> How the SiteWright website builder uses cookies, what consent GDPR and ePrivacy require for analytics and embeds, and practical steps for a compliant site. > > Canonical: https://www.flowconsent.com/en/services/cms/sitewright CMS # SiteWright Analytics · [Official website](https://www.sitewright.io) SiteWright is a website builder and site management tool that lets businesses create, host and maintain websites. It sets functional storefront and session cookies for the builder and published sites, and may offer optional analytics for visitor measurement. [Block SiteWright until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=cms) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [CMS](https://www.flowconsent.com/en/services/cms) - Consent Analytics - Prior consent Required - Documented cookies 4 - Third-party domains 2 - Servers Operator or vendor controlled hosting, commonly in EU or US cloud infrastructure depending on the provider plan Overview ## What does SiteWright do? ## **What SiteWright is** SiteWright is a website builder and site management platform that lets businesses design, publish and maintain websites without deep technical skill. It typically bundles hosting, templates, content management and security features such as SSL and backups, and is often used for small business and storefront sites that need a managed, reliable presence online. ## **Data and cookies involved** In a standard deployment SiteWright sets functional cookies that keep the builder logged in and maintain visitor sessions on published sites, for example preserving language, basket or form state. Where the operator enables analytics or embeds third party widgets, additional measurement cookies may be set. The platform processes account data for the site owner and basic technical data such as IP addresses for visitors. ## **GDPR and ePrivacy implications** Strictly necessary cookies that make the builder and the published site function can rely on the ePrivacy exemption and do not require consent. Any analytics or marketing cookies the operator chooses to enable are not strictly necessary and require prior consent. The site owner is the controller for visitor data and SiteWright acts as a processor under a data processing agreement. ## **Consent requirements** No consent is needed for the functional cookies that keep the site working, but a consent banner is required before loading any analytics, advertising or embedded social cookies on the published site. Site owners should configure their SiteWright site so that non essential cookies and third party embeds only fire after the visitor accepts, with refusal being just as easy as acceptance. ## **Data transfers and third countries** Where the data lives depends on the hosting plan and any embedded services. If hosting, content delivery or analytics run on US based infrastructure, site and visitor data may be transferred outside the European Economic Area, including to the United States. Such transfers need an appropriate safeguard such as Standard Contractual Clauses or reliance on a provider certified under the EU US Data Privacy Framework, supported by a transfer impact assessment. ## **Practical compliance steps** Confirm where SiteWright hosts your site, sign the data processing agreement, and document transfer safeguards if data leaves the EEA. Add a consent banner that blocks analytics and embeds until accepted, list all cookies in your cookie notice, and review any third party widgets you embed. Choose EEA hosting where available to minimise transfer obligations. Compliance ## SiteWright and the GDPR SiteWright is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Legitimate interest or necessity for core site and builder cookies, consent for analytics and any marketing cookies under ePrivacy - Risk level low - Applicable regulations GDPR, ePrivacy Directive ### Impact assessment (DPIA) A full DPIA is rarely required for a standard managed website, but assess the cookies and embeds you enable, where your site is hosted, and whether visitor data is transferred to the United States. Risk rises if you add analytics, advertising pixels or third party social widgets to the published site. ### Sample text for your banner > We use optional analytics cookies to understand how visitors use this website. These are only set if you accept. You can change your choice in our cookie settings at any time, and the site works fully if you decline. Cookies and trackers ## What SiteWright sets and contacts - Tracking method Storefront and site session cookies for builder functionality, with optional analytics cookies for visitor measurement on published sites - Server location Operator or vendor controlled hosting, commonly in EU or US cloud infrastructure depending on the provider plan - Cookieless mode available Yes - Data transferred outside the EU Depending on the hosting plan and any embedded analytics or CDN, site and visitor data may be processed outside the EEA including in the United States, requiring Standard Contractual Clauses or EU US Data Privacy Framework certification. ### Cookies set (4) | Name | Type | Duration | Purpose | | --------------------- | ---------- | --------- | ----------------------------------------------------------------------------------------------------------- | | sitewright\_session | functional | Session | Maintains the editor and visitor session so logins and page state persist during a visit. | | sitewright\_csrf | functional | Session | Provides cross site request forgery protection for builder forms and account actions. | | sitewright\_prefs | functional | 1 year | Stores site preferences such as language and layout choices for returning visitors. | | sitewright\_analytics | analytics | 13 months | Optional cookie that measures visitor traffic on the published site when analytics is enabled by the owner. | ### Third-party domains contacted (2) - `sitewright.io` - `cdn.sitewright.io` Questions ## Frequently asked questions about SiteWright Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does SiteWright set? SiteWright typically sets functional cookies that keep the builder logged in and maintain visitor sessions on published sites, for example language, basket or form state. Where the site owner enables analytics or embeds third party widgets, additional non essential measurement cookies may be set, which require consent. ### Is consent required to use SiteWright? No consent is needed for the strictly necessary functional cookies that keep the site working. Consent is required before loading any analytics, advertising or embedded social cookies on the published site, and these should only fire after the visitor accepts. ### What is the legal basis for SiteWright? Core site and builder cookies rely on necessity or legitimate interest because they are needed to deliver the website. Analytics and marketing cookies rely on consent under the ePrivacy Directive, with the resulting personal data processing governed by the GDPR. ### Does SiteWright transfer data to the US? It depends on the hosting plan and any embedded services. If hosting, content delivery or analytics run on US based infrastructure, site and visitor data may be transferred to the United States, which requires Standard Contractual Clauses or an EU US Data Privacy Framework certified provider plus a transfer impact assessment. EEA hosting avoids this. ### Do I need a DPIA for SiteWright? A full DPIA is rarely required for a standard managed website. Assess the cookies and embeds you enable, where the site is hosted and whether visitor data is transferred to the United States. Risk rises if you add analytics, advertising pixels or third party social widgets. ### How do I implement SiteWright compliantly? Confirm where your site is hosted, sign the data processing agreement, and add a consent banner that blocks analytics and embeds until accepted. List all cookies in your cookie notice, review embedded third party widgets, and prefer EEA hosting where available to reduce transfer obligations. ### What are alternatives to SiteWright? EU based and self hostable website builders and content management systems such as WordPress with EU hosting, Webflow, Jimdo or open source options like Ghost can deliver similar capability. The right alternative depends on your need for managed hosting, design flexibility and whether you want to keep data in the EEA. ### How do I update my cookie policy for SiteWright? List the functional site cookies and any analytics or embedded cookies you enable, with their purpose and duration, and state the lawful basis for each category. Disclose where the site is hosted and any US transfer with its safeguard, and keep the policy synchronised with the consent banner on your site. Same category ## More services: CMS [See the whole category](https://www.flowconsent.com/en/services/cms) ### [ExtendThemes Mesmerize](https://www.flowconsent.com/en/services/cms/extendthemes-mesmerize) [ExtendThemes Mesmerize is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. ExtendThemes Mesmerize supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, ExtendThemes Mesmerize ensures your website delivers a smooth, uninterrupted experience to every visitor and.](https://www.flowconsent.com/en/services/cms/extendthemes-mesmerize) [CMS](https://www.flowconsent.com/en/services/cms/extendthemes-mesmerize) · ### [Woostify](https://www.flowconsent.com/en/services/cms/woostify) [Woostify is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Woostify integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Woostify helps organizations maintain robust websites that meet user expectations and technical requirements.](https://www.flowconsent.com/en/services/cms/woostify) [CMS](https://www.flowconsent.com/en/services/cms/woostify) · ### [MODX](https://www.flowconsent.com/en/services/cms/modx) [MODX is a development framework and toolkit providing developers with a structured foundation for building modern web applications. It offers reusable components, standardized architecture patterns, and comprehensive documentation. MODX accelerates development through code generation, testing utilities, and build optimization. With an active community and extensive ecosystem, MODX enables teams to build scalable, maintainable applications following industry best practices.](https://www.flowconsent.com/en/services/cms/modx) [CMS](https://www.flowconsent.com/en/services/cms/modx) · ### [Nethouse Website Builder](https://www.flowconsent.com/en/services/cms/nethouse-website-builder) [Nethouse Website Builder is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Nethouse Website Builder integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Nethouse Website Builder helps organizations maintain robust websites that meet.](https://www.flowconsent.com/en/services/cms/nethouse-website-builder) [CMS](https://www.flowconsent.com/en/services/cms/nethouse-website-builder) · ### [Overblog](https://www.flowconsent.com/en/services/cms/overblog) [Overblog is a feature-rich blogging platform designed to help writers, marketers, and businesses publish compelling content online. It offers intuitive editing tools, customizable templates, and built-in SEO features to maximize content visibility. With Overblog, users can create engaging blog posts, manage editorial calendars, and grow their audience through integrated social sharing and analytics. The platform supports rich media embedding, comment management, and content scheduling for professional.](https://www.flowconsent.com/en/services/cms/overblog) [CMS](https://www.flowconsent.com/en/services/cms/overblog) · ### [LiveEdit](https://www.flowconsent.com/en/services/cms/liveedit) [LiveEdit is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. LiveEdit supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, LiveEdit enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/cms/liveedit) [CMS](https://www.flowconsent.com/en/services/cms/liveedit) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)