Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
WikkaWiki is an open-source wiki engine written in PHP. It provides collaborative documentation and knowledge management capabilities with user accounts, page editing, revision history, and access controls. As self-hosted software, GDPR compliance is entirely the responsibility of the hosting organisation. WikkaWiki processes user account data for registered contributors and sets session cookies for authenticated users.
WikkaWiki is a lightweight open-source wiki engine written in PHP and MySQL. It features page editing, revision history, access control levels, and user account management. As self-hosted software, the hosting organisation is the sole data controller for all user data processed.
User account registration collects usernames, email addresses, and passwords. Page edit histories may attribute content to named users. Server access logs record IP addresses. Configure log retention limits, implement right-to-erasure for user accounts, and provide a privacy notice to users.
Create a privacy notice for wiki users. Implement user account deletion (erasure). Minimise server log retention. Enable HTTPS. Configure secure session cookies. Note: WikkaWiki is no longer actively maintained — consider migrating to actively maintained wiki platforms.
Websites using WikkaWiki must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is generally not required for standard wiki use cases. It may be relevant for wikis handling sensitive organisational or personal data accessible to large user groups.
Sample consent text
This wiki uses WikkaWiki, a self-hosted wiki platform. User account data is stored on our servers. Session cookies are used for authenticated access. See our privacy policy for full details.
Third-party domains contacted
wikkawiki.orgCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| PHPSESSID | functionality | Session | Standard PHP session cookie that maintains the authenticated user session for wiki editing and navigation. |
| wikka_user_name | functionality | 30 days | Stores the logged in username to auto fill the login form and personalise the wiki editing experience. |
| wikka_prefs | functionality | 1 year | Saves user interface preferences such as editor mode, theme selection, and display settings. |
This service may collect user data. Ensure GDPR compliance with FlowConsent.
WikkaWiki sets a session cookie to manage user authentication and maintain login states. It may also set a preference cookie to remember user settings such as language or theme choices. As an open source, self hosted wiki, the exact cookies depend on your server configuration and any additional plugins installed.
Session cookies used for authenticated user access on WikkaWiki are typically considered strictly necessary and exempt from consent requirements. However, if you add analytics plugins, third party embeds, or non essential tracking to your WikkaWiki installation, consent would be required for those additions.
For essential wiki functionality and authentication cookies, legitimate interest under Article 6(1)(f) GDPR applies, combined with the strictly necessary exemption under the ePrivacy Directive. Any additional processing, such as analytics or user behavior tracking, requires consent under Article 6(1)(a).
WikkaWiki is self hosted, so data transfers depend entirely on where you deploy the software. If hosted within the EEA, no international data transfers occur. If you use a hosting provider outside the EEA or integrate third party services, you must address transfer safeguards accordingly.
A DPIA is generally not required for a standard WikkaWiki deployment used for internal documentation or knowledge sharing. However, if your wiki processes sensitive data, is publicly accessible with user registration, or handles health, political, or other special category data, a DPIA may be necessary.
Review all cookies set by your WikkaWiki installation including any plugins. Configure your wiki to minimize data collection and set appropriate session expiration times. Add a privacy policy page within the wiki explaining data processing practices. Ensure user registration collects only necessary information.
Other self hosted wiki solutions with good privacy characteristics include DokuWiki (file based, no database needed), BookStack, and Wiki.js. All self hosted wikis offer similar privacy benefits since you control the data. Choose based on features, maintenance requirements, and your technical capabilities.
Document the session cookie WikkaWiki sets, including its name, purpose (authentication/session management), duration, and type (first party, strictly necessary). If you have added plugins that set additional cookies, list each one separately. Self hosted software gives you full visibility into all cookies.