> Optimizely Content Management sets functional, analytics and experimentation cookies. How to run it under the GDPR with consent and EU hosting.
>
> Canonical: https://www.flowconsent.com/en/services/cms/optimizely-content-management

CMS

# Optimizely Content Management

Unclassified · [Official website](https://www.optimizely.com/products/content/)

Optimizely Content Management is a digital experience platform and CMS that can set functional, analytics and experimentation cookies, with data potentially processed in the United States.

[Block Optimizely Content Management until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=cms) · [Scan my site](https://www.flowconsent.com/en/scan)

At a glance

- Category

  [CMS](https://www.flowconsent.com/en/services/cms)

- Consent

  Unclassified

- Prior consent

  Required

- Documented cookies

  2

- Third-party domains

  3

- Servers

  United States (Optimizely, Inc.), with regional cloud hosting options

Overview

## What does Optimizely Content Management do?

## **What it is**

Optimizely Content Management, formerly known as Episerver, is an enterprise content management system and digital experience platform. It powers websites and often comes with built in experimentation and personalisation features. Optimizely is a United States company, although it offers regional cloud hosting.

## **Cookies and data it collects**

The CMS itself sets functional cookies for sessions and editor logins, while its experimentation and personalisation modules set analytics cookies that assign visitors to test variations and measure behaviour. It can process the visitor IP address, pages viewed, test assignments and interaction events. The experimentation cookies are non essential.

## **GDPR and ePrivacy implications**

Functional CMS cookies can be treated as strictly necessary, but experimentation, personalisation and analytics cookies are not, so they fall under the ePrivacy consent rule. The behavioural data they collect is personal data under the GDPR, and Optimizely typically acts as your processor.

## **Consent requirements**

You must obtain consent before experimentation, personalisation or analytics cookies are set. Configure the platform so tests and tracking only run after the visitor accepts, and present the categories clearly. Strictly necessary CMS cookies can load without consent.

## **Data transfers**

Optimizely is based in the United States and offers regional hosting. Where data is processed in the United States, transfers rely on the EU US Data Privacy Framework or Standard Contractual Clauses. Confirm your hosting region and sign the data processing agreement.

## **Practical compliance steps**

Integrate Optimizely with your consent manager so experimentation and analytics scripts are blocked until consent, choose an EU hosting region where possible, and document the cookies, the processor relationship and any transfer. Minimise the behavioural data you collect for tests.

Compliance

## Optimizely Content Management and the GDPR

Optimizely Content Management is classified as “Unclassified”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

- Legal basis

  Consent under Article 6(1)(a) GDPR for analytics and experimentation cookies; contract or legitimate interest for core CMS functionality

- Risk level

  medium

- Applicable regulations

  GDPR, ePrivacy Directive

### Impact assessment (DPIA)

A DPIA is advisable where Optimizely experimentation or personalisation profiles visitors at scale or processes special category inferences. Assess the analytics cookies, the test data and any United States transfer.

### Sample text for your banner

> This site uses Optimizely for content and experimentation. Experimentation and analytics cookies are set only if you accept. Strictly necessary cookies keep the site working.

Cookies and trackers

## What Optimizely Content Management sets and contacts

- Tracking method

  Digital experience platform and CMS with functional, analytics and experimentation cookies

- Server location

  United States (Optimizely, Inc.), with regional cloud hosting options

- Data transferred outside the EU

  Optimizely is a US company offering regional cloud hosting. Where data is processed in the United States, transfers rely on the EU US Data Privacy Framework or Standard Contractual Clauses.

### Cookies set (2)

| Name                | Type               | Duration | Purpose                                                                                                      |
| ------------------- | ------------------ | -------- | ------------------------------------------------------------------------------------------------------------ |
| optimizelyEndUserId | Analytics          | 6 months | Assigns a unique identifier so a visitor stays in the same experiment variation and results can be measured. |
| ASP.NET\_SessionId  | Strictly necessary | Session  | Maintains the server session for the content management system.                                              |

### Third-party domains contacted (3)

- `optimizely.com`
- `cdn.optimizely.com`
- `logx.optimizely.com`

Questions

## Frequently asked questions about Optimizely Content Management

Can't find your question? Write to us, we answer fast.

[Write to us](https://www.flowconsent.com/en/demo)

### Does Optimizely set cookies?

Yes, the CMS sets functional cookies for sessions, and its experimentation and personalisation features set analytics cookies that assign test variations and track behaviour. The latter are non essential.

### Do I need consent?

You need consent before experimentation, personalisation and analytics cookies are set, but not for the strictly necessary CMS cookies that keep the site and editor working.

### What is the legal basis?

Core CMS functionality relies on contract or legitimate interest, while experimentation and analytics cookies require consent under Article 6(1)(a) and the ePrivacy rules.

### Does it transfer data to the United States?

Optimizely is a US company offering regional hosting. Where processing occurs in the US, it relies on the EU US Data Privacy Framework or Standard Contractual Clauses.

### Do I need a DPIA?

Consider a DPIA where experimentation or personalisation profiles visitors at scale or draws sensitive inferences. Assess the analytics cookies, the test data and any transfer.

### How do I run it compliantly?

Connect Optimizely to your consent manager so tests and analytics wait for consent, choose EU hosting where possible, sign the processing agreement and document the cookies and transfers.

### Are there alternatives?

European or self hosted content management and experimentation tools can keep data in the EU. The right choice depends on your scale and experimentation needs.

### How do I update my cookie policy?

List the functional, experimentation and analytics cookies Optimizely sets, with purpose and duration, state that non essential cookies load only after consent and disclose any United States transfer.

Same category

## More services: CMS

[See the whole category](https://www.flowconsent.com/en/services/cms)

### [Croct](https://www.flowconsent.com/en/services/cms/croct)

[Croct is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Croct supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Croct ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/cms/croct)

[CMS](https://www.flowconsent.com/en/services/cms/croct)

·

### [Maestrus](https://www.flowconsent.com/en/services/cms/maestrus)

[Maestrus is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Maestrus integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Maestrus helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/cms/maestrus)

[CMS](https://www.flowconsent.com/en/services/cms/maestrus)

·

### [Sqwiz](https://www.flowconsent.com/en/services/cms/sqwiz)

[Sqwiz is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Sqwiz offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Sqwiz empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/cms/sqwiz)

[Analytics](https://www.flowconsent.com/en/services/cms/sqwiz)

·

### [Mysitefy](https://www.flowconsent.com/en/services/cms/mysitefy)

[Mysitefy is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Mysitefy supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Mysitefy enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/cms/mysitefy)

[CMS](https://www.flowconsent.com/en/services/cms/mysitefy)

·

### [Plone](https://www.flowconsent.com/en/services/cms/plone)

[Plone is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Plone integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Plone helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/cms/plone)

[CMS](https://www.flowconsent.com/en/services/cms/plone)

·

### [Quintype](https://www.flowconsent.com/en/services/cms/quintype)

[Quintype is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Quintype integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Quintype helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/cms/quintype)

[CMS](https://www.flowconsent.com/en/services/cms/quintype)

## Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

[Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)