Skip to content

Privacy

Rather than using cookies, yawa generates a session ID on the server for each request. It hashes the visitor’s IP address, user agent, and site ID together with a salt derived from the current date. The same visitor will get the same session ID throughout the day, but a different one the next day.

No personal data is stored and no cookies are set, which is why no consent banner is needed.

Since yawa is self-hosted, GDPR compliance depends on where you deploy it. Hosting within the EU on infrastructure that meets GDPR requirements is your responsibility.