CMS

Wix

Wix is one of the most widely used SaaS website builders in Europe, particularly with small businesses and freelancers. Wix.com Ltd. is based in Israel (which benefits from an EU adequacy decision) but also runs infrastructure on Google Cloud and AWS. The platform sets first-party cookies for session, security and Wix Analytics; non-essential analytics and marketing trackers require prior consent.

Block Wix until consent Scan my site

Overview

What does Wix do?

What is Wix?

Wix is a fully managed SaaS website builder operated by Wix.com Ltd., founded in 2006 in Tel Aviv. It is one of the most widely used builders in Europe, with a strong presence among small businesses, freelancers and creators. Wix offers a drag and drop editor, an integrated commerce module (Wix Stores), online bookings (Wix Bookings) and an extensive marketplace of Wix Apps.

Cookies and data collected

On a default Wix site the platform sets a session cookie (XSRF-TOKEN), a visitor cookie (svSession), security cookies and Wix Analytics cookies (hs, hssc, hssrc, etc.). Wix Stores adds checkout and cart cookies. Optional Wix Apps and integrations such as Google Analytics, Meta Pixel, TikTok Pixel or chat widgets add further trackers depending on configuration.

GDPR and ePrivacy implications

Strictly necessary cookies (session, security, cart) are exempt from consent under Art. 5(3) ePrivacy. Wix Analytics, marketing pixels, social and chat trackers require freely given consent (Art. 6(1)(a) GDPR). Wix provides a Cookie Consent Banner application that must be configured in opt-in mode for EU visitors with proper categorisation.

Data transfers and hosting

Wix.com Ltd. is based in Israel, which benefits from a European Commission adequacy decision. However, Wix also runs infrastructure on Google Cloud and AWS in the US and other regions, and several Wix Apps process data in additional jurisdictions. Wix offers a Data Processing Addendum with Standard Contractual Clauses that applies to non adequate transfers.

Practical compliance steps

Sign the Wix DPA from your account settings. Activate the Wix Cookie Consent Banner in opt-in mode for EU visitors with proper categories. Review every installed Wix App for its own cookies and data flows. Mention Wix as a processor in your privacy notice with the Israel adequacy decision and the SCC reference for non adequate transfers. Audit installed apps quarterly.

Compliance

Wix and the GDPR

Wix is classified as “Unclassified”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis: Consent (Art. 6(1)(a) GDPR) for Wix Analytics, marketing pixels and any third party tracker activated through Wix Apps. Contract performance (Art. 6(1)(b)) for Wix Stores orders and Members Area accounts. Strictly necessary cookies rely on Art. 5(3) ePrivacy.
Risk level: medium
Applicable regulations: GDPR, ePrivacy Directive 2002/58/EC, CCPA, UK GDPR, Israeli Privacy Protection Law

Impact assessment (DPIA)

A DPIA is recommended for Wix Stores or Wix Bookings sites with high traffic, processing of customer accounts at scale, or extensive marketing automation activated through Wix Apps.

Sample text for your banner

This website is built on Wix (Wix.com Ltd.). Analytics and marketing scripts are loaded only after your consent. Personal data is processed by Wix and may be transferred to its global infrastructure under the relevant safeguards.

Cookies and trackers

What Wix sets and contacts

Tracking method: fully managed SaaS website builder; first party cookies for session, security and Wix Analytics, third party trackers from configured Wix Apps
Server location: global (Wix.com Ltd., Tel Aviv, with EU and US data centres provided through Google Cloud and AWS)
Data transferred outside the EU: Wix.com Ltd. is an Israeli company with global infrastructure. Israel benefits from a European Commission adequacy decision, but the platform also processes data on US infrastructure (Google Cloud, AWS) and may transfer data to other third countries depending on the Wix Apps installed. Wix offers Standard Contractual Clauses through its Data Processing Addendum.

Cookies set (10)

Name	Type	Duration	Purpose
svSession	first_party	2 years	Strictly necessary cookie that identifies the visitor session for Wix site features and security.
XSRF-TOKEN	first_party	session	Anti CSRF token used to protect form submissions and the Wix admin.
XSRF-TOKEN	first_party	Session	CSRF protection token used for forms, members area and Wix Stores submissions.
hs	first_party	Session	Strictly necessary security cookie used by Wix to mitigate cross site request forgery attacks.
svSession	first_party	2 years	Identifies a unique visitor across the Wix Stores cart and checkout flow.
hssc	first_party	30 minutes	Wix Analytics cookie that stores the current session start time.
_wixCIDX	first_party	3 months	Wix Marketing visitor identifier used for first party advertising audiences.
fedops.logger.sessionId	first_party	session	Frontend operations logger session identifier used for debugging.
hssrc	first_party	Session	Wix Analytics cookie used to identify whether the visitor is in a new session.
bSession	first_party	Session	Wix Analytics cookie used to track visitor activity for site reports.

Third-party domains contacted (4)

www.wix.com
static.wixstatic.com
www.parastorage.com
frog.wix.com

Questions

Frequently asked questions about Wix

Can't find your question? Write to us, we answer fast.

Write to us

Which cookies does Wix set?

Wix sets several first party cookies on the publisher domain: XSRF-TOKEN (session, anti CSRF), hs (session, security), svSession (2 years, visitor identifier across the cart and checkout), _wixCIDX (3 months, Wix Marketing visitor identifier) and fedops.logger.sessionId (session, debugging). Apps installed from the Wix App Market may add their own cookies.

Is consent required for Wix?

Strictly necessary cookies (XSRF-TOKEN, hs, svSession during checkout) do not require consent under the Art. 5(3) ePrivacy exemption. Marketing and personalisation cookies (_wixCIDX, advertising apps) do require prior consent. Wix offers a built in Cookie Consent banner that integrates with the Customer Privacy Tools API.

What is the legal basis for processing through Wix?

Performance of contract (Art. 6(1)(b) GDPR) for the strictly necessary cookies needed to display the site and complete the order. Legitimate interest (Art. 6(1)(f)) for security and fraud prevention. Consent (Art. 6(1)(a) GDPR + Art. 5(3) ePrivacy) for marketing, analytics and personalisation cookies.

Does Wix transfer data to the United States?

Yes. Wix.com Ltd is headquartered in Israel and operates global infrastructure with primary data centres in the US (AWS) and Israel. Israel is covered by an EU adequacy decision since 2011 and Wix is certified under the EU US Data Privacy Framework. The Wix DPA includes Standard Contractual Clauses as a fallback.

Do I need a DPIA for Wix?

A DPIA is not generally required for the Wix platform itself when used as a website builder. A DPIA may be required for the marketing apps installed from the Wix App Market (advertising pixels, session replay) when those involve large scale profiling under Art. 35 GDPR.

How do I implement Wix for GDPR compliance?

Enable the built in Wix Cookie Consent banner from the dashboard, sign the Wix DPA, install only marketing apps that integrate with the Customer Privacy Tools API and remove any uncategorised tracking app from your site. Document Wix.com Ltd in your Article 30 register and expose a permanent Cookie preferences link in the footer.

What are the alternatives to Wix?

Other website builders include Squarespace (US), Webflow (US, EU friendly through Cloudflare), Jimdo (Germany), WordPress with Elementor, Shopify (Canada), Hostinger Website Builder and the open source Strapi or Payload CMS for headless deployments.

How do I keep my cookie policy up to date with Wix?

Use the Wix Cookie Consent banner cookie scanner to refresh the inventory after every new app installation. Update the policy when you install or remove a marketing app, when Wix introduces a new feature with cookies and when you change the marketing audiences exported to Google Ads or Meta.

15 May 2026

Wix cookies and GDPR: compliance guide

How to make your Wix site GDPR-compliant for cookies: cookie audit, compliant banner, Google Consent Mode v2, and a practical checklist.

Read the guide

Mottor

Mottor is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Mottor supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Mottor enables informed decisions that improve experience and drive results.

CMS

Quintype

Quintype is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Quintype integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Quintype helps organizations maintain robust websites that meet user expectations and technical requirements.

CMS

Auberge

Auberge is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Auberge supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Auberge remains a leading web development choice.

CMS

Droip

Droip is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Droip supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Droip enables informed decisions that improve experience and drive results.

CMS

Webriti Busiprof

Webriti Busiprof is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. Webriti Busiprof supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, Webriti Busiprof remains a leading web development choice.

CMS

rSchoolToday

rSchoolToday is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. rSchoolToday integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, rSchoolToday helps organizations maintain robust websites that meet user expectations and technical requirements.

CMS

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my banner Scan my site