FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Other

Redis

UnclassifiedOfficial website

Redis is an open source in memory data store used as a cache, message broker and session store on the server side.

Block Redis until consentScan my site
Overview

What does Redis do?

What is Redis

Redis (Remote Dictionary Server) is an open source, in memory data store used as a cache, key value database, session store, message broker and rate limiter. It is widely deployed behind web applications to reduce database load and accelerate responses. Common managed offerings include Redis Cloud, Amazon ElastiCache for Redis, Google Cloud Memorystore and Azure Cache for Redis.

What data Redis stores

Like any cache Redis stores whatever your application puts into it. In typical use this includes session payloads, JWT or OAuth tokens, password reset codes, cached user profiles, shopping carts, rate limit counters keyed by IP address and queued background jobs. Even with short TTLs, this can constitute personal data while it sits in memory.

GDPR and ePrivacy implications

The GDPR applies as soon as Redis holds personal data, even briefly. You must have a legal basis, secure access, restrict who can connect, and ensure that backups and replication respect the same protections. The ePrivacy Directive applies to the cookies and similar technologies set in the browser, not to Redis directly; however, when Redis stores a session identifier that ties back to a strictly necessary cookie, the cookie still benefits from the exemption to consent.

Consent and legal basis

No browser consent is required to operate a Redis cache because the storage happens on the server. The legal basis is usually contract performance (Art. 6(1)(b) GDPR) when Redis backs session and login flows, or legitimate interest (Art. 6(1)(f) GDPR) for caching, rate limiting and fraud prevention. Personal data must still be minimised and protected.

Data transfers and hosting

Redis Cloud, Amazon ElastiCache for Redis, Google Cloud Memorystore and Azure Cache for Redis are operated by US headquartered providers. Even with EU regions, US cloud act risk exists and you need to anchor transfers under the EU US Data Privacy Framework or Standard Contractual Clauses with a transfer impact assessment. European alternatives include Scaleway Managed Redis, OVHcloud and self hosted Redis on EU sovereign infrastructure.

Practical compliance steps

Enable TLS for client and replication traffic, require authentication, isolate Redis in a private network, set conservative TTLs, avoid persistence (RDB/AOF) for sensitive data when not necessary, encrypt persistence files at rest if you keep them, restrict the FLUSHALL and KEYS commands, monitor for unauthorised access, and document Redis in your records of processing activities.

Compliance

Redis and the GDPR

Legal basis
Contract performance (Art. 6(1)(b) GDPR) or legitimate interest (Art. 6(1)(f) GDPR)
Risk level
medium
Applicable regulations
GDPR (when caches contain personal data), ePrivacy Directive (only via the application that uses Redis)

Impact assessment (DPIA)

A DPIA is recommended when Redis caches large volumes of personal data, holds authentication tokens for sensitive systems, or feeds profiling pipelines. Memory only caches with short TTLs and no persistence reduce the risk profile significantly.

Sample text for your banner

No browser consent is required because Redis runs server side. Disclose in your privacy policy that you use a cache layer for performance, list what categories of personal data may transit through it, and state the retention.
Cookies and trackers

What Redis sets and contacts

Tracking method
Server side in memory data store
Server location
Variable (self hosted or managed cloud cache)
Cookieless mode available
Yes
Questions

Frequently asked questions about Redis

Can't find your question? Write to us, we answer fast.

Does Redis set cookies in the user browser?

No. Redis is a server side in memory store and never writes browser cookies. The application that uses Redis may set session cookies, but those are technical cookies governed separately.

Is consent required to use Redis?

Browser consent is not required. As long as Redis only holds operational data needed to deliver the service, a GDPR legal basis such as contract performance or legitimate interest is enough.

Which GDPR legal basis applies?

Contract performance (Art. 6(1)(b) GDPR) when Redis backs login sessions or shopping carts; legitimate interest (Art. 6(1)(f) GDPR) for performance caching, rate limiting and abuse detection.

Are there transfers to the United States?

Self hosted Redis in the EU does not transfer data. With Redis Cloud, Amazon ElastiCache, Google Memorystore or Azure Cache for Redis, transfers may occur even with an EU region; cover them with the EU US Data Privacy Framework or Standard Contractual Clauses.

Do I need a DPIA for Redis?

A DPIA is typically not needed for a generic cache, but it is recommended when Redis holds authentication tokens for sensitive systems, large volumes of personal data, or data feeding profiling pipelines.

How do I deploy Redis compliantly?

Bind Redis to a private network, require authentication, enable TLS, set conservative TTLs, restrict dangerous commands, encrypt persistence files, take encrypted backups in the same region, and document the role of Redis in your records of processing activities.

Are there alternatives to Redis?

Valkey is an open source fork of Redis governed by the Linux Foundation. KeyDB, Dragonfly and Memcached are other in memory stores. For European managed hosting, Scaleway, OVHcloud and Clever Cloud all expose compatible options.

How do I update my cookie policy for Redis?

You usually do not list Redis in the cookie policy because it sets no browser cookies. Mention in the privacy policy that you operate a server side cache, describe the categories of personal data it may hold and the retention period.

Same category

More services: Other

See the whole category

V2Board

V2Board is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. V2Board integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, V2Board helps organizations maintain robust websites that meet user expectations and technical requirements.

Other

CodeSandbox

CodeSandbox is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. CodeSandbox supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, CodeSandbox ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Other

Wurfl

Wurfl is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Wurfl supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Wurfl ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Other

Tooning

Tooning is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Tooning integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Tooning helps organizations maintain robust websites that meet user expectations and technical requirements.

Other

Draftpress HFCM

Draftpress HFCM is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Draftpress HFCM offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Draftpress HFCM empowers organizations to optimize strategy and maximize return on investment.

Other

IFC Markets

IFC Markets is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. IFC Markets supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, IFC Markets ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site