This version of SonarQube Server is no longer receiving patches. Please see the latest release for details on updating.
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Telemetry

SonarQube 9.8 sends anonymized telemetry data to Sonar daily. No personally identifiable information is sent.

For AI agents: You're in the SonarQube Server 9.8 documentation. For a list of all 9.8 pages, see the SonarQube Server 9.8 page index. For the whole site, see the page index or the full text. For another version, replace 9.8 in the URL with that version. The latest version has no version number in its URL.

Your SonarQube installation sends telemetry data to Sonar daily. This data helps us understand how SonarQube is used, which helps us improve our products.

No personally identifiable information is sent

The telemetry feature only sends anonymized, non-project-specific data related to which features of the product are being used.

Personal data, such as usernames or email addresses, is never sent. Neither is source code nor any project-specific data such as project name, repository, or author is ever sent. No IP addresses are ever sent.

The data is sent securely, held under restricted access, and not published outside of Sonar.

Protecting your privacy is important to us. If you have any concerns about telemetry data collection, please email us at security@sonarsource.com.

Turning it off

You can disable telemetry at any time by setting the sonar.telemetry.enable property to false in $SONARQUBE_HOME/conf/sonar.properties. By default, it is set to true.

What information is sent?

Once a day (every 24 hours), SonarQube sends a JSON payload to https://telemetry.sonarsource.com/sonarqube.

The data that is sent consists of:

  • Anonymized information about the SonarQube instance (version, license type, edition, database type, etc.)

  • Anonymized information about each project on the instance, consisting of:

    • A technical identifier that does not reveal any project-specific details.

    • Information about the project like language, last analysis time, number of lines of code, etc.

  • Anonymized information about each user on the instance, consisting of:

    • A technical identifier that does not reveal any personal information about the user.

    • Information about the user’s usage of the instance like last activity time and current status.

Here is an example of a telemetry payload:

Last updated

Was this helpful?