Privacy policy for Sentry apps

What Sentry does on a live site

Sentry is in the monitoring category. On sites we scan, it shows up through sentry.io, sentry-cdn.com. Its role is to report front-end and server errors.

Data that may be processed: Error messages, stack traces, and the request URL. Releases can also include a user id if you set one. The vendor describes the location as: The Sentry region you choose (United States or EU). Their public privacy or data-processing terms are at https://sentry.io/privacy/.

A privacy policy for a Sentry app should name Sentry directly and say what your own product sends to it. A phrase like "third-party tools" is not enough once this service is on the page.

Sentry's browser SDK is loaded from browser.sentry-cdn.com and sends errors to ingest.sentry.io. Say that error reports can include the page URL and, if you configured it, a user id. Do not paste secrets into the client DSN note; the DSN is public, the auth token is not.

What you still have to type

The scan cannot know your company name, the country you operate from, or the support email you want on the page. Those go in a short form after the scan. The legal clauses around them are fixed template text, marked as a draft until a lawyer reviews them.