webtracking.org
D 48/100

Mixpanel

SaaS product analytics with identity-resolved event tracking. EU residency available; consent required and GPC not honored by default.

verified 2026-06-08 · grade set per the published methodology

How the grade breaks down

Data minimization 2/5

How little it collects, and whether collection is purpose-bound.

Consent honoring 3/5

Whether it respects GPC, consent state, and tracking-prevention signals.

Identifier strategy 2/5

Cookieless vs. persistent IDs, cross-site linkage, fingerprinting risk.

Residency & sharing 2/5

Where data lives and whether it is shared with third parties.

Transparency 3/5

How verifiable and documented its real behavior is.

At a glance

Category product-analytics
Cookieless optional
Consent for lawful use required
Data residency us
Shares w/ third parties optional
Sends PII by default optional
Honors GPC no
Open source no

Mixpanel transmits event and profile data to its cloud and resolves it to persistent user identities. It provides an EU data-residency option and data-deletion/opt-out APIs, but the underlying model is identity-linked behavioral analytics that requires consent in most jurisdictions, and GPC is not honored by default. A capable product-analytics tool whose privacy posture depends on disciplined implementation.

Sources & basis for grade

Grades reflect documented behavior, vendor documentation, and ad.rip scans as of the date above. Each assessment is reproducible and vendors may request correction.

  • Mixpanel privacy / EU-residency documentation
  • Mixpanel identity-management docs