FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Frameworks

Hyva Themes

UnclassifiedOfficial website

Hyva Themes is a frontend theme framework for Magento 2 built on Tailwind CSS and Alpine.js. It replaces the default Magento Luma theme stack to deliver fast, lightweight stores with very little JavaScript. Hyva Themes does not embed analytics, tracking pixels, or third party marketing scripts by default, which keeps the consent surface small and helps merchants reach GDPR and ePrivacy compliance more easily.

Block Hyva Themes until consentScan my site
Overview

What does Hyva Themes do?

What Hyva Themes is and how it works

Hyva Themes is a frontend theme framework for Magento 2 built on Tailwind CSS and Alpine.js. It replaces the heavy default Luma and RequireJS stack with a much smaller bundle of CSS and JavaScript. Merchants choose Hyva to gain better Core Web Vitals, faster page rendering, and a simpler frontend codebase. Hyva is distributed under a commercial license, and the license is validated server side from the Magento backend against the Hyva license server.

What data Hyva Themes processes

Hyva Themes itself is a frontend stack. It does not ship analytics, advertising pixels, or persistent tracking cookies. The Magento session cookie and the form key cookie used by Magento 2 are still set by the Magento backend, exactly as they would be on any other theme. Personal data such as cart contents, addresses, and order data is processed by Magento, not by Hyva.

GDPR and ePrivacy implications

Because Hyva does not store information on the device beyond what is strictly necessary to display the requested store, it falls under the strictly necessary exemption of article 5(3) of the ePrivacy Directive. No prior consent is required to load Hyva templates and assets. GDPR obligations on a Hyva powered store relate to the underlying Magento processing of customer accounts, orders, and payments, not to the theme framework itself.

Consent requirements for add ons

Most consent risk on a Hyva store comes from the analytics and marketing extensions merchants layer on top: Google Analytics 4, Google Tag Manager, Meta Pixel, TikTok Pixel, Hotjar, and similar. Each of those still needs informed, granular, prior consent before any cookie is set or any identifier is shared with the vendor. Hyva does not block them by itself, the merchant must integrate a Consent Management Platform.

Data transfers and EU posture

Hyva BV is a Dutch company and the Hyva license validation traffic stays within the European Union. There is no transfer of customer personal data from a Hyva powered store to Hyva itself, since the framework only exchanges license metadata with the Hyva server. Merchant hosting and any third party scripts decide whether customer personal data ends up outside the EEA.

Practical compliance steps

Document Hyva Themes in your records of processing activities as a no cookie frontend framework. List the Magento session and form key cookies as strictly necessary in your cookie policy. Wire every analytics or advertising script through a Consent Management Platform that blocks them until consent is given. Keep an audit trail of license checks and Magento processing activities to demonstrate accountability under article 5(2) GDPR.

Compliance

Hyva Themes and the GDPR

Legal basis
The Hyva Themes frontend stack is part of the website itself and qualifies as strictly necessary under article 5(3) of the ePrivacy Directive. No prior consent is required to load Hyva templates, CSS, or JavaScript bundles, since they are essential to display the requested pages.
Risk level
low
Applicable regulations
GDPR, ePrivacy Directive, Dutch UAVG. Hyva is widely chosen by EU merchants precisely because it removes bloated third party scripts from Magento 2 stores and reduces the consent surface.

Impact assessment (DPIA)

A DPIA is generally not required for Hyva Themes alone, since the framework processes no personal data on its own. A DPIA may still be needed for the surrounding Magento 2 store if it processes large volumes of customer data, special category data, or runs intrusive marketing scripts on top of Hyva.

Sample text for your banner

Our store uses the Hyva Themes frontend framework to display pages. Hyva loads only essential CSS and JavaScript needed to render the site and does not set tracking cookies. No consent is required for Hyva itself, only for any analytics or marketing tools we add on top.
Cookies and trackers

What Hyva Themes sets and contacts

Tracking method
Magento 2 frontend theme framework built on Tailwind CSS and Alpine.js. Hyva Themes itself does not embed analytics, tracking pixels, or marketing scripts. Hyva license validation may perform a server to server check from the Magento backend to hyva.io.
Server location
Hyva is a Dutch company headquartered in the Netherlands. The Hyva license server runs on EU infrastructure. The Magento store using Hyva is hosted by the merchant, typically in the EU for European merchants.
Cookieless mode available
Yes

Cookies set (2)

NameTypeDurationPurpose
PHPSESSIDsessionsessionMagento 2 PHP session cookie that maintains the customer session, cart state and login. Set by Magento, not by Hyva Themes itself. Strictly necessary under article 5(3) ePrivacy.
form_keysessionsessionMagento 2 CSRF protection cookie used to validate forms. Set by Magento, not by Hyva Themes itself. Strictly necessary for store security.

Third-party domains contacted (2)

  • hyva.io
  • license.hyva.io
Questions

Frequently asked questions about Hyva Themes

Can't find your question? Write to us, we answer fast.

What cookies does Hyva Themes set?

Hyva Themes itself does not set tracking cookies. The Magento 2 backend continues to use its standard cookies, mainly the PHPSESSID session cookie, the form_key CSRF cookie, and depending on Magento configuration the persistent shopping cart cookie and the recently viewed products cookie. These are all set by Magento, not by Hyva. Any analytics or marketing cookies appear only if the merchant installs the corresponding scripts on top of Hyva.

Does Hyva Themes require cookie consent?

Hyva Themes itself does not require prior cookie consent because the framework only loads CSS and JavaScript that are strictly necessary to display the requested store. Under article 5(3) ePrivacy, strictly necessary storage is exempt from consent. Merchants still need consent for any analytics, advertising, or personalisation tools that they layer over Hyva.

What is the legal basis for using Hyva Themes?

Loading the Hyva frontend assets falls under the strictly necessary exemption, so no consent or specific GDPR legal basis is needed for the framework itself. License validation between the Magento backend and the Hyva license server is the legitimate interest of the merchant in operating a properly licensed store, with no personal data of end users involved.

Does Hyva send data outside the EU?

No. Hyva BV is based in the Netherlands and license validation traffic stays within the EU. Hyva Themes does not transfer customer personal data outside the EEA. Any cross border transfer would come from the merchant's hosting choice or from third party scripts such as Google Analytics or Meta Pixel, not from Hyva itself.

Do we need a DPIA for Hyva Themes?

A standalone DPIA for Hyva Themes is generally not required, since the framework processes no personal data. A DPIA may still be appropriate at the level of the Magento 2 store as a whole, especially when processing large volumes of customer data, special categories, or running intrusive profiling tools on top of Hyva.

How do we implement Hyva Themes compliantly?

Install Hyva from a licensed source, list the underlying Magento cookies as strictly necessary in the cookie policy, and route every analytics or advertising script through a Consent Management Platform that respects user choice. Document Hyva in your records of processing activities as a frontend framework. Keep an audit trail of license checks and Magento processing.

What alternatives exist to Hyva Themes?

Alternatives include the default Magento Luma theme, the PWA Studio frontend, custom headless setups based on Next.js or Vue Storefront, and other Magento 2 themes such as Porto or Ultimo. From a privacy standpoint Hyva is attractive because it ships without bloated third party trackers, which keeps the consent surface smaller than most heavier themes.

How do we update the cookie policy when using Hyva?

List the strictly necessary Magento cookies, document the Hyva license check as a server to server EU transfer with no end user data, and clearly separate analytics and advertising cookies that depend on consent. Review the policy every time a new module or pixel is added to the store, and keep the cookie policy in sync with the Consent Management Platform configuration.

Same category

More services: Frameworks

See the whole category

TDesign

TDesign is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. TDesign supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, TDesign ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Frameworks

Twitter typeahead.js

Twitter typeahead.js is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Twitter typeahead.js supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Twitter typeahead.js ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Frameworks

ZingChart

ZingChart is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. ZingChart supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, ZingChart ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Frameworks

GoJS

GoJS is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. GoJS integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, GoJS helps organizations maintain robust websites that meet user expectations and technical requirements.

Frameworks

Meteor

Meteor is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Meteor integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Meteor helps organizations maintain robust websites that meet user expectations and technical requirements.

Frameworks

Moon

Moon is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Moon integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Moon helps organizations maintain robust websites that meet user expectations and technical requirements.

Frameworks

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site