Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Weebly is a United States based website builder, owned by Square, that hosts sites and sets session and analytics cookies, placing visitor data under US jurisdiction.
Weebly is a hosted website and online store builder owned by Square, part of Block, Inc., in the United States. Sites built on Weebly run on its infrastructure, and the platform provides templates, e commerce and built in statistics. Because it is fully hosted, both the site owner and visitors interact with United States servers.
A Weebly site sets strictly necessary cookies to keep sessions and shopping carts working, and it can set analytics cookies that record visits and behaviour through Weebly built in statistics. It processes the visitor IP address, pages viewed and, for stores, order and payment related data. Some of these cookies are non essential.
The strictly necessary cookies are exempt from consent, but the analytics and any marketing cookies are not, so they fall under the ePrivacy consent rule. As the site owner you are the controller and Weebly acts largely as your processor, which requires a data processing agreement.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
You must obtain consent before non essential cookies, such as Weebly statistics or embedded marketing tools, are set. A consent banner that blocks those scripts until the visitor agrees is required, while session and cart cookies can load without consent.
Weebly and Square operate from the United States, so personal data is transferred there. Confirm that Square relies on the EU US Data Privacy Framework or Standard Contractual Clauses, and sign its data processing terms before relying on the platform for European visitors.
Add a consent banner that gates Weebly statistics and any embedded trackers, sign the Square data processing agreement, document the US transfer and list the cookies in your policy. Disable analytics features you do not need to reduce the data collected.
Websites using Weebly must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is rarely needed for a simple Weebly website, but consider one for stores processing large volumes of customer data or using extensive analytics. Assess the US transfer and the cookies set by your chosen features.
Sample consent text
This site is built with Weebly and uses analytics cookies to measure visits. These load only if you accept. Strictly necessary cookies keep the site and cart working.
Third-party domains contacted
weebly.comeditmysite.comweeblycloud.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| PHPSESSID | Strictly necessary | Session | Maintains the visitor session on the Weebly hosted site. |
| language | Functional | 1 year | Stores the visitor preferred language for the site. |
| cb-enabled | Functional | 1 year | Records that the visitor has interacted with the cookie banner. |
This service may collect user data. Ensure GDPR compliance with FlowConsent.
Yes, Weebly sets strictly necessary cookies for sessions and carts, plus analytics cookies through its built in statistics. The analytics cookies are non essential and need consent.
You need consent for the analytics and any marketing cookies before they are set, but not for the strictly necessary session and cart cookies.
Strictly necessary cookies rely on the contract or legitimate interest, while analytics and marketing cookies require consent under Article 6(1)(a) of the GDPR and the ePrivacy rules.
Yes, Weebly and its owner Square operate from the United States, so visitor and customer data is transferred there under the EU US Data Privacy Framework or Standard Contractual Clauses.
A basic site rarely needs one, but a store handling large volumes of customer or payment data, or heavy analytics, may. Assess the US transfer and the data your features collect.
Add a consent banner that gates analytics and marketing scripts, sign the Square data processing agreement, disclose the US transfer and list the cookies. Turn off analytics features you do not use.
European website builders and self hosted platforms keep data in the EU and can reduce transfer concerns. The right choice depends on your e commerce and design needs.
List the strictly necessary, analytics and any marketing cookies your Weebly site sets, with their purpose and duration, and state that non essential cookies load only after consent. Update it when you add features.