Privacy policy clauses for Statsig
Statsig is a feature management and experimentation platform that enables websites to control feature rollouts, run A/B tests, and track user behavior across experiments. Companies use Statsig to safely deploy features to segments of users and measure their impact on key metrics.
Free scan · No signup · Results in 60 seconds
What data Statsig collects
Your privacy policy must disclose each of the following data types when you use Statsig.
When does Statsig trigger privacy obligations?
Installation Moment
The moment you install Statsig's SDK, you begin transmitting user identifiers and custom attributes to Statsig Inc.'s servers in the United States. This triggers data protection obligations immediately—*before* any experiment runs or flag is evaluated.
Applicable Regulations
GDPR (if you have EU users): Statsig processes personal data (user IDs, session metadata, event logs) on your behalf. You must have a Data Processing Agreement (DPA) in place with Statsig Inc. under GDPR Article 28. Even without explicit consent, you need a lawful basis (typically legitimate interest under Article 6(1)(f)) *and* must provide transparency under Article 13/14 (privacy notice disclosing Statsig as a processor, the categories of data shared, and cross-border transfer to the US).
