Collaboration
GDPR Linear
In an indie stack, Linear is used for Product ticket tracking. Entity cited: Linear Orbit, Inc.. The sections repeat what the vendor publishes, without filling a gap. Last update of the facts: October 4, 2026. Verified on October 4, 2026.
Translation of the French sheet. The facts do not change. The date is the date the official pages were read.
DPA Linear
Yes. Public DPA, which also contains the list of authorized sub-processors.
Stated role
Linear is the controller of personal data processed in connection with the services. When it processes end-user or employee data for its customers, it is the processor.
Personal data
First name and last name, email, date of birth, address, identifiers such as passwords, card type and last four digits, billing address, phone, IP address, device identifier, device, system, and browser type, page interactions, referring page, cookies.
Sub-processors of Linear
List of authorized sub-processors published in the DPA.
Transfers outside the EU
Hosting / location
The services are hosted and operated in the United States, and the primary processing operations take place there. The DPA's sub-processor list also names the European Union for certain providers.
EU–United States Data Privacy Framework
Official search for “Linear Orbit” and “Linear.app”: no participant. A “LinearB INC.” entry exists and concerns another organization. Linear Orbit, Inc.: not registered.
Cookies
Essential, functional, and performance or analytics cookies, as well as pixels, beacons, invisible GIFs, and JavaScript. The service does not honor the Do Not Track signal.
Typical use, written by StackLégal and not by the vendor: Product ticket tracking.
History
Last update: October 4, 2026.
First publication. The facts come from the official pages cited in the sources. Anything not stated there remains "not disclosed".
Clause to paste
Place it in the sub-processor section of your privacy policy. Review it: a “not disclosed” field must be completed before publication.
Sub-processor clause
Sources
Verified on October 4, 2026.
Frequently asked questions
Is Linear a processor within the meaning of the GDPR?
Linear is the controller of personal data processed in connection with the services. When it processes end-user or employee data for its customers, it is the processor.
What DPA does Linear publish?
Yes. Public DPA, which also contains the list of authorized sub-processors. https://linear.app/dpa
Which further sub-processors does Linear publish?
List of authorized sub-processors published in the DPA. https://linear.app/dpa
Where does Linear state that it processes data, including outside the EU?
The services are hosted and operated in the United States, and the primary processing operations take place there. The DPA's sub-processor list also names the European Union for certain providers.
Is Linear registered under the EU–United States Data Privacy Framework?
Official search for “Linear Orbit” and “Linear.app”: no participant. A “LinearB INC.” entry exists and concerns another organization. Linear Orbit, Inc.: not registered.
Which personal data does Linear mention?
First name and last name, email, date of birth, address, identifiers such as passwords, card type and last four digits, billing address, phone, IP address, device identifier, device, system, and browser type, page interactions, referring page, cookies.
Often in the same stack
These sheets come up in searches for a Next.js SaaS. Next.js itself is not a processor: GDPR Next.js.
Related tools
Full pack, from 39 € incl. VAT
The clause above covers only one tool. StackLégal generates the legal notices, terms of use, terms of sale, privacy policy, Article 28 DPA, and the public list, naming only the boxes that are checked. One-time payment via Gumroad. This is not legal advice.