Telemetry
SonarQube sends anonymized telemetry data to SonarSource daily. This data helps us understand how SonarQube is used, which helps us improve our products.
No personally identifiable information is sent
The telemetry doesn't collect personal data, such as usernames or email addresses. It doesn't send source code or data such as project name, repository, or author. No IP addresses are sent. The data is sent securely, held under restricted access, and not published outside of SonarSource.
Protecting your privacy is important to us. If you have any concerns about telemetry collection, please email us at security@sonarsource.com
.
Turning it off
You can disable telemetry at any time by setting the sonar.telemetry.enable
property to false
in $SONARQUBE_HOME/conf/sonar.properties
. By default, it is set to true
.
What information is sent?
Once a day (every 24 hours), SonarQube sends a JSON payload to https://telemetry.sonarsource.com/sonarqube
.
The data that is sent consists of:
- Anonymized information about the SonarQube instance (version, license type, edition, database type, etc.)
- Anonymized information about each project on the instance, consisting of:
- A technical identifier that does not reveal any project-specific details.
- Information about the project like language, last analysis time, number of lines of code, etc.
- Anonymized information about each user on the instance, consisting of:
- A technical identifier that does not reveal any personal information about the user.
- Information about the user's usage of the instance like last activity time and current status.
Here is an example of a telemetry payload:
Was this page helpful?