Fly.io updated its privacy policy effective July 20, 2026, expanding its analytics practices and clarifying cookie handling. The policy now discloses use of two third-party analytics services—Google Analytics and PostHog—on public, logged-out pages, whereas previously only Google Analytics was mentioned. The updated terms specify that PostHog stores a random identifier and pageview data in the EU, does not enable session recording, and deletes analytics events after 12 months. For EEA, UK, and Switzerland users, both services require explicit consent via a cookie banner, with opt-out available through cookie preferences or browser tools.
Consumers: If you are in the EEA, UK, or Switzerland, Fly.io will ask for your permission before placing analytics cookies on your device.
Data controllers: Organizations using Fly.io must now disclose PostHog as a third-party analytics processor and confirm that their data processing agreements cover EU-based storage of analytics data.
The updated policy discloses that Fly.io now uses PostHog analytics on public, logged-out pages (marketing pages, blog, documentation) in addition to Google Analytics. PostHog stores a random identifier and pageview data such as URL, referrer, and device type in the EU, but does not link this data to user names, email addresses, or Fly.io accounts, and does not capture session recordings, clicks, keystrokes, or form contents. Analytics data is retained for a maximum of 12 months. For users in the EEA, UK, or Switzerland, both Google Analytics and PostHog require explicit consent before being set; you can withdraw consent at any time using the 'Cookie preferences' link in the page footer or by using Google's opt-out browser add-on.
→ Review the cookie banner when visiting Fly.io public pages if you are in the EEA, UK, or Switzerland, and accept or decline analytics cookies as preferred.
→ Use the 'Cookie preferences' link in the page footer to withdraw consent for analytics cookies at any time.
→ Use Google's opt-out browser add-on to opt out of Google Analytics tracking across websites.
Fly.io now uses PostHog on public pages to measure traffic and signup funnel; data stored in EU, not linked to user accounts, deleted after 12 months.
Both Google Analytics and PostHog require explicit consent via cookie banner for users in these regions; consent can be withdrawn at any time.
Analytics events are deleted after 12 months maximum.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Wording edits to this record that do not change what it claims. Changes to a claim are published as corrections.
Fly.io expanded its analytics infrastructure to include PostHog alongside Google Analytics on public pages, with data stored in the EU. The policy now explicitly discloses analytics practices, consent mechanisms for EEA/UK/Switzerland users, and a 12-month …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-X-003882.
Fly.io revised its privacy policy to clarify third-party data collection practices. Previously, the policy stated it did not permit third-party …
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
Get alerted when this policy changes again, including what changed and why it matters.