CMS

WeWeb

WeWeb is a French no code visual front end builder used to create Vue.js powered web apps without writing code. Editors design pages, connect data sources and deploy to production through the WeWeb platform. The runtime is served from the European Union over Cloudflare, with optional plugins that may add cookies subject to consent.

Block WeWeb until consent Scan my site

Overview

What does WeWeb do?

What WeWeb is and what it does on your published app

WeWeb is a French no code platform that lets teams build production grade Vue.js applications visually. Editors connect REST APIs, Supabase, Xano, Airtable, PostgreSQL and other backends, configure authentication, design pages with drag and drop components and publish to a managed domain or to a custom domain. The runtime consists of a Vue based JavaScript bundle that runs in the visitor browser and orchestrates data fetching, state and rendering.

Cookies and data collected by WeWeb

The default WeWeb runtime sets only strictly necessary cookies for authentication, session and CSRF protection. Any analytics, marketing or chat behaviour comes from explicitly enabled plugins (Google Analytics, Meta Pixel, Mixpanel, Intercom, Crisp, etc.). Each plugin loads its own scripts and cookies once activated by the builder, and those rules of consent therefore apply.

GDPR and ePrivacy implications

The strictly necessary runtime can rely on legitimate interest or contract performance, depending on the use case. As soon as any non strictly necessary plugin is enabled, Article 5(3) of the ePrivacy Directive applies and prior consent is required. Under the GDPR, the operator of the published app is controller and WeWeb SAS acts as processor, with a Data Processing Agreement signed at sign up.

Hosting and data transfers

WeWeb stores project metadata and customer data on AWS EU regions. Cloudflare is used as global CDN and may route traffic through US edge nodes. Transfers are covered by Standard Contractual Clauses under Article 46(2)(c) GDPR and, where Cloudflare is certified, by the EU US Data Privacy Framework.

Compliance checklist for WeWeb operators

Inventory every WeWeb plugin enabled on the published app, classify each as strictly necessary or requiring consent, integrate a consent manager that blocks non strictly necessary plugins before opt in, sign the WeWeb DPA, list WeWeb and Cloudflare in your record of processing, and inform users in your privacy notice.

Compliance

WeWeb and the GDPR

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) for the editor itself (used by builders). On published apps, the legal basis depends on the plugins activated: strictly necessary cookies require no consent, analytics and marketing plugins require explicit opt in under Article 5(3) of the ePrivacy Directive.
Risk level: low
Applicable regulations: GDPR, ePrivacy Directive (Cookie Law), French Loi Informatique et Libertés

Impact assessment (DPIA)

A DPIA is recommended when a WeWeb published app processes sensitive data, when it connects to external data sources outside the EEA, or when it integrates third party plugins for analytics, marketing or chat. Map every plugin, document the data flow and review the sub processor list.

Sample text for your banner

This site is powered by WeWeb, a no code app builder hosted in the European Union. WeWeb itself only uses strictly necessary cookies. Additional plugins for analytics, marketing or chat are loaded only after you accept the corresponding consent category.

Cookies and trackers

What WeWeb sets and contacts

Tracking method: WeWeb runtime JavaScript bundle loaded on the published app, plus optional plugins (analytics, authentication, data sources) that each load their own scripts and cookies
Server location: European Union (WeWeb SAS, France, on AWS Frankfurt and Paris regions). Published apps are served through Cloudflare global CDN.
Cookieless mode available: Yes
Data transferred outside the EU: WeWeb stores application data in the European Union but uses Cloudflare for global content delivery and may rely on US sub processors for support tooling. Transfers are framed by Standard Contractual Clauses under Article 46(2)(c) GDPR and complemented by the EU US Data Privacy Framework where Cloudflare or other sub processors are certified.

Cookies set (4)

Name	Type	Duration	Purpose
ww_session	HTTP	Session	Strictly necessary session cookie used by the WeWeb runtime to maintain the user session.
ww_csrf	HTTP	Session	CSRF protection token used by WeWeb forms and authenticated routes.
ww_auth	HTTP	30 days	Authentication token stored for the WeWeb authentication plugin when remember me is enabled.
ww_locale	HTTP	1 year	Stores the preferred language of the WeWeb published app.

Third-party domains contacted (4)

weweb.io
app.weweb.io
cdn.weweb.io
api.weweb.io

Questions

Frequently asked questions about WeWeb

Can't find your question? Write to us, we answer fast.

Write to us

What cookies does WeWeb set?

By default the WeWeb runtime only writes strictly necessary cookies (ww_session, ww_csrf, ww_auth, ww_locale). Any other cookie comes from a plugin explicitly enabled by the builder and follows the rules of that specific tool.

Does WeWeb require user consent?

Not for the strictly necessary runtime. Consent becomes mandatory as soon as a non strictly necessary plugin is enabled (analytics, marketing, chat), because Article 5(3) of the ePrivacy Directive then applies.

What is the legal basis for processing under WeWeb?

Legitimate interest or contract performance for the strictly necessary runtime, consent for any non strictly necessary plugin. The exact basis depends on the activated plugins and the purpose of the published app.

Does WeWeb transfer data outside the EU?

WeWeb hosts data on AWS EU regions. Cloudflare CDN may route traffic through US edge nodes; transfers are framed by Standard Contractual Clauses under Article 46(2)(c) GDPR and, where Cloudflare is certified, by the EU US Data Privacy Framework.

Do I need a DPIA for WeWeb?

A DPIA is recommended when the published app processes sensitive data, when external data sources sit outside the EEA or when third party plugins for marketing or chat are enabled.

How do I implement WeWeb GDPR compliantly?

Audit every plugin enabled on the app, integrate a CMP that blocks non strictly necessary plugins before opt in, sign the WeWeb DPA, list WeWeb and Cloudflare in your record, and document data flows from the published app to external backends.

What are alternatives to WeWeb?

Other no code or low code app builders include Bubble, Softr, Webflow (no native authentication), Retool, Toolkit and FlutterFlow. For EU hosting choose providers with European data residency.

How do I update my cookie policy to include WeWeb?

Mention WeWeb SAS as processor, the strictly necessary cookies set by the runtime, the plugins enabled on the app, the data flows to external data sources, the international transfers via Cloudflare and the consent withdrawal mechanism.

EPrints

EPrints is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. EPrints is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, EPrints offers reliable solutions that scale with organizational needs and evolving web standards.

CMS

Bolt CMS

Bolt CMS provides a robust content management platform that enables organizations to create, organize, and distribute web content efficiently. Built with scalability and performance in mind, Bolt CMS supports multi-site management, role-based access control, and advanced publishing workflows. Whether running a corporate website or a complex digital portal, Bolt CMS delivers the flexibility and reliability needed to manage content at scale while maintaining optimal page load speeds and search engine visibility.

CMS

Yoast Duplicate Post

Yoast Duplicate Post is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Yoast Duplicate Post supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Yoast Duplicate Post remains a leading web development choice.

CMS

Showit

Showit is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Showit supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Showit enables informed decisions that improve experience and drive results.

Analytics

ImpressCMS

ImpressCMS is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. ImpressCMS supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, ImpressCMS ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CMS

Sitey

Sitey is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Sitey offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Sitey empowers organizations to optimize strategy and maximize return on investment.