Source
Privacy policy — Sanity
Checked for Sanity on 15 Oct 2026
- Page
- https://www.sanity.io/legal/privacy
- Checked
- 15 Oct 2026, 09:29 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:2b2fef0a88bf19585ab858166a4862f5edef93776e94c483ec6268f4aea0765d
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Entities Report an error
“This is the Privacy Policy of Sanity AS and Sanity US Inc. ("Sanity").”
-
GDPR framework Report an error
“Sanity collects and uses your Personal Data strictly within the legal limits of the data protection law of the Kingdom of Norway, the EU General Data Protection Regulation no. 2016/679 and UK GDPR (collectively, the "GDPR") as incorporated in Norwegian law, in addition to applicable data protection laws in the United States.”
-
Policy change notice Report an error
“We may modify this Privacy Policy at any time. All changes will be effective immediately upon posting to our Site.”
-
Subscriber data processor role Report an error
“In this context, Sanity is only a processor of data on behalf of the user and not the data controller.”
-
API content integration Report an error
“Sanity allows customers to integrate their uploaded content into their internal systems and/or third-party systems delivered by other parties through an Application Programming Interface (API).”
-
Ip logging Report an error
“Sanity logs the originating IP address of an end user to avoid fraudulent use (e.g., denial of service attack, abuse detection).”
-
Access log retention Report an error
“The following data is logged and stored separately from any other data you may transmit to us for a limited time: IP address, date and time of access, browser type and version, operating system, URL of the website visited prior to ours, amount of data transmitted, performance numbers such as latencies and caching, and any data regarding how you use and interact with the Sanity Services or Site and their features.”
-
Analytics anonymous Report an error
“The collected data does not include any personal information, and it is not possible for us to trace this back to any individual.”
-
Auth providers Report an error
“You may register using third-party identity providers, such as Google and Github.”
-
Payment processor storage Report an error
“Credit card information is never available to Sanity but is only transmitted to and stored with our third-party payment processor.”
-
History retention Report an error
“We retain a complete history of all changes to a dataset, including deleted documents, with a maximum retention period given by the project's plan.”
-
Custom history retention Report an error
“Custom retention periods can be configured for the entire dataset or by document type for customers with our custom history retention feature.”
-
Purge mutation Report an error
“Customers can also permanently delete a document and all history via a purge mutation through our API.”
-
Deletion timeline Report an error
“We delete or anonymize logs within 90 days of collection. If you delete your user account, your Personal Data will be removed from our systems without unreasonable delay, and at the latest within 90 days, unless applicable legislation or legal process prevents us from doing so.”
-
Cross border safeguards Report an error
“Sanity will only transfer Personal Data to third parties located outside of these regions when it has ensured appropriate safeguards for such Personal Data through use of the standard contractual clauses or other lawful and approved methods.”
-
Gpc honored Report an error
“You may also exercise your opt out rights by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC).”
-
Marketing pixels Report an error
“We use Meta, LinkedIn, and X (formerly known as Twitter) pixels to track user activity on our Site and improve downstream offerings, including interest-based advertising for our services”
-
Analytics providers Report an error
“These include, but are not limited to, Google Analytics.”
-
Automated decision making Report an error
“We do not profile you or other individuals in a manner that would result in legal or similarly significant effects, or engage in automated decision-making, so we do not offer an opt out of such activity.”
-
Data retention legal hold Report an error
“To the extent that Sanity is legally obliged to archive data, such data will be blocked and will not be available for productive use.”
9 facts read from this page are not shown because they could not be confirmed on the page as captured.
Scores citing this record
- The Head of Content European sovereignty
- The Data Protection Officer Creation, review & approval
- The Data Protection Officer European sovereignty
- The Localisation Lead European sovereignty
- The Skeptic Creation, review & approval
- The Skeptic European sovereignty
- The SME Marketer Creation, review & approval
- The Web Engineer Creation, review & approval