JFrog Cookie Policy

Last updated: December 25, 2025

JFrog Ltd., our affiliates worldwide (collectively, “JFrog“, “us”, “our” or “we”), and our authorized third parties uses cookies and other tracking technologies, including session replay tools, web beacons, and pixel tags (collectively “Data Collection Technologies” or “Cookies”), to collect information about you (“you” or “your”), your device, and how you interact with our websites including https://www.jfrog.com/ (together with its sub-domains, “Sites”) and our platform (the “Services”). 

IF YOU DO NOT AGREE WITH ANY PART OF THIS COOKIE NOTICE, PLEASE DO NOT USE OUR SITES AND DO NOT PROVIDE US WITH YOUR PERSONAL DATA.

What are Data Collection Technologies?

Data Collection Technologies, commonly called “Cookies,” are small text files sent to or accessed from your web browser or computer’s hard drive. They contain information about the domain, lifespan, and a unique identifier, and may include information about your device, user settings, browsing history, and activity on our Sites. 

Types include:

• Cookies: First-party (set by us) or third-party (set by service providers or third parties), either for your visit duration (Session) or longer periods (Persistent).
• Pixels, web beacons, snippets, and tags: Code or transparent graphics providing analytical information and helping customize marketing activities.
• Session replay tools: Record and playback your interactions including clicks, mouse movements, scrolls, keystrokes, and webform data in real-time. By interacting with our Sites (or consenting via our Cookie Banner), you expressly authorize this monitoring and recording for quality control, verification, and analytics purposes.
• Chat Technologies: Communications with our chatbot or live chat features may be recorded.

Information Collected: IP address, MAC address, cookie ID, device ID, AdID, operating system, browser used, browser history, search history, and information about how you interact with our Sites and Services. 

With the exception of  Essential cookies, you are not obligated to accept all Cookies in order to visit our Sites; however, enabling Cookies can allow for a more personalized browsing experience and is required for some features to work. See “Your Choices” below for details on how you can control non-Essential  Cookies.

Disclosures of Your Information: These third parties act as our service providers and third parties. You authorize these third parties to receive and record your communications and interactions with the Sites on our behalf.

Non-Personally Identifiable Information Collection: We may combine non-personally identifiable information collected through Data Collection Technologies with information that is personally identifiable that we have about you to improve your user experience. For example, to tell us whether you contacted us in the past or already have an account with us. We may also supplement the information we collect from you with information received from third parties in order to enhance our services, or to offer you information that we believe may be of interest to you. Where we use Data Collection Technologies to collect information that is personally identifiable or that can become personally identifiable if we combine it with other information, our Privacy Notice will apply in addition to this Cookie Notice.

How Does JFrog Use Google User-Provided Data?

In addition to the standard data collected via cookies as described above, we utilize features within Google Analytics that enable User-ID and the collection of user-provided data.

Google user-provided data refers to information that you voluntarily share with Google services (such as your Google account profile information, preferences, and settings) that Google may make available to third-party services like JFrog when you choose to integrate or authenticate using your Google account.

JFrog uses Google user-provided data to:

• User-ID: We use the Google Analytics User-ID feature to assign a unique, persistent ID to you across different sessions and devices. This allows us to get a more accurate view of how you interact with our services over time, providing aggregated, non-personally identifiable behavioral data.
• User-Provided Data: We may also use Google Analytics to collect certain data that you actively provide to us (e.g., through sign-up forms). This data, which may include identifiers or characteristics, is primarily used to enhance our analytical capabilities regarding user segmentation and engagement. We only collect user-provided data with your explicit consent where required by law.

Your control: You can manage what information Google shares with JFrog through your Google account settings. You may also disconnect your Google account from JFrog services at any time through your JFrog account preferences.

How Do We Use Data Collection Technologies?

We use these technologies for the following purposes. For users in the EEA/UK, the specific Legal Basis for processing is listed below:

Your Choices

Cookie Banner: You can manage your preferences at any time by clicking the “Cookie Settings” link in the footer of our website. This banner enables you to withdraw consent for specific categories of cookies.  However, please note that if you choose to refuse cookies you may not be able to use the full functionality of the Website.

Browsers and web trackers: Regular cookies generally may be disabled or removed using tools available as part of most commercial browsers, and in some instances blocked in the future by selecting certain settings. The choices available, and the mechanism used, will vary from browser to browser. Some web browsers (including some mobile web browsers) provide settings that allow you to control or reject cookies or alert you when a cookie is placed on your computer or device. You may also be able to reject mobile device identifiers by adjusting the appropriate setting on your mobile device. Such browser settings are typically found in the “options,” “tools” or “preferences” menu of your browser. You may also consult your browser’s help menu.

Please note that tools from commercial browsers may not be effective with regard to Flash cookies (also known as locally shared objects), HTML5 cookies or other tracking technologies. For information on disabling Flash cookies, visit https://helpx.adobe.com/flash-player/kb/disable-local-shared-objects-flash.html. Please be aware that if you disable or remove these technologies, some parts of our Sites may not work and when you revisit our Sites your ability to limit browser-based tracking technologies is subject to your browser settings and limitations. Although you are not required to accept cookies or mobile device identifiers, if you block or reject them, you may not have access to all features available through our Sites. Further information about your option to opt-out of Google Analytics is available at https://tools.google.com/dlpage/gaoptout. If you change computers, devices, or browsers; use multiple computers, devices, or browsers; or delete your cookies, you may need to repeat this process for each computer, device, or browser.

Do Not Track Signals: Some web browsers incorporate a “Do Not Track” or “Global Privacy Control” (“GPC”) or similar feature, which is a browser-based option that you can use to signal your privacy preference. Certain browsers and extensions will allow you to enable GPC. If you enable GPC, our cookie tool will automatically turn off all tracking cookies on our Sites in response to your signal. You can learn more at: https://globalprivacycontrol.org/

Disable Google Analytics: You may exercise choices regarding the use of cookies from Google Analytics by visiting https://tools.google.com/dlpage/gaoptout.

Regional Specific Provisions

1. United States (California & Other States)
   1. California Invasion of Privacy Act (CIPA): As described in Section 1, our Sites utilize technologies that monitor your interactions (keystrokes, clicks, and scrolls) in real-time. By visiting our Sites, you acknowledge that these actions are captured by us and our service providers (who act as our agents) to verify orders, prevent fraud, and analyze user experience.
   2. CCPA/CPRA Disclosures:
      1. Sale/Sharing of Personal Information: In the last 12 months, we have “sold” or “shared” (as defined by the CCPA) Internet or Other Electronic Network Activity Information (e.g., cookies, IP addresses) with advertising and analytics providers to deliver interest-based ads.
      2. Right to Opt-Out: You have the right to opt out of this “sale” or “sharing.” You may do so by clicking the “Your Privacy Choices” link in the footer or enabling the Global Privacy Control (GPC) signal on your browser.
      3. Sensitive Personal Information: We do not use or disclose Sensitive Personal Information for purposes other than those permitted by the CCPA (e.g., providing the services you requested).
      4. Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
2. Europe (EEA), United Kingdom (UK), and Switzerland
   1. No Automated Decision Making: We do not use cookies for automated decision-making that produces legal effects concerning you (Article 22 GDPR).
   2. International Transfers: Your personal data is transferred to Israel (which benefits from an EU Adequacy Decision) and the United States. Transfers to the US are protected by Standard Contractual Clauses (SCCs) or the Data Privacy Framework (DPF), where applicable.
   3. Your Rights: In addition to the choices above, you have the right to request access, rectification, erasure, restriction of processing, and data portability. You may lodge a complaint with your local Data Protection Authority (DPA).
3. Brazil (LGPD)
   1. Rights: You have the right to request the anonymization, blocking, or elimination of unnecessary or excessive data.
   2. Legal Basis: We process data based on your consent or our legitimate interest/protection of credit.
4. India (Digital Personal Data Protection Act, 2023)
   1. Grievance Redressal: If you are an India-based user, you may contact  privacy@jfrog.com  for any consent withdrawal or data grievances.
   2. Consent: Your consent is voluntary. You may withdraw consent at any time via the “Cookie Settings” link.
5. Mainland China (PIPL)
   1. Separate Consent: If we collect Sensitive Personal Information or transfer data cross-border, we will obtain your separate consent where required by PIPL.
   2. Data Subject Rights: You have the right to request an explanation of our processing rules.

Updates to this Cookie Notice

JFrog may change this Cookie Notice from time to time by posting an updated version on our Sites with a date indicating when it was last updated. We recommend checking back periodically for updates. When required under applicable law, we will post a notice on our Site. If you continue to use our Sites and Services after a revision takes effect, we consider that you have read and understand the Cookie Notice updates.

Contact Us

If you have any comments, complaints or questions regarding our data practices or this Notice, please contact our Privacy Office and DPO by email at privacy@jfrog.com. When you contact us, please indicate the country and/or state you reside.

JFrog, Attn: Privacy Office/DPO – Legal, 270 E. Caribbean Drive, Sunnyvale, CA 94089 or

JFrog Ltd., Attn: Privacy Office/DPO – Legal, P.O. Box 8187, 3 Hamachshev Street, Netanya, 4250465 Israel

For convenience, non-English translations of this Notice may be provided, this English language version will control.

For further information about our privacy practices, please also refer to our Privacy Notice.