Source
Privacy policy — Strapi
Checked for Strapi on 13 Oct 2026
- Page
- https://strapi.io/privacy
- Checked
- 13 Oct 2026, 09:05 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:9e2cd7092ee61bf35fe36f3dca5997107e90cf1600c36e9894306c0fbbd7794e
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Controller processor roles Report an error
“If you are a registered customer of Strapi, we act as the ‘data controller’ of personal data about you and your use of Strapi, but as the ‘data processor’ of personal data in the information you put into Strapi”
-
Sensitive data collection Report an error
“We don’t collect any "sensitive data" about you (like racial or ethnic origin, political opinions, religious/philosophical beliefs, trade union membership, genetic data, biometric data, health data, data about your sexual life or orientation, and offenses or alleged offenses) except when we have your specific consent, or when we have to comply with the law.”
-
Minimum age Report an error
“Strapi is a business-to-business service directed to and intended for use only by those who are 16 years of age or over. We do not target Strapi at children, and we do not knowingly collect any personal data from any person under 16 years of age.”
-
Right to portability format Report an error
“You have the right to port your data to another service We will give you a copy of your data in CSV or JSON so that you can provide it to another service.”
-
Dsr contact Report an error
“If you are located in the EEA or the UK and you are a Customer, Site Visitor or Event Attendee, and wish to exercise any of the rights set out above, you may contact us at privacy@strapi.io using the term "DSR" as your email subject line.”
-
GDPR article27 representative Report an error
“Pursuant to Article 27 of the General Data Protection Regulation (GDPR), Strapi has appointed Data Protection Office (DPO) as its GDPR representative in the EU.”
-
Rep address Report an error
“Writing to DPO at Strapi Solutions, 128 rue de la Boétie, 75008 Paris, France”
-
Legal entity Report an error
“Strapi is a United States Delaware corporation with primary storage of your information in the United States and the EEA.”
-
Retention customers Report an error
“If you’ve been a Strapi customer, we’ll delete your personal data from our systems six years after you stop being a Strapi customer.”
-
Retention prospects Report an error
“If we contacted you about buying Strapi or you requested a demo from us, we’ll delete your personal data from our systems two years after we last contacted you.”
-
Retention discord Report an error
“If you’re a member of the Strapi Discord community, we’ll delete your personal data from our systems two years after you leave the Discord community.”
-
Breach notification Report an error
“We also have procedures in place to deal with any suspected data security breach. If required, we will notify you and any applicable regulator of a suspected data security breach.”
-
Cookies used Report an error
“We use cookies. Unless you adjust your browser settings to refuse cookies, we (and these third parties) will issue cookies when you interact with Strapi.”
-
Consent withdrawal Report an error
“If you have previously given consent to our processing your data you can freely withdraw such consent at any time. You can do this by emailing us at privacy@strapi.io.”
-
Marketing optout Report an error
“You can ask us not to use your data for marketing We will inform you (before collecting your data) if we intend to use your data for marketing and if third parties are involved. You can opt out from marketing by emailing us at privacy@strapi.io.”
-
Policy last update Report an error
“Last update: March 01, 2023”
-
Open source license Report an error
“Open source (MIT) SOC 2 certified GDPR Compliant”
3 facts read from this page are not shown because they could not be confirmed on the page as captured.
Scores citing this record
- The Head of Content European sovereignty
- The Data Protection Officer European sovereignty
- The Data Protection Officer European sovereignty
- The Localisation Lead European sovereignty
- The Localisation Lead European sovereignty
- The Skeptic European sovereignty
- The SME Marketer European sovereignty
- The SME Marketer European sovereignty
- The Web Engineer European sovereignty
- The Web Engineer European sovereignty