMS functionality
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive
Impact assessment (DPIA)
A DPIA is advisable where Optimizely experimentation or personalisation profiles visitors at scale or processes special category inferences. Assess the analytics cookies, the test data and any United States transfer.
Sample text for your banner
This site uses Optimizely for content and experimentation. Experimentation and analytics cookies are set only if you accept. Strictly necessary cookies keep the site working.
What Optimizely Content Management sets and contacts
- Tracking method
- Digital experience platform and CMS with functional, analytics and experimentation cookies
- Server location
- United States (Optimizely, Inc.), with regional cloud hosting options
- Data transferred outside the EU
- Optimizely is a US company offering regional cloud hosting. Where data is processed in the United States, transfers rely on the EU US Data Privacy Framework or Standard Contractual Clauses.
Cookies set (2)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| optimizelyEndUserId | Analytics | 6 months | Assigns a unique identifier so a visitor stays in the same experiment variation and results can be measured. |
| ASP.NET_SessionId | Strictly necessary | Session | Maintains the server session for the content management system. |
Third-party domains contacted (3)
optimizely.comcdn.optimizely.comlogx.optimizely.com
Frequently asked questions about Optimizely Content Management
Can't find your question? Write to us, we answer fast.
Does Optimizely set cookies?
Yes, the CMS sets functional cookies for sessions, and its experimentation and personalisation features set analytics cookies that assign test variations and track behaviour. The latter are non essential.
Do I need consent?
You need consent before experimentation, personalisation and analytics cookies are set, but not for the strictly necessary CMS cookies that keep the site and editor working.
What is the legal basis?
Core CMS functionality relies on contract or legitimate interest, while experimentation and analytics cookies require consent under Article 6(1)(a) and the ePrivacy rules.
Does it transfer data to the United States?
Optimizely is a US company offering regional hosting. Where processing occurs in the US, it relies on the EU US Data Privacy Framework or Standard Contractual Clauses.
Do I need a DPIA?
Consider a DPIA where experimentation or personalisation profiles visitors at scale or draws sensitive inferences. Assess the analytics cookies, the test data and any transfer.
How do I run it compliantly?
Connect Optimizely to your consent manager so tests and analytics wait for consent, choose EU hosting where possible, sign the processing agreement and document the cookies and transfers.
Are there alternatives?
European or self hosted content management and experimentation tools can keep data in the EU. The right choice depends on your scale and experimentation needs.
How do I update my cookie policy?
List the functional, experimentation and analytics cookies Optimizely sets, with purpose and duration, state that non essential cookies load only after consent and disclose any United States transfer.
Croct
Croct is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Croct supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Croct ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.
Maestrus
Maestrus is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Maestrus integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Maestrus helps organizations maintain robust websites that meet user expectations and technical requirements.
Sqwiz
Sqwiz is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Sqwiz offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Sqwiz empowers organizations to optimize strategy and maximize return on investment.
Mysitefy
Mysitefy is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Mysitefy supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Mysitefy enables informed decisions that improve experience and drive results.
Plone
Plone is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Plone integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Plone helps organizations maintain robust websites that meet user expectations and technical requirements.
Quintype
Quintype is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Quintype integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Quintype helps organizations maintain robust websites that meet user expectations and technical requirements.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.