Fly.io revised its privacy policy to clarify third-party data collection practices. Previously, the policy stated it did not permit third-party tracking beyond analytics, which users could opt out of. The updated policy now explicitly discloses that it permits fraud- and abuse-prevention processing by third-party services in addition to analytics, and states this fraud prevention cannot be opted out of because it is based on the company's legitimate interest in protecting the platform.
The updated policy now explicitly discloses that Fly.io uses third-party fraud-prevention services that collect device and browser signals (and set cookies) when users create accounts or sign in. Unlike analytics, which users can opt out of via cookie preferences or Google's opt-out tool, this fraud-prevention processing cannot be opted out of. The company states its legal basis is legitimate interest in protecting the platform and users. You can opt out of analytics collection, but fraud-prevention data collection will apply to all account creation and sign-in activity.
→ Review the Sub-processors page to identify which third-party fraud-prevention services collect your device and browser signals
→ Opt out of analytics collection via the Cookie preferences link or Google's opt-out browser add-on if you wish to limit optional data collection
This is the 2nd significant Disclosure Requirement Change change Fly.io has made since ConductAtlas began monitoring.
ConductAtlas has recorded 2 material changes to this document (since July 2026).
Fly.io now explicitly discloses mandatory collection of device and browser signals by third-party fraud-prevention services during account creation and sign-in, which cannot be opted out of.
Analytics collection remains optional and can be declined or withdrawn via cookie preferences or Google's opt-out tool.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Wording edits to this record that do not change what it claims. Changes to a claim are published as corrections.
Fly.io expanded its privacy policy to explicitly disclose mandatory third-party fraud-prevention data collection. This is a material change from the prior language, which stated the company did not permit third-party data collection beyond analytics. The …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-X-004239.
Fly.io updated its privacy policy effective July 20, 2026, expanding its analytics practices and clarifying cookie handling. The policy now …
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
Get alerted when this policy changes again, including what changed and why it matters.