Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Free hosted search for open source documentation sites, powered by an Algolia crawler and an autocomplete JavaScript widget that records queries and click analytics.
Algolia DocSearch is a free program offered by Algolia SAS, a French search infrastructure company, that helps open source projects add a fast, typo tolerant search box to their documentation. A periodic crawler indexes the public docs, and a small JavaScript widget (docsearch.js or the React component) renders an autocomplete dropdown that calls the Algolia Search API on every keystroke.
Each search query is transmitted to Algolia with the user IP, user agent, referer, and timing information. When Algolia Insights or click analytics are enabled, the widget also stores an anonymous user token in localStorage (key aa-anonymous-user-id) and sends click and conversion events. Algolia uses this data to compute analytics and to feed result ranking through its Dynamic Re Ranking and Personalization features.
The mere act of typing a query and receiving results can rely on legitimate interests, but storing the anonymous identifier and sending behavioural events fall under Art. 5(3) of the ePrivacy Directive and require prior, freely given consent. IP addresses are personal data under GDPR, so a clear processing record and a documented retention period are required.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
Although Algolia is French, its distributed search network spans multiple continents. Queries may be routed to the closest cluster, and corporate functions are partly handled by Algolia Inc. in the United States. Transfers rely on Standard Contractual Clauses and the EU US Data Privacy Framework. EU only routing can be requested on paid plans.
Disable click analytics by default, gate the widget behind a consent prompt for analytics cookies, document Algolia in the privacy notice as a processor, sign the Algolia Data Processing Addendum, and configure your DocSearch crawler to avoid indexing pages that contain personal data such as user dashboards or paid customer portals.
Websites using Algolia DocSearch must obtain user consent under GDPR regulations.
DPIA considerations
A full DPIA is generally not mandatory for DocSearch when used to power a public documentation search, because no special category data is processed and volumes are limited. However, controllers should document a record of processing under Art. 30 GDPR, evaluate query log retention, and assess the impact of enabling click and conversion analytics, which can build behavioural profiles of identified users on authenticated documentation portals.
Sample consent text
We use Algolia DocSearch to power the search box on this documentation site. With your consent, each query is sent to Algolia servers along with your IP address and an anonymous identifier so that we can improve result relevance and measure which articles are most useful.
Third-party domains contacted
*.algolia.net*.algolianet.cominsights.algolia.iocrawler.algolia.comcdn.jsdelivr.netCookies placed
| Name | Type | Duration | Purpose |
|---|---|---|---|
| aa-anonymous-user-id | localStorage | Persistent until cleared | Anonymous identifier stored by Algolia Insights to attribute click and conversion events to a session. |
| _ALGOLIA | localStorage | Persistent | Caches Algolia client configuration and recent query suggestions for the autocomplete component. |
| docsearch-recent-searches | localStorage | Persistent | Stores the most recent queries typed by the user so they appear in the suggestions panel on next visit. |
| docsearch-favorite-searches | localStorage | Persistent | Stores queries the user has marked as favourite directly from the DocSearch modal. |
Algolia DocSearch uses cookies for user preferences — inform visitors with a consent banner.
DocSearch does not rely on HTTP cookies. It uses localStorage to persist an anonymous identifier (aa-anonymous-user-id) when Algolia Insights or click analytics are enabled, which is functionally equivalent to a cookie under the ePrivacy Directive.
Yes for the analytics features. The pure search call can run on legitimate interests, but storing the anonymous identifier and sending click and conversion events require prior consent under Art. 5(3) ePrivacy.
Legitimate interests (Art. 6(1)(f) GDPR) covers the search call itself when needed to provide results requested by the user. Any analytics layer, including the aa-anonymous-user-id, must rely on consent (Art. 6(1)(a) GDPR).
Possibly. Algolia is French but its global search network routes queries to the nearest cluster, and Algolia Inc. in the US handles support and billing functions. Standard Contractual Clauses and the EU US Data Privacy Framework apply.
A full DPIA is normally not required for public documentation search. Maintain an Art. 30 record of processing, document log retention, and reassess if click analytics are enabled on authenticated portals.
Load docsearch.js only after consent for analytics cookies, disable Insights by default, sign the Algolia DPA, list Algolia as a processor in the privacy notice, and exclude private content from the crawler.
Self hosted options include Typesense, Meilisearch, and Elasticsearch with custom UI. Lunr.js or Pagefind offer fully client side search without sending queries to a third party.
Add an entry naming Algolia DocSearch, mention the aa-anonymous-user-id localStorage key, describe purposes (search, analytics, dynamic ranking), retention, and link to Algolia's privacy policy and DPA.