NewRelic and user privacy policy

Question

If running NewRelic (with and without Realtime User Monitoring) what do I need to state in a privacy policy on a website for users? ie what information is collected, what cookies (if any) are set. Security of their data, aggregate vs individual.

Answer 1

New Relic has doc covering these issues in some detail. You can read specifically about Privacy with real-user monitoring, What types of cookies New Relic sets, and some broader information about security and privacy.

The gist, I think, is given in the Real User Monitoring article:

New Relic's Real User Monitoring (RUM) feature details the time it takes for your users' browsers to load your webpages, where they come from, and what browsers they use. To protect your web application's security and your users' privacy, New Relic only collects performance data with RUM. New Relic does not collect any data used or stored by the monitored app.

The data collected from your application server might also capture user data in the form of transaction traces. You can use obfuscation to block user data from appearing in your traces.

Note that both RUM and transaction traces are optional features.

For further details about privacy, I'd recommend contacting New Relic directly.