Wix.com

Wix.com

Website builder and hosting platform used by small businesses and creators. Wix.com scripts handle site rendering, form submissions, and e-commerce functionality on Wix-hosted sites. Wix also loads first-party analytics and marketing pixel scripts on behalf of site owners.

Overview

Wix.com is a cloud-based website builder and hosting platform serving over 250 million users. On websites built with Wix, its scripts are the foundational infrastructure — they render page templates, manage routing, power e-commerce, and optionally load analytics and marketing integrations through Wix's partner marketplace. Wix acts simultaneously as the site's host, CMS, and feature delivery platform.

What This Script Does

Core Rendering and Platform Infrastructure

  • Loads the Wix runtime framework (static.parastorage.com) which bootstraps all page rendering, navigation, and client-side routing
  • Manages the Wix Editor-generated site structure including dynamic pages, responsive layouts, and CMS collections
  • Handles Wix Stores: product listings, shopping cart sessions, checkout flows, and payment processing via Wix Payments or integrated processors (Stripe, PayPal)
  • Powers Wix Forms: submission collection, validation, and forwarding to connected applications or email

Cookies Set by Wix

  • svSession — persistent visitor session identifier, first-party, 2 years; used for site analytics and member login state
  • hs — server-side security hash bound to svSession, first-party, session
  • _wix_browser_sess — browser session identifier, first-party, session
  • XSRF-TOKEN — CSRF protection token, first-party, session
  • fedops.logger.sessionId — performance monitoring session, first-party, session
  • Member login: additional Wix Members cookies for authenticated user sessions

CDN and Script Domains

  • static.parastorage.com — Wix's primary CDN for all platform scripts and assets
  • frog.wix.com — Wix's analytics and event telemetry endpoint
  • analytics.wixapps.net — site owner analytics pipeline

Wix Analytics (Built-In)

  • Wix automatically collects visitor data (page views, sessions, traffic sources) for the site owner's Wix Dashboard
  • This analytics collection is bundled into the platform and cannot be independently disabled on Wix-hosted sites
  • Data includes IP addresses, referring URLs, device type, and behavioral metrics

Third-Party Marketing Integrations

  • Site owners can connect Google Analytics, Meta Pixel, Google Ads, Hotjar, and other marketing tools through Wix's marketing integrations panel
  • These third-party scripts load dynamically and have their own consent requirements separate from Wix's core scripts

Consent & Compliance

Consent category: Essential / Functional

Wix's core platform scripts (rendering, routing, cart, CSRF protection) are essential for the site to function and are exempt from consent under the ePrivacy Directive's strictly necessary exemption. The bundled Wix Analytics is more ambiguous — it collects visitor data for the site owner using the svSession persistent identifier, which technically requires consent under a strict ePrivacy interpretation. In practice, most Wix sites treat svSession as functional. Third-party scripts loaded through Wix's marketing integrations require their own consent. Under GDPR, Wix acts as a data processor for the site operator; the operator is the data controller responsible for consent management.

Should You Block This Without Consent?

No. On Wix-hosted sites, core Wix scripts are essential for page rendering and cannot be blocked without breaking the site entirely. Analytics and marketing integrations enabled through Wix should be managed separately through a consent management platform connected to Wix's cookie consent settings.

Visit website

Consent Categories

Essential
Functional

Also Known As

wix cookieswix GDPRwix trackingwix analytics privacywix.com consentwix website builder privacy

Industries

Computers Electronics and TechnologyProgramming and Developer Software

Tracked Domains (1)

wix.comEssential

Frequently Asked Questions

Do Wix.com scripts require visitor consent on Wix-built sites?

No for core scripts. Wix rendering, routing, cart, and CSRF protection scripts are essential for the site to function and are exempt from consent. However, the svSession persistent analytics cookie and any third-party marketing integrations enabled through Wix's marketplace require separate disclosure or consent.

What cookies does Wix set on visitor browsers?

Wix sets svSession (2-year visitor identifier for analytics and member login), hs (security hash bound to svSession), XSRF-TOKEN (CSRF protection, session), and _wix_browser_sess (session). Analytics telemetry fires to frog.wix.com and analytics.wixapps.net on every page load as part of the platform.

How does ConsentStack work with Wix-hosted sites?

ConsentStack on Wix sites manages third-party marketing integrations added through Wix's marketplace, such as Meta Pixel, Google Ads, or Hotjar. Core Wix platform scripts cannot be blocked without breaking the site, so ConsentStack focuses on gating the optional analytics and advertising integrations that site owners have enabled.

Related Vendors

Firebase
Firebase
Firebase is Google's mobile and web application development platform offering authentication, real-time database, cloud functions, and analytics. Web SDK scripts initialize Firebase services and may track app events via Firebase Analytics, which is powered by Google Analytics 4. Widely used in single-page apps and PWAs for backend infrastructure and usage tracking.
Google
Google
Google is the dominant provider of web analytics, advertising, and infrastructure tools. Scripts like Google Analytics, Tag Manager, Ads, and reCAPTCHA collect behavioral data, manage tag firing, serve targeted ads, and detect bots. Sets persistent cookies to track users and correlate activity across sites.
Google Tag Manager
Google Tag Manager
Google Tag Manager is a tag management system that lets marketers deploy and update analytics and marketing scripts without code changes. The GTM container script loads synchronously in the page head and injects configured tags, triggers, and variables on behalf of other vendors. No data collection of its own — acts as a loader for other scripts.
Google Fonts
Google Fonts
Google Fonts is a free font hosting service that serves hundreds of typeface families via a global CDN. Stylesheets and font files load from fonts.googleapis.com and fonts.gstatic.com to deliver web fonts to visitors. No advertising or tracking functionality is included.
reCAPTCHA
reCAPTCHA
Google reCAPTCHA is a bot detection and spam prevention service protecting web forms, login pages, and checkout flows. Scripts analyze user behavior, mouse movements, and browser fingerprints to distinguish humans from bots. The invisible reCAPTCHA v3 scores interactions without requiring user challenges.
Sign in with Google
Sign in with Google
Sign in with Google is an OAuth-based authentication service that enables users to log into websites using their Google account credentials. Scripts load the Google Identity Services library, display sign-in buttons, and handle token exchange for secure authentication. Stores session tokens and authentication cookies to maintain login state across page visits.

Manage consent for Wix.com

ConsentStack automatically detects and manages Wix.com trackers so your site stays compliant with global privacy regulations.