webtracking.org
D 48/100

Amplitude

Powerful SaaS product analytics; data is sent to Amplitude and stitched to user identities. Privacy requires careful config and consent.

verified 2026-06-08 · grade set per the published methodology

How the grade breaks down

Data minimization 2/5

How little it collects, and whether collection is purpose-bound.

Consent honoring 3/5

Whether it respects GPC, consent state, and tracking-prevention signals.

Identifier strategy 2/5

Cookieless vs. persistent IDs, cross-site linkage, fingerprinting risk.

Residency & sharing 2/5

Where data lives and whether it is shared with third parties.

Transparency 3/5

How verifiable and documented its real behavior is.

At a glance

Category product-analytics
Cookieless optional
Consent for lawful use required
Data residency us
Shares w/ third parties optional
Sends PII by default optional
Honors GPC no
Open source no

Amplitude is a SaaS product-analytics platform: event and user data are transmitted to Amplitude and tied to persistent user identities for behavioral analysis. It offers an EU data-residency option and consent/opt-out controls, but the default model is identity-resolved behavioral tracking that requires consent in most jurisdictions, and it does not honor GPC out of the box. Useful and legitimate for product teams, but not a privacy-minimizing choice.

Sources & basis for grade

Grades reflect documented behavior, vendor documentation, and ad.rip scans as of the date above. Each assessment is reproducible and vendors may request correction.

  • Amplitude privacy / data-residency documentation
  • Amplitude identity-resolution docs