Privacy policy clauses for Unleash
Unleash is an open-source feature management platform that controls which features are visible to users through feature flags and toggles. Websites use it to gradually roll out new features, run experiments, and manage feature availability without redeploying code.
Free scan · No signup · Results in 60 seconds
What data Unleash collects
Your privacy policy must disclose each of the following data types when you use Unleash.
When does Unleash trigger privacy obligations?
Installation triggers immediate obligations
The moment Unleash SDK is integrated into your product, you begin collecting user context data for flag evaluation—this includes identifiers, IP addresses, custom attributes, and behavioral signals needed to determine which feature flags each user sees. This data flow is active on every user interaction.
### GDPR applicability
If your users include anyone in the EU/EEA, GDPR Article 13 (transparency) and Article 6 (lawful basis) apply immediately. User context data is personal data under GDPR Article 4(1). You must establish a lawful basis—typically user consent under Article 6(1)(a) or legitimate interest under Article 6(1)(f)—*before* the SDK transmits context data to Unleash (even if self-hosted, internal processing requires a lawful basis).
### CCPA applicability
If you operate a for-profit business collecting personal information from California residents, CCPA Section 1798.100 grants users the right to know what data you collect. Unleash's user context collection is
