FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Personalization

Split

Analytics

Split, now part of Harness, is a feature flag and experimentation platform. It controls which features a user sees and can run experiments that connect feature exposure to metrics. When used in the browser, its SDK stores targeting data and records impression and event data tied to a user key, and it processes the IP address and device information. Feature flags that are strictly necessary may rely on a different basis, but experimentation that tracks behaviour requires consent.

Block Split until consentScan my site
Overview

What does Split do?

What Split is

Split, now part of Harness, is a feature management and experimentation platform. Feature flags let teams turn functionality on or off and roll it out gradually, while the experimentation side connects which variant a user saw to business metrics. It is used by engineering and product teams to release software safely and to measure impact.

What data and storage it uses

When the browser SDK is used, Split stores flag definitions and targeting data in local storage and sends impression and event data tied to a user key, which may be an account identifier or an anonymous id. It processes the IP address and device information. When evaluation runs server side, targeting can happen without storing anything on the user device, which changes the ePrivacy analysis.

GDPR and ePrivacy implications

User keys, impressions, and events are personal data under the GDPR when they relate to an identifiable person, and reading or writing data in the browser falls under the ePrivacy Directive. A flag that is strictly necessary to deliver a feature the user requested can sometimes be exempt, but experimentation that measures and profiles behaviour is not, so it needs consent and clear information.

Consent requirements

Separate the two use cases. Strictly necessary feature flags that simply control whether a function is available can rely on a basis other than consent, provided they do not track behaviour. Experimentation that records impressions and ties them to outcomes should wait for consent, and you should not send experiment data for visitors who decline.

Data transfers outside the EU

Split is part of Harness, a United States company, so personal data may be processed in the United States and transfers rely on the EU US Data Privacy Framework or on Standard Contractual Clauses. Server side evaluation and the use of anonymous keys can reduce the personal data that leaves the European Economic Area.

Practical compliance steps

Decide which flags are strictly necessary and which are experiments, gate experimentation behind consent, prefer server side evaluation and anonymous keys, and sign a data processing agreement. Document the processing, set retention limits for impressions and events, and describe Split in your privacy notice.

Compliance

Split and the GDPR

Split is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent for experimentation, legitimate interest possible for strictly necessary flags
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive

Impact assessment (DPIA)

Distinguish strictly necessary feature flagging from experimentation that profiles users. Assess the user keys used, whether evaluation happens client or server side, the impression and event data retained, and the transfers to the United States.

Sample text for your banner

We use Split to manage features and to run experiments. When experimentation is active, Split may store data in your browser and record which variant you experienced. This runs only after you accept the relevant cookies.
Cookies and trackers

What Split sets and contacts

Tracking method
Client and server SDKs, browser local storage, impression and event tracking
Server location
United States
Cookieless mode available
Yes
Data transferred outside the EU
Data is processed by Split, part of Harness Inc., in the United States. Transfers rely on the EU US Data Privacy Framework or Standard Contractual Clauses. Server side evaluation can keep targeting data off the user device.

Cookies set (3)

NameTypeDurationPurpose
SPLITIO.splitsFunctionalPersistent (local storage)Stores feature flag definitions so the browser can evaluate which feature to show.
SPLITIO.client.keyFunctionalPersistent (local storage)Stores the user key used to evaluate feature flags consistently.
SPLITIO.eventsAnalyticsPersistent (local storage)Queues impression and event data for experimentation before it is sent.

Third-party domains contacted (4)

  • split.io
  • sdk.split.io
  • events.split.io
  • streaming.split.io
Questions

Frequently asked questions about Split

Can't find your question? Write to us, we answer fast.

What does Split store in the browser?

The Split browser SDK stores flag definitions, a user key, and queued impression and event data in local storage rather than classic cookies. The targeting storage can be necessary for a feature, while the impression and event data used for experiments is not, so it belongs in the analytics category.

Do I need consent for Split?

It depends on the use. Strictly necessary feature flags that only decide whether a function is shown may not need consent, but experimentation that records impressions and profiles behaviour does require prior consent under the ePrivacy Directive and the GDPR.

What is the legal basis for Split?

Strictly necessary flagging can rely on legitimate interest or contract, while experimentation that tracks behaviour should rely on consent under Article 6(1)(a) of the GDPR. Keep the two purposes clearly separated.

Does Split transfer data to the United States?

Yes. Split is part of Harness, a United States company, so data may be processed there and transfers rely on the EU US Data Privacy Framework or Standard Contractual Clauses. Server side evaluation can keep more data in the region.

Is a DPIA needed for Split?

A DPIA is rarely needed for plain feature flags, but experimentation that profiles users at scale may warrant one. Document the user keys, whether evaluation is client or server side, retention, and transfers.

How do I use Split compliantly?

Classify each flag, gate experiments behind consent, prefer server side evaluation and anonymous keys, sign a data processing agreement, and set retention limits. Disclose the experimentation in your privacy notice.

Are there alternatives to Split?

Alternatives include LaunchDarkly, Unleash, GrowthBook, and Flagsmith, some of which can be self hosted in the EU. Self hosting and server side evaluation reduce both transfers and device storage.

How do I update my cookie policy for Split?

Describe the Split storage entries with their purpose and persistence, separate strictly necessary flagging from experimentation, name Harness as the recipient, and mention the United States transfer. Update it when your usage changes.

Same category

More services: Personalization

See the whole category

Attraqt

Attraqt is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Attraqt offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Attraqt empowers organizations to optimize strategy and maximize return on investment.

Analytics

Hello Retail

Hello Retail is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Hello Retail provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Hello Retail helps deliver the right message to the right audience at the right time.

Preferences

Visitor.js

Visitor.js is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Visitor.js enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Visitor.js empowers marketing teams to achieve measurable growth.

Preferences

Varify

Varify is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Varify supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Varify enables informed decisions that improve experience and drive results.

Analytics

Estore Compare

Estore Compare is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Estore Compare offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Estore Compare empowers organizations to optimize strategy and maximize return on investment.

Analytics

PersonaClick

PersonaClick is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. PersonaClick enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, PersonaClick empowers marketing teams to achieve measurable growth.

Preferences

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site