Get the weekly digest
Every policy change across 844 tracked documents, once a week. No account needed.
Fly.io's privacy policy, effective July 20, 2026, now explicitly discloses the use of two analytics services: Google Analytics and PostHog. The policy previously described only Google Analytics tracking. The updated policy clarifies that PostHog operates on public, logged-out pages only (marketing, blog, and documentation), stores data in the EU, does not enable session recording or capture keystrokes, and deletes analytics events after 12 months. For EU, UK, and Switzerland users, both services require explicit cookie consent with withdrawal options.
The updated policy discloses that Fly.io uses PostHog in addition to Google Analytics on public, logged-out pages (marketing pages, blog, and documentation). PostHog stores a random identifier and pageview data in first-party cookies, with data retained for no more than 12 months. The policy states that PostHog does not track authenticated activity or link identifiers to account information. For users in the EEA, UK, or Switzerland, PostHog remains off unless you accept the cookie banner, and you can withdraw consent anytime using the 'Cookie preferences' link in the page footer.
The updated policy establishes explicit disclosure of PostHog as a second analytics service operating on public pages with EU data residency and strict data retention limits. This clarifies the company's analytics footprint and provides users in regulated jurisdictions with transparent consent and withdrawal mechanisms, which operationalizes GDPR and ePrivacy Directive compliance requirements.
→ Review the 'Cookie preferences' link in the page footer to manage or decline PostHog analytics if visiting from EEA, UK, or Switzerland.
→ Use Google's opt-out browser add-on if you wish to exclude yourself from Google Analytics tracking.
→ PostHog analytics will operate on public pages for users in EEA, UK, and Switzerland unless you actively decline via the cookie banner or 'Cookie preferences' link.
→ Google conversion measurement data will be sent for EEA/UK users unless consent is withdrawn or Google Consent Mode is configured.
Now explicitly states PostHog operates on public, logged-out pages only, stores data in EU, and deletes after 12 months.
For EEA, UK, and Switzerland users, PostHog requires explicit consent with withdrawal option via 'Cookie preferences' link.
Clarifies that Google's conversion measurement is used to track advertising effectiveness, with consent required for EEA/UK users via Google Consent Mode.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Fly.io's updated privacy policy adds explicit disclosure of PostHog analytics and clarifies previous Google Analytics language. The policy now states that PostHog operates only on public, logged-out pages, stores data in the EU, deletes analytics after 12 months, and does not enable session recording or keystroke capture. For EEA/UK/Swiss users, consent is required and withdrawal is available. This change is primarily a transparency enhancement rather than a material operational shift in data practices. No new regulatory obligations appear to be created; the changes align with existing GDPR and ePrivacy Directive requirements for analytics disclosure and consent management.
Full institutional analysis
Regulatory exposure, obligation analysis, escalation trigger, board language, and recommended action.
Analyst $49/moConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003882.
Get alerted when this policy changes again — including what changed and why it matters.