49 Total

Key Facts · in the document’s own words

What governs over the terms of the Privacy Statement in any conflict between the two?
“If there is any conflict between the terms in this Privacy Statement and the DPF Principles, the DPF Principles shall govern.”
Version CA-V-007157, captured Sept. 25, 2026 · live source ↗
Our reading, not the document’s words
Fly.io's Data Privacy Framework (DPF) Principles govern over the terms of the Privacy Statement in any conflict between the two.
May Fly.io share User Personal Information in the event of a merger or sale?
“We may share User Personal Information if we are involved in a merger, sale, or acquisition. If any such change of ownership happens, we will ensure that it is under terms that preserve the confidentiality of User Personal Information...”
Version CA-V-007157, captured Sept. 25, 2026 · live source ↗
Our reading, not the document’s words
Fly.io may share User Personal Information in the event of a merger, sale, or acquisition, under terms that preserve the confidentiality of that information.
May Fly.io disclose personally-identifying information to law enforcement in response to a valid subpoena or court order?
“fly.io may disclose personally-identifying information or other information we collect about you to law enforcement in response to a valid subpoena, court order, warrant, or similar government order...”
Version CA-V-007157, captured Sept. 25, 2026 · live source ↗
Our reading, not the document’s words
Fly.io may disclose personally-identifying information or other collected information about users to law enforcement in response to a valid subpoena, court order, warrant, or similar government order.
Does Fly.io automatically delete inactive accounts?
“we don't automatically delete inactive user accounts, so unless you choose to delete your account, we will retain your account information indefinitely.”
Version CA-V-007157, captured Sept. 25, 2026 · live source ↗
Our reading, not the document’s words
Fly.io retains user account information indefinitely unless the user chooses to delete their account, because Fly.io does not automatically delete inactive accounts.
How will Fly.io notify users of material changes to its Privacy Statement?
“We will provide notification to Users of material changes to this Privacy Statement through our Website at least 30 days prior to the change taking effect by posting a notice on our home page or sending email...”
Version CA-V-007157, captured Sept. 25, 2026 · live source ↗
Our reading, not the document’s words
Fly.io will notify users of material changes to its Privacy Statement at least 30 days before those changes take effect, by posting a notice on its home page or sending email.
Can children under the age of 13 hold an account on fly.io?
“If you're a child under the age of 13, you may not have an account on fly.io. fly.io does not knowingly collect information from or direct any of our content specifically to children under 13.”
Version CA-V-007157, captured Sept. 25, 2026 · live source ↗
Our reading, not the document’s words
Fly.io prohibits children under the age of 13 from holding an account on fly.io and does not knowingly collect information from or direct content specifically to children under 13.
Stay ahead of the changes
Track Fly.io and hear on the next check after its terms change. We check daily where we can, and show you where we can't.
Summary
Generated by a model from the captured document; not read by a person

Fly.io's Privacy Policy explains what information it collects about you, how it uses it, and who it can share it with. Fly.io will not sell or trade your personal information to third parties for their commercial purposes, but it can share it during a merger or acquisition, or hand it over to law enforcement under a valid legal order. Your account information is kept indefinitely unless you actively delete your account, and Fly.io must give you at least 30 days' notice before making significant changes to this policy.

Analysis

This Privacy Statement establishes Fly.io's obligations and limitations regarding the collection, use, retention, and sharing of User Personal Information. Fly.io limits data use to stated purposes and requires user permission before expanding those uses; it does not sell, rent, or trade User Personal Information to third parties for commercial purposes. Account information is retained indefinitely absent user-initiated deletion, and data stored on Fly.io's servers is held on US-based infrastructure, with the act of uploading sensitive data constituting implied consent to that arrangement. In any conflict between the Privacy Statement and Fly.io's Data Privacy Framework Principles, the DPF Principles govern. Users are afforded self-service access, correction, and deletion rights, and are entitled to at least 30 days' advance notice of material policy changes.

What this means for you

As a Fly.io user, your personal information is used only for purposes stated in the Privacy Policy, and Fly.io must obtain your permission before using it for anything else. Your account data is retained forever unless you take action: you can delete your account using the simple deletion methods Fly.io provides, which is the direct way to stop ongoing retention. Storing sensitive personal information on Fly.io's servers constitutes your consent to that data being held on servers in the United States. Law enforcement can obtain your data through a valid subpoena, court order, or warrant without your prior notice or consent, and Fly.io cannot guarantee absolute security of your data.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

2 important changes detected

5 versions captured · Latest change detected by ConductAtlas: August 2026

What changed Fly.io revised its privacy policy to clarify third-party data collection practices. Previously, the policy stated it did not permit third-party tracking beyond analytics, which users could opt out of. The updated policy now explicitly discloses that it permits fraud- and abuse-prevention processing by third-party services in addition to analytics, and states this fraud prevention cannot be opted out of because it is based on the company's legitimate interest in protecting the platform.
Why this matters The updated policy now explicitly discloses that Fly.io uses third-party fraud-prevention services that collect device and browser signals (and set cookies) when users create accounts or sign in. Unlike analytics, which users can opt out of via cookie preferences or Google's opt-out tool, this fraud-prevention processing cannot be opted out of. The company states its legal basis is legitimate interest in protecting the platform and users. You can opt out of analytics collection, but fraud-prevention data collection will apply to all account creation and sign-in activity.
View full change record →

July 21, 2026

medium
What changed Fly.io updated its privacy policy effective July 20, 2026, expanding its analytics practices and clarifying cookie handling. The policy now discloses use of two third-party analytics services—Google Analytics and PostHog—on public, logged-out pages, whereas previously only Google Analytics was mentioned. The updated terms specify that PostHog stores a random identifier and pageview data in the EU, does not enable session recording, and deletes analytics events after 12 months. For EEA, UK, and Switzerland users, both services require explicit consent via a cookie banner, with opt-out available through cookie preferences or browser tools.
Why this matters The updated policy discloses that Fly.io now uses PostHog analytics on public, logged-out pages (marketing pages, blog, documentation) in addition to Google Analytics. PostHog stores a random identifier and pageview data such as URL, referrer, and device type in the EU, but does not link this data to user names, email addresses, or Fly.io accounts, and does not capture session recordings, clicks, keystrokes, or form contents. Analytics data is retained for a maximum of 12 months. For users in the EEA, UK, or Switzerland, both Google Analytics and PostHog require explicit consent before being set; you can withdraw consent at any time using the 'Cookie preferences' link in the page footer or by using Google's opt-out browser add-on.
View full change record →

Clauses withheld

We withheld clauses we had published from this document. Each withholding is recorded in our correction log:

Featured provisions
Generated by a model from the captured document; not read by a person

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

49 provisions
12 featured
15 clause types
Enforcement Actions 1
Monetization Rules 1
Stay ahead of the changes

Monitoring

Fly.io has updated this document before. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Acquiring organization must honor privacy promises and similar clauses.

Compare across platforms →
Archival ProvenanceSource & Archival Record
This version captured September 25, 2026 01:16 UTC
Last successful capture October 21, 2026 01:00 UTC
Date stated by the document September 24, 2026 (as printed in this version)
Capture Method Automated scheduled archival capture
Document ID CA-D-000688
Version ID CA-V-007157
SHA-256 (extracted text, extractor v5) bf9f2cec9d6c0a705f3e911cf08d15bc2555a5f59211ae89370f9318fe8cb28a
Archived bytes SHA-256 (anchor) b6ed22db645f5d289feae7143f1fd4a8b348e470b84084e475db0c4b28c447ce
✓ Snapshot stored ✓ Archived bytes anchored (verified Sept. 25, 2026)

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 343 platforms.

Start monitoring → Compare plans