Other

Redmine

Redmine is an open source, self hosted project management and issue tracking web application built with Ruby on Rails. It provides issue tracking, Gantt charts, time tracking, wiki, forums, and multi project support. As a fully self hosted solution with no cloud service or corporate telemetry, Redmine provides maximum data sovereignty and is one of the most privacy friendly project management tools available.

Overview

What does Redmine do?

What Is Redmine?

Redmine is a free, open source project management and issue tracking web application written in Ruby on Rails. It supports multiple projects, issue tracking with custom fields and workflows, Gantt charts, time tracking, wiki pages, forums, document management, and role based access control. Redmine is entirely self hosted with no cloud offering from the Redmine project. It is one of the most mature open source project management tools with an extensive plugin ecosystem.

Cookies, Data and GDPR Implications

Redmine sets a session cookie (_redmine_session) for authenticated users and optionally a remember me cookie for persistent login. As a self hosted application, all data remains under the organisation's complete control with no third party data processing. There is no corporate telemetry, analytics collection, or external data transmission. GDPR compliance depends entirely on how the organisation configures and operates the Redmine instance. The legal basis is typically contract performance or legitimate interest for internal project management.

Compliance Steps

No DPA or transfer safeguards needed as no third party is involved. Configure HTTPS for all connections. Implement strong authentication and RBAC. Enable database encryption at rest. Set up regular encrypted backups. Implement data retention by archiving and deleting old projects. Train team members on data minimisation in issue descriptions. If exposing Redmine publicly, implement cookie consent for the session cookie. Alternatives include YouTrack, Taiga, OpenProject, and Plane (open source).

Compliance

Redmine and the GDPR

Legal basis
Contract performance (Art. 6(1)(b)) or legitimate interest (Art. 6(1)(f)) for project management operations
Risk level
low
Applicable regulations
GDPR, ePrivacy Directive (compliance depends entirely on self hosted deployment configuration)

Impact assessment (DPIA)

DPIA recommended when Redmine stores sensitive project data at scale. As a self hosted tool, all data remains under organisational control. Assess: issue content sensitivity, user account data, file attachments, time tracking data, wiki content, and the hosting infrastructure security configuration.

Sample text for your banner

This site uses Redmine for project management. All data is stored on our own servers under our direct control. Please refer to our privacy policy for information about how your data is processed.
Cookies and trackers

What Redmine sets and contacts

Tracking method
server side Ruby on Rails application, session cookies, authentication tokens, issue and time tracking data (self hosted only)
Server location
Self hosted: customer controlled (no cloud service offered by Redmine)
Cookieless mode available
Yes

Cookies set (2)

NameTypeDurationPurpose
_redmine_sessionauthenticationSessionRails session cookie for authenticated access.
autologinauthentication1 yearPersistent login cookie for the remember me feature.

Third-party domains contacted (1)

  • www.redmine.org
Questions

Frequently asked questions about Redmine

Can't find your question? Write to us, we answer fast.

What cookies does Redmine set?

_redmine_session (session cookie) and optionally a remember_me persistent login cookie. No third party cookies or analytics.

Is consent required?

Not for internal use. If publicly accessible, session cookies may require ePrivacy notice.

Legal basis?

Contract performance or legitimate interest. No third party processing involved.

Data transfers?

None. Fully self hosted. Data stays wherever you deploy it.

DPIA required?

Only if storing sensitive personal data at scale.

Compliance steps?

HTTPS, strong authentication, RBAC, database encryption, backups, data retention, minimisation training.

Alternatives?

YouTrack, Taiga, OpenProject, Plane, Gitea (with issue tracking).

Cookie policy?

Document _redmine_session and remember_me cookies if publicly accessible. No third party data processing to disclose.

Trumba

Trumba is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Trumba integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Trumba helps organizations maintain robust websites that meet user expectations and technical requirements.

Marketing

Buz Club

Buz Club is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Buz Club provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Buz Club helps deliver the right message to the right audience at the right time.

Marketing

Gerrit

Gerrit is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Gerrit offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Gerrit empowers organizations to optimize strategy and maximize return on investment.

Analytics

Getro

Getro is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Getro supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Getro ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Jobvite

Jobvite is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Jobvite supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Jobvite ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

iClosed

iClosed is a user preference and personalization service that helps websites deliver customized experiences based on individual visitor settings and choices. It manages preferences for content display, communication channels, and interaction styles. iClosed integrates with website platforms to remember and apply user choices consistently across sessions. With privacy-compliant preference storage, iClosed enhances satisfaction by ensuring tailored browsing experiences for every visitor.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.