FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Other

WPML

PreferencesOfficial website

WPML (WordPress Multilingual) is the most widely deployed multilingual plugin for WordPress, developed by OnTheGoSystems. It enables WordPress sites to serve content in multiple languages, manage translations through professional or automated workflows, and switch language via URL, subdomain, or cookie. WPML itself stores everything in the host WordPress database; its automatic translation feature can route page content through third-party providers like DeepL, Google Translate, or Microsoft Translator.

Block WPML until consentScan my site
Overview

What does WPML do?

What WPML is

WPML (WordPress Multilingual) is the most widely deployed multilingual plugin for WordPress, developed since 2007 by OnTheGoSystems. It allows a WordPress site to serve posts, pages, custom post types, taxonomies, menus, and theme strings in multiple languages, with URL strategies based on directory, subdomain, or parameter. WPML also bundles a String Translation module, a Translation Management module, and the WPML Automatic Translation engine that can call external machine translation providers.

What data WPML processes

At the site level: language preference of the visitor (cookie or URL), translated copies of the site content stored in the WordPress database, and the editorial activity of translators and project managers. At the translation level: page strings sent to the selected provider when automatic translation is enabled. WPML does not collect visitor analytics or marketing identifiers and does not phone home with usage telemetry beyond the licence check.

GDPR and ePrivacy implications

The WPML language cookie (_icl_current_language) is functional: it stores a user choice required for the site to serve content correctly. Most EU supervisory authorities accept that strictly functional preference cookies do not require prior consent under ePrivacy. The editorial workflows process site content (which may include personal data) under the controller responsibility. Automatic translation introduces a subprocessor relationship: the page strings transit through the chosen provider.

International data transfers

WPML itself does not transfer data internationally because it runs on the host server. Automatic translation transfers depend on the provider: DeepL is hosted in Germany (no transfer for EU sites), Google Translate processes data in the US under SCCs and DPF, Microsoft Translator can be configured for EU regions. Pick the provider that matches your transfer strategy.

Practical compliance steps

Treat the WPML language cookie as functional in the privacy notice. For automatic translation, sign the DPA of the chosen provider (DeepL for EU residency, Google or Microsoft otherwise), document the subprocessor in the RoPA, and avoid pushing pages containing special category personal data through external machine translation. Mention WPML in the technical stack section of the privacy notice.

Compliance

WPML and the GDPR

Legal basis
Legitimate interest (Art. 6(1)(f) GDPR) for serving translated content; contract performance (Art. 6(1)(b)) for the controller workflow; consent (Art. 6(1)(a)) for any visible language-preference cookie used for analytics or marketing
Risk level
low
Applicable regulations
GDPR, ePrivacy Directive (Cookie Law), TTDSG

Impact assessment (DPIA)

WPML by itself processes very little personal data: a language preference cookie or URL parameter, the translation strings (which can incidentally include personal data published on the site), and the editorial team activity (translators, project managers). Key DPIA considerations: (1) the language preference cookie can be classified as functional or, depending on its persistence and the operator, as a preference cookie subject to consent under TTDSG; (2) when automatic translation is enabled, the page strings are sent to a third party (Google, DeepL, Microsoft) and may include any personal data published on the page; (3) DeepL processes data in Germany, which simplifies EU compliance compared to US-based providers; (4) the translator workflow may involve external translation agencies, which become subprocessors.

Sample text for your banner

Our website uses WPML to serve content in multiple languages. WPML stores your language preference in a small cookie so the right version is shown on your next visit. If automatic translation is enabled, page content may be sent to a translation provider (DeepL based in Germany, Google Translate or Microsoft Translator based in the US) before being displayed. Personal data published on the page is never used for profiling.
Cookies and trackers

What WPML sets and contacts

Tracking method
WordPress plugin (PHP server-side) for multilingual content management, plus optional cloud-based translation services (WPML Translation Management) that send strings to remote translation providers
Server location
Self-hosted (the WPML plugin runs on the WordPress site itself). Vendor OnTheGoSystems Ltd. is registered in Cyprus, with subsidiaries in the UK and Hong Kong. Cloud translation services use third-party providers (Google Translate, DeepL, Microsoft Translator) selected by the site owner.
Data transferred outside the EU
WPML itself runs on the WordPress site, so by default no transfer occurs. When automatic translation features are enabled, page content (which may incidentally include personal data) is sent to the selected provider: Google Translate (US, EU), DeepL (Germany), Microsoft Translator (US, EU). Each provider has its own transfer profile; DeepL is a German company with EU processing.

Cookies set (3)

NameTypeDurationPurpose
_icl_current_languageFunctional / Preference1 yearStores the language preference selected by the visitor so the WPML language switcher serves the correct localised content on subsequent visits.
_icl_visitor_lang_jsFunctional / Preference1 dayJavaScript-side helper cookie used to detect the active language for client-side scripts and AJAX calls performed by the WPML language switcher.
wpml_browser_redirect_testStrictly necessary / SessionSessionTest cookie used by the WPML browser-language redirect feature to verify that cookies are enabled in the visitor browser before redirecting to the matching language version.

Third-party domains contacted (5)

  • wpml.org
  • www.wpml.org
  • api.wpml.org
  • wpml.deepl.com
  • translate.googleapis.com
Questions

Frequently asked questions about WPML

Can't find your question? Write to us, we answer fast.

What cookies does WPML set?

WPML sets one main cookie, _icl_current_language, that stores the visitor language preference (typically one year). It also uses _icl_visitor_lang_js for the same purpose in JavaScript contexts. Both are first-party functional cookies tied to the language switcher.

Does WPML require user consent?

For the strictly necessary language preference cookie, no consent is generally required because it stores a user choice strictly necessary to serve the right content. If automatic translation is enabled and the cookie is used for analytics or marketing purposes, consent may be required.

What is the legal basis for using WPML?

Legitimate interest (Art. 6(1)(f) GDPR) for serving translated content, and contract performance (Art. 6(1)(b)) for the editorial workflow. The language cookie is functional and does not require consent under most EU supervisory authority guidance.

Does WPML transfer data to the United States?

WPML itself runs on your server with no third-party transfer. With automatic translation, the page strings are sent to the chosen provider: DeepL (Germany, no transfer for EU sites), Google Translate (US, SCCs and DPF), or Microsoft Translator (configurable region, including EU).

Do I need a DPIA for WPML?

Usually no. WPML processes very little personal data on its own. A short DPIA is recommended only if you push large volumes of customer or community content through external automatic translation and the content includes special category data.

How do I implement WPML compliantly?

Document the language cookie as functional, pick an EU-friendly automatic translation provider (DeepL by default), sign the provider DPA, document the subprocessor in your RoPA, and exclude pages with special category data from automatic translation flows.

What are the alternatives to WPML?

Other multilingual options for WordPress include Polylang (France), TranslatePress (Romania), Weglot (France, SaaS proxy), MultilingualPress, qTranslate-XT (open source). Headless multilingual setups can use Strapi i18n, Sanity localised fields, or Drupal multilingual.

How do I update the cookie policy for WPML?

Add a row for _icl_current_language in the strictly-necessary or functional section: name, purpose (store language preference), duration (1 year), and a note that the cookie is first-party. Mention WPML and the automatic translation provider in the privacy notice when relevant.

Same category

More services: Other

See the whole category

Vera

Vera is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Vera integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Vera makes advanced AI accessible to all teams.

Other

ApplicantStack

ApplicantStack is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. ApplicantStack integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, ApplicantStack helps organizations maintain robust websites that meet user expectations and technical.

Preferences

Poll Maker

Poll Maker is a survey and feedback collection platform that helps businesses gather valuable customer insights through customizable questionnaires, polls, and NPS surveys. It offers advanced logic branching, multi-channel distribution, and real-time analytics. Poll Maker enables organizations to measure customer satisfaction, collect product feedback, and conduct market research. Its reporting tools transform raw feedback data into actionable insights.

Preferences

minerstat

Minerstat is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Minerstat is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Minerstat offers reliable solutions that scale with organizational needs and evolving web standards.

Essential

Forgejo

Forgejo is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Forgejo supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Forgejo enables informed decisions that improve experience and drive results.

Other

Flip

Flip is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Flip supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Flip ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site