Magnolia
Magnolia is an enterprise content management system that serves web page content and digital experiences. Its frontend scripts may include personalization engines that track visitor behavior, set cookies for session management and content targeting, and make server requests to deliver tailored content based on user segments.
Overview
Magnolia CMS is an enterprise content management platform with a substantial market presence in Europe, particularly among large organizations in retail, finance, and media. Unlike headless CMS tools that operate purely as APIs, Magnolia deploys frontend personalization engines that run in the visitor's browser, making it directly relevant to cookie consent compliance. The platform's Personalization and Experience modules create behavioral profiles to segment visitors and deliver targeted content variants.
What This Script Does
Magnolia's client-side scripts serve two distinct functions: session management for the CMS itself, and behavioral data collection for its personalization engine.
Session and functional cookies: Magnolia sets server-side session cookies (typically JSESSIONID or equivalent) to maintain visitor sessions when authenticated users access the CMS interface. These are essential for application functionality and are scoped to the session.
Personalization tracking: The Magnolia Personalization module runs client-side scripts that observe visitor behavior — pages viewed, content categories browsed, time on page, and referral sources. This data feeds into visitor segment definitions, which the CMS uses to select content variants. Depending on configuration, a visitor identifier cookie may be set to persist segment assignments across sessions. This cookie can have a multi-day or multi-week expiry.
Network requests: Personalization scripts may make asynchronous requests to the Magnolia backend to fetch content variants or report behavioral events. These requests occur on the same domain as the host application in most deployments.
Analytics integration: Magnolia integrates with analytics platforms and can forward behavioral data to connected systems as part of its digital experience platform capabilities.
Consent & Compliance
GDPR and ePrivacy Directive: Magnolia's session management cookies are essential and do not require consent. However, the Personalization module's behavioral tracking cookies and cross-session visitor identification fall squarely within the ePrivacy Directive's consent requirement. These cookies track individual behavior to build profiles, which requires prior explicit consent. Under GDPR, personalization based on behavioral profiling requires either consent (Article 6(1)(a)) or a legitimate interests assessment that withstands the balancing test — consent is the safer legal basis for commercial personalization.
CCPA/CPRA: Behavioral data collected for personalization constitutes personal information under CCPA. If Magnolia's scripts share visitor behavioral data with Magnolia's own servers for analytics, this may constitute "sharing" for cross-context behavioral advertising purposes depending on how the data is used downstream.
Consent category: functional and analytics (mixed). Session cookies are essential. Personalization and behavioral tracking cookies require consent.
Should You Block This Without Consent?
Conditional.
Magnolia's core session management scripts are essential and should not be blocked. The Personalization and behavioral analytics components require consent before activation. Implement consent controls that allow the CMS session layer to function while blocking personalization scripts until the visitor opts in to functional and analytics cookies.
Is Magnolia GDPR compliant?
Magnolia typically loads functional and analytics trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Magnolia can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Magnolia, not on Magnolia itself.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
magnolia-cms.comFunctionalmagnolia-cms.com is a functional domain operated by Magnolia, used to run site features like chat, video, embeds, and preferences.
Frequently Asked Questions
Related Vendors
Manage consent for Magnolia
ConsentStack automatically detects and manages Magnolia trackers so your site stays compliant with global privacy regulations.