FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Other

Bugsnag

Analytics

Bugsnag (now part of SmartBear Insight Hub) is a popular error monitoring platform for web, mobile and backend applications. It collects exception payloads, stack traces and breadcrumbs to help engineering teams diagnose and fix bugs. Bugsnag offers both US and EU regions; selecting the EU region keeps primary processing within the EU. Standard error monitoring relies on legitimate interest, but attaching personal user identifiers warrants extra care.

Block Bugsnag until consentScan my site
Overview

What does Bugsnag do?

What is Bugsnag?

Bugsnag is an error monitoring and stability platform launched in 2013 and now part of SmartBear Insight Hub. SDKs are available for JavaScript, Node.js, Ruby, Python, PHP, .NET, Java, Go, iOS, Android and React Native. The platform groups exceptions, computes stability scores per release and integrates with Slack, Jira and modern CI/CD tooling.

Cookies and data collected

Bugsnag does not set cookies on the publisher website by default. Each error event sent to Bugsnag includes the exception class and message, the stack trace, breadcrumbs (recent navigation, console logs, custom events), the app version, the device or runtime information, the request URL and the IP address of the originating request. Optional fields include the user identifier, email and any custom metadata attached by the developer.

GDPR and ePrivacy implications

Crash reporting strictly necessary to maintain the service can rely on legitimate interest (Art. 6(1)(f) GDPR). When the SDK runs in the browser and captures user input through breadcrumbs, or when persistent user identifiers are attached, you should reassess the balancing test and consider obtaining consent for the optional pieces. No client side cookies are set by default, so no Art. 5(3) ePrivacy banner is required for the basic SDK.

Data transfers and hosting

Bugsnag offers two regions: the default US region (notify.bugsnag.com) and the EU region (notify.eu.bugsnag.com, sessions.eu.bugsnag.com). Choose the EU region for European customers and verify the configured Notifier endpoint in your SDK init. SmartBear publishes Standard Contractual Clauses in the Bugsnag DPA for transfers and retains the right to access logs from the US for support, which should be assessed in your TIA.

Practical compliance steps

Sign the Bugsnag (SmartBear) DPA. Configure the EU Notifier endpoints. Use the SDK redact filters to scrub authorisation headers, cookies, payment data and other sensitive fields from breadcrumbs and metadata. Avoid attaching email or full names to user identifiers; prefer hashed pseudonymous IDs. Mention Bugsnag in your privacy notice with the legitimate interest basis, the EU region and the Standard Contractual Clauses for any residual US transfer.

Compliance

Bugsnag and the GDPR

Legal basis
Legitimate interest (Art. 6(1)(f) GDPR) for crash reporting strictly necessary to deliver, maintain and secure the service. Consent (Art. 6(1)(a)) becomes relevant if user identifiers, contextual user metadata or session replay style breadcrumbs are attached to errors for behavioural insight. Strictly necessary processing for security relies on Art. 5(3) ePrivacy exemption when no client side cookies are set.
Risk level
low
Applicable regulations
GDPR, ePrivacy Directive 2002/58/EC, EU US Data Privacy Framework (when EU customer data is sent to the US region)

Impact assessment (DPIA)

A DPIA is generally not required for standard backend error monitoring with Bugsnag. It can be relevant when the SDK runs in the browser, captures user input via breadcrumbs and is combined with persistent user identifiers, especially on the US region.

Sample text for your banner

We use Bugsnag (SmartBear Software, Inc.) to detect and fix errors. Crash reports including stack traces, application context and limited device information are processed under our legitimate interest in maintaining a secure and reliable service. EU customer data is processed in our EU region.
Cookies and trackers

What Bugsnag sets and contacts

Tracking method
error monitoring SDK for backend, frontend and mobile applications; collects exception payloads, stack traces, breadcrumbs and limited request and device metadata
Server location
United States or European Union (Bugsnag, owned by SmartBear, runs Notifier endpoints in US and EU regions; default region depends on the account creation)
Cookieless mode available
Yes
Data transferred outside the EU
Bugsnag is operated by SmartBear Software, Inc. (United States). Customers can be provisioned on the EU region (notify.eu.bugsnag.com, sessions.eu.bugsnag.com), in which case primary processing happens in the EU. The default US region triggers transfers to the United States; SmartBear publishes Standard Contractual Clauses in the Bugsnag DPA. SmartBear retains the right to access logs from the US for support.

Cookies set (1)

NameTypeDurationPurpose
no_cookies_setfirst_partyN/ABugsnag SDK does not set cookies on the publisher site by default. Error events are sent server side or via XHR without persistent client storage.

Third-party domains contacted (5)

  • notify.bugsnag.com
  • sessions.bugsnag.com
  • notify.eu.bugsnag.com
  • sessions.eu.bugsnag.com
  • app.bugsnag.com
Questions

Frequently asked questions about Bugsnag

Can't find your question? Write to us, we answer fast.

What cookies does Bugsnag set?

Bugsnag does not set cookies on the publisher website by default. Error events are sent server side or via XHR without persistent client storage. The dashboard at app.bugsnag.com sets first party cookies, but those only affect logged in engineers, not your end users.

Do I need consent to use Bugsnag on my website?

In most cases no banner is required because Bugsnag does not set cookies on the publisher site and only collects data needed to detect and fix errors. Consent becomes relevant when the SDK runs in the browser, captures user input through breadcrumbs and is combined with persistent user identifiers.

What is the legal basis for Bugsnag?

Crash reporting strictly necessary to maintain the service relies on legitimate interest (Art. 6(1)(f) GDPR). Optional features that attach personal user identifiers, capture form input or store extensive request payloads should be re evaluated and may require consent.

Does Bugsnag transfer data to third countries?

By default the SDK posts to the US Notifier endpoint (notify.bugsnag.com). Bugsnag also offers an EU region (notify.eu.bugsnag.com, sessions.eu.bugsnag.com) which keeps primary processing in the EU. Choose the EU region for European customers and verify the configured Notifier endpoint in the SDK init.

Do I need a DPIA for Bugsnag?

A DPIA is generally not required for standard backend error monitoring. It can be relevant when the SDK runs in the browser, captures user interactions and is combined with persistent user identifiers, especially on the US region.

How do I implement Bugsnag compliantly?

Sign the Bugsnag (SmartBear) DPA. Configure the EU Notifier endpoints. Use the SDK redact filters to scrub authorisation headers, cookies, payment data and other sensitive fields. Avoid attaching email or full names to user identifiers; prefer pseudonymous hashed IDs. Mention Bugsnag in your privacy notice with legitimate interest and the EU region.

Are there alternatives to Bugsnag in the EU?

EU based or EU friendly alternatives include Sentry (with EU region), GlitchTip (open source, self hostable in the EU), Honeybadger (US but with strong redaction defaults) and self hosted Rollbar. Selecting the EU region or a self hosted option avoids transfers entirely.

How should I update my privacy policy for Bugsnag?

State that Bugsnag (SmartBear Software, Inc.) is a processor for application error monitoring. Describe the categories of data sent in error events (stack traces, breadcrumbs, application context, IP address), the legitimate interest basis, the EU region (when configured) and the SCC reference for any residual US transfer.

Same category

More services: Other

See the whole category

Storepoint

StorePoint is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. StorePoint supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, StorePoint ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Other

Mentaya

Mentaya is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Mentaya is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Mentaya offers reliable solutions that scale with organizational needs and evolving web standards.

Preferences

TaxDome

Taxdome is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Taxdome supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Taxdome ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Venngage

Venngage is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Venngage offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Venngage empowers organizations to optimize strategy and maximize return on investment.

Analytics

Workable

Workable is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Workable integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Workable helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Upptime

Upptime is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Upptime supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Upptime ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Other

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site