Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
LaunchDarkly is a US feature flag and experimentation platform. It can be used server side without browser cookies, which keeps it low risk under GDPR when the context is properly anonymised.
LaunchDarkly is a feature management and experimentation platform operated by LaunchDarkly Inc., headquartered in Oakland, California. It lets engineering and product teams release features gradually, run A/B experiments and target features by user segments. SDKs are available for most languages, both client and server side.
Server side SDKs send no browser cookies. Client side SDKs use localStorage to cache flag values keyed by an anonymous or known user context. Experimentation events include the flag key, the variation, the context key and a timestamp. The context can be made anonymous to reduce risk.
Feature flag evaluation with anonymous contexts and no persistent storage on the device usually does not trigger Article 5(3) ePrivacy: it can rely on legitimate interest. Experimentation that personalises features for identified users requires consent under Article 6(1)(a) GDPR.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Use anonymous contexts whenever possible. If you target features by identifiable user attributes or run experiments that profile users, gate the SDK behind a CMP.
Default plans process data in the United States. LaunchDarkly offers an EU region (Frankfurt) on enterprise tiers. SCCs and the EU US Data Privacy Framework cover the US transfer; a transfer impact assessment is recommended.
Prefer server side SDKs, use anonymous context keys, enable EU region where available, sign the DPA with SCCs, run a DPIA if you experiment on identifiable users and document the third country transfer.
Websites using LaunchDarkly must obtain user consent under GDPR regulations.
DPIA considerations
A DPIA may be required when LaunchDarkly contexts include identifiable user attributes or behavioural data linked to advertising. Prefer anonymous keys, enable EU residency where available and document the third country transfer.
Sample consent text
Our website uses LaunchDarkly, a feature flag and experimentation platform operated by LaunchDarkly Inc. (United States), to gradually release features. Flag evaluation is performed on anonymous contexts. If you allow optional cookies, your usage data may be sent to LaunchDarkly under SCCs and the EU US Data Privacy Framework.
Third-party domains contacted
app.launchdarkly.comclientstream.launchdarkly.comevents.launchdarkly.comCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| ld:$anonUserId | first_party | Persistent (localStorage) | Stores cached feature flag values keyed by an anonymous or known context (localStorage rather than HTTP cookie). |
| ld:goals | first_party | Persistent (localStorage) | Stores experimentation goal tracking data for the LaunchDarkly client SDK. |
LaunchDarkly places tracking cookies for advertising — comply with GDPR using FlowConsent.
Server side SDKs set no cookies. Client side SDKs cache flag values in localStorage indexed by an anonymous or known context. No third party advertising cookies are involved.
Usually no for server side evaluation with anonymous contexts. Yes for client side experimentation that profiles identified users.
Legitimate interest under Article 6(1)(f) GDPR for anonymous evaluation. Consent for experiments that personalise features for identified users.
Yes by default. EU region (Frankfurt) is available on enterprise tiers. SCCs and the EU US Data Privacy Framework cover the transfer.
Recommended when contexts include identifiable user attributes or behavioural data linked to advertising.
Prefer server side SDKs, use anonymous context keys, enable EU region where available, sign the DPA with SCCs and document the transfer.
Flagsmith (EU hosting available), Unleash (self hosted open source), Statsig, ConfigCat, GrowthBook (open source, EU friendly).
Document any localStorage entry used by the LaunchDarkly client SDK and the third country transfer.