July 2026 · Platform Guide

Privacy Policy for Wix Sites: Free Generator & Guide

Wix powers over 200 million sites worldwide, and every Wix site needs a legally compliant privacy policy. But Wix presents unique privacy challenges: Wix collects visitor data on every plan (including free), its ecosystem of built-in business apps (Stores, Bookings, Events, Payments) each introduce separate data flows, and Wix's own cookies differ from standard website analytics. Here is exactly what your Wix privacy policy must cover.

Wix-Specific Privacy Considerations

1. Wix Analytics & Visitor Tracking

Wix automatically collects analytics data on all sites, including free plans. This includes visitor IP addresses, browser type, device information, operating system, referring URLs, page views, session duration, and approximate geographic location. Wix Analytics is Wix's own tracking system — it does NOT use Google Analytics by default, though you can add it. You must disclose this built-in tracking in your privacy policy. Wix stores this data on its own infrastructure and uses it for platform improvement, security, and aggregated reporting.

2. Wix Business Apps & Data Collection

Each Wix business app collects distinct categories of customer data. Wix Stores collects customer names, shipping addresses, billing addresses, emails, phone numbers, order history, and payment data. Wix Bookings collects appointment details, staff preferences, customer notes, and session history. Wix Events collects attendee information, ticket purchases, and dietary or accessibility preferences. Wix Restaurants collects order details, delivery addresses, and menu preferences. Your privacy policy must disclose each app you use and the specific data it collects.

3. Wix Payments & Financial Data

Wix Payments is powered by Stripe and processes credit card transactions directly through Wix's platform. If you use Wix Payments, you never handle raw card data — it goes directly to Stripe via Wix's integration layer. However, you still need to disclose that payment information is collected, how it is processed, and that Stripe's privacy policy applies. Third-party payment gateways (PayPal, Square, Klarna, Afterpay) each have their own data handling and must be individually listed.

4. Wix Ascend & Email Marketing

Wix Ascend includes email marketing tools, CRM, and automation. If you use Ascend Email Marketing, you collect subscriber email addresses, names, open rates, click rates, and campaign interaction data. Wix stores this data on its servers and uses it to deliver email campaigns and provide analytics. You must disclose email marketing data practices, including that you use a third-party email delivery infrastructure (powered by Wix's own email servers integrated with SendGrid via Wix's backend).

5. Wix Cookies & Tracking Technologies

Wix sets several platform-specific cookies beyond standard functional cookies. The primary Wix cookies include: XSRF-TOKEN (security, cross-site request forgery protection), svSession (session management, expires after 2 years), _wix_browser_sess (browser session tracking), _wixCIDX (client identifier for analytics), _wixAB3 (A/B testing for Wix features), fedops.logger.X (performance monitoring). Wix also sets the bSession cookie for session tracking and smSession for logged-in member sessions. Your policy must list these cookies with their purpose, duration, and type (essential vs. optional).

6. Wix App Market & Third-Party Apps

The Wix App Market offers hundreds of third-party apps that can access your site data. Apps for reviews (like Trustpilot or Yotpo), live chat (Tidio, Zendesk), SEO (Site Booster), marketing (Google Ads, Facebook Ads), and analytics (Google Analytics, Hotjar, Facebook Pixel) each introduce separate data collection. You must identify which apps you have installed and reference their privacy policies in your own policy.

7. Wix ADI & AI-Generated Content

Wix ADI (Artificial Design Intelligence) and the newer Wix AI tools analyze the information you provide about your business to generate site design, text, and images. This data — including business descriptions, industry, location, and preferences — is processed by Wix's AI systems. Your privacy policy should disclose that AI-generated features process business information to deliver personalized site creation tools.

8. Wix GDPR Compliance Tools

Wix provides built-in GDPR tools including a Cookie Consent banner, a Privacy Wizard, and data subject request handling. The Cookie Consent banner lets visitors opt out of non-essential cookies. However, Wix's documentation explicitly states that generating a compliant privacy policy is your responsibility as the site owner. The built-in tools help with cookie consent but do not replace a comprehensive written policy.