Privacy policy clauses for OneSignal
OneSignal is a push notification platform that enables websites and apps to send targeted messages to users across devices. We use it to deliver timely notifications based on user segments and behavior, improving engagement and communication with our audience.
Free scan · No signup · Results in 60 seconds
What data OneSignal collects
Your privacy policy must disclose each of the following data types when you use OneSignal.
When does OneSignal trigger privacy obligations?
Installation Triggers Immediate Obligations
The moment you integrate OneSignal's SDK into your app or website, you begin collecting and transmitting device tokens, IP addresses, and (optionally) email addresses and user tags to OneSignal Inc.'s US-based servers. This is a data processing relationship that triggers GDPR Article 6 (lawful basis), Article 14 (transparency), and CCPA Section 1798.100 (disclosure) obligations immediately—even before users interact with notifications.
Jurisdiction-Specific Thresholds
GDPR applies if: You have any EU users. The collection of device tokens + IP addresses for OneSignal constitutes processing of personal data under GDPR Article 4(1). No minimum user count threshold.
