Skip to content

Privacy Policy

Last updated: August 24, 2026

1. Information We Collect

When you create a FlagDash account, we collect your email address, name, and organization details. When you use our services, we collect usage data including API call volumes, feature flag evaluations, and configuration changes for analytics and billing purposes.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process transactions and send billing notifications
  • Send technical notices, updates, and support messages
  • Monitor and analyze usage trends to improve user experience
  • Detect, prevent, and address technical issues and fraud

3. Data Storage and Security

Your data is stored on secure, encrypted servers. We use industry-standard encryption (TLS 1.3) for all data in transit and AES-256 for data at rest. API keys are hashed using bcrypt before storage. We never store raw API keys after initial generation.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data with service providers who assist us in operating our platform (e.g., payment processing via Polar.sh, hosting infrastructure), subject to confidentiality obligations.

5. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your data in a machine-readable format
  • Opt out of non-essential communications

6. Cookies, local storage, and analytics

We use the strictly necessary _flagdash_key cookie to protect the application session and CSRF state. When you sign in, the _flagdash_admin_session cookie keeps your account session active for up to 30 days. We also store phx:theme locally to remember your display preference and fd_cookie_consent for six months to remember your privacy choice. These are required for security or for a preference you explicitly requested.

With your consent, we use PostHog product analytics to understand page views, navigation, interactions, device information, and approximate location derived from your IP address. Signed-in analytics may be associated with your user and account so we can understand activation and product usage. PostHog may store cookies beginning with ph_ for up to one year.

Analytics can include session replay. All input values are masked and elements that display credentials or secrets are excluded from capture. Analytics requests travel through our same-origin /ingest endpoint and are then processed by PostHog; FlagDash does not forward your cookies to PostHog. We do not use advertising cookies or sell personal information.

Analytics stays off unless you accept it. Choose at any time to review or withdraw consent. Withdrawing consent stops future collection and clears known analytics cookies from this browser.

7. Contact

If you have questions about this privacy policy, please contact us at hello@flagdash.io.