Overview
DevCycle is a feature management platform that provides client-side feature flag evaluation and experimentation capabilities. Built for development teams, it enables gradual feature rollouts, A/B testing, and user targeting without requiring server-side changes. DevCycle's SDK evaluates feature flag rules locally in the browser after receiving configuration from its edge network, minimizing latency for flag decisions.
What This Script Does
The DevCycle JavaScript SDK (loaded from js.devcycle.com or bundled via npm) performs these operations:
- Downloads the feature flag configuration for the current environment from DevCycle's CDN or edge servers
- Evaluates targeting rules client-side using visitor attributes (user ID, email, custom properties, device type, geo-location)
- Determines which feature flag variations and experiment buckets apply to the current visitor
- Stores a unique device identifier in
localStorageor cookies to maintain consistent variation assignments across sessions - Reports exposure events to DevCycle's analytics endpoints when a visitor is served a specific feature variation
- Sends experiment metric events (clicks, conversions, custom events) for statistical analysis of A/B test results
- May use the
dvc_cookie prefix for session identification and bucketing consistency
Network requests are made to sdk-api.devcycle.com for configuration retrieval and events.devcycle.com for analytics event transmission.
Consent & Compliance
DevCycle serves a dual purpose: its feature flag functionality is operational (functional), while its experiment exposure tracking and analytics reporting constitute analytics data collection. Under GDPR and ePrivacy, the storage of device identifiers for bucketing and the transmission of exposure/conversion events to third-party servers require assessment.
The functional aspect of feature flags (enabling/disabling features) could be considered necessary for site operation. However, the analytics component — tracking which variations users see and measuring conversion outcomes — involves processing personal data for statistical analysis and requires consent.
Under CCPA, the device identifiers and behavioral events transmitted to DevCycle qualify as personal information that should be disclosed.
The consent category for DevCycle is functional and analytics.
Should You Block This Without Consent?
Conditional.
DevCycle's feature flag delivery serves a functional purpose in controlling site behavior, but its experiment analytics component tracks visitor interactions and reports them to third-party servers. If DevCycle is used solely for feature flags without A/B testing, it may operate without consent. When experimentation and exposure tracking are active, consent should be obtained for the analytics component. Consider whether feature flags can function independently of the analytics pipeline in your implementation.
Is DevCycle GDPR compliant?
DevCycle typically loads functional and analytics trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So DevCycle can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads DevCycle, not on DevCycle itself.
Consent Categories
Also Known As
Industries
Tracked Domains (1)
devcycle.comFunctionaldevcycle.com is a functional domain operated by DevCycle, used to run site features like chat, video, embeds, and preferences.
Frequently Asked Questions
Related Vendors
Manage consent for DevCycle
ConsentStack automatically detects and manages DevCycle trackers so your site stays compliant with global privacy regulations.