Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Wix is one of the most widely used SaaS website builders in Europe, particularly with small businesses and freelancers. Wix.com Ltd. is based in Israel (which benefits from an EU adequacy decision) but also runs infrastructure on Google Cloud and AWS. The platform sets first-party cookies for session, security and Wix Analytics; non-essential analytics and marketing trackers require prior consent.
Wix is a fully managed SaaS website builder operated by Wix.com Ltd., founded in 2006 in Tel Aviv. It is one of the most widely used builders in Europe, with a strong presence among small businesses, freelancers and creators. Wix offers a drag and drop editor, an integrated commerce module (Wix Stores), online bookings (Wix Bookings) and an extensive marketplace of Wix Apps.
On a default Wix site the platform sets a session cookie (XSRF-TOKEN), a visitor cookie (svSession), security cookies and Wix Analytics cookies (hs, hssc, hssrc, etc.). Wix Stores adds checkout and cart cookies. Optional Wix Apps and integrations such as Google Analytics, Meta Pixel, TikTok Pixel or chat widgets add further trackers depending on configuration.
Strictly necessary cookies (session, security, cart) are exempt from consent under Art. 5(3) ePrivacy. Wix Analytics, marketing pixels, social and chat trackers require freely given consent (Art. 6(1)(a) GDPR). Wix provides a Cookie Consent Banner application that must be configured in opt-in mode for EU visitors with proper categorisation.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Wix.com Ltd. is based in Israel, which benefits from a European Commission adequacy decision. However, Wix also runs infrastructure on Google Cloud and AWS in the US and other regions, and several Wix Apps process data in additional jurisdictions. Wix offers a Data Processing Addendum with Standard Contractual Clauses that applies to non adequate transfers.
Sign the Wix DPA from your account settings. Activate the Wix Cookie Consent Banner in opt-in mode for EU visitors with proper categories. Review every installed Wix App for its own cookies and data flows. Mention Wix as a processor in your privacy notice with the Israel adequacy decision and the SCC reference for non adequate transfers. Audit installed apps quarterly.
Websites using Wix must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA is recommended for Wix Stores or Wix Bookings sites with high traffic, processing of customer accounts at scale, or extensive marketing automation activated through Wix Apps.
Sample consent text
This website is built on Wix (Wix.com Ltd.). Analytics and marketing scripts are loaded only after your consent. Personal data is processed by Wix and may be transferred to its global infrastructure under the relevant safeguards.
Third-party domains contacted
www.wix.comstatic.wixstatic.comwww.parastorage.comfrog.wix.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| svSession | first_party | 2 years | Strictly necessary cookie that identifies the visitor session for Wix site features and security. |
| XSRF-TOKEN | first_party | session | Anti CSRF token used to protect form submissions and the Wix admin. |
| XSRF-TOKEN | first_party | Session | CSRF protection token used for forms, members area and Wix Stores submissions. |
| hs | first_party | Session | Strictly necessary security cookie used by Wix to mitigate cross site request forgery attacks. |
| svSession | first_party | 2 years | Identifies a unique visitor across the Wix Stores cart and checkout flow. |
| hssc | first_party | 30 minutes | Wix Analytics cookie that stores the current session start time. |
| _wixCIDX | first_party | 3 months | Wix Marketing visitor identifier used for first party advertising audiences. |
| fedops.logger.sessionId | first_party | session | Frontend operations logger session identifier used for debugging. |
| hssrc | first_party | Session | Wix Analytics cookie used to identify whether the visitor is in a new session. |
| bSession | first_party | Session | Wix Analytics cookie used to track visitor activity for site reports. |
This service may collect user data. Ensure GDPR compliance with FlowConsent.
Wix sets several first party cookies on the publisher domain: XSRF-TOKEN (session, anti CSRF), hs (session, security), svSession (2 years, visitor identifier across the cart and checkout), _wixCIDX (3 months, Wix Marketing visitor identifier) and fedops.logger.sessionId (session, debugging). Apps installed from the Wix App Market may add their own cookies.
Strictly necessary cookies (XSRF-TOKEN, hs, svSession during checkout) do not require consent under the Art. 5(3) ePrivacy exemption. Marketing and personalisation cookies (_wixCIDX, advertising apps) do require prior consent. Wix offers a built in Cookie Consent banner that integrates with the Customer Privacy Tools API.
Performance of contract (Art. 6(1)(b) GDPR) for the strictly necessary cookies needed to display the site and complete the order. Legitimate interest (Art. 6(1)(f)) for security and fraud prevention. Consent (Art. 6(1)(a) GDPR + Art. 5(3) ePrivacy) for marketing, analytics and personalisation cookies.
Yes. Wix.com Ltd is headquartered in Israel and operates global infrastructure with primary data centres in the US (AWS) and Israel. Israel is covered by an EU adequacy decision since 2011 and Wix is certified under the EU US Data Privacy Framework. The Wix DPA includes Standard Contractual Clauses as a fallback.
A DPIA is not generally required for the Wix platform itself when used as a website builder. A DPIA may be required for the marketing apps installed from the Wix App Market (advertising pixels, session replay) when those involve large scale profiling under Art. 35 GDPR.
Enable the built in Wix Cookie Consent banner from the dashboard, sign the Wix DPA, install only marketing apps that integrate with the Customer Privacy Tools API and remove any uncategorised tracking app from your site. Document Wix.com Ltd in your Article 30 register and expose a permanent Cookie preferences link in the footer.
Other website builders include Squarespace (US), Webflow (US, EU friendly through Cloudflare), Jimdo (Germany), WordPress with Elementor, Shopify (Canada), Hostinger Website Builder and the open source Strapi or Payload CMS for headless deployments.
Use the Wix Cookie Consent banner cookie scanner to refresh the inventory after every new app installation. Update the policy when you install or remove a marketing app, when Wix introduces a new feature with cookies and when you change the marketing audiences exported to Google Ads or Meta.