Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy requires users to complete two separate steps to opt out of targeted advertising: first, toggling cookies off in the Cookie Preference Center or enabling Global Privacy Control, and second, submitting a separate opt-out form or email to privacy@airtable.com.
This analysis describes what Airtable's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a two-step opt-out process for targeted advertising that requires both a technical cookie setting action and a separate affirmative request submission, which may require evaluation under state privacy laws that specify the permissible mechanics of opt-out mechanisms.
Interpretive note: Whether the two-step opt-out mechanism satisfies applicable state privacy law requirements, including CPPA guidance on GPC recognition and opt-out accessibility, is a compliance question that may depend on evolving regulatory guidance.
Under this clause, users in the approximately 19 named states must complete both a cookie preference toggle (or GPC activation) and a separate form or email submission to opt out of targeted advertising and personal information sharing; completing only one step does not constitute a complete opt-out under the stated terms.
Cross-platform context
See how other platforms handle Two-Step Targeted Advertising Opt-Out and similar clauses.
Compare across platforms →Monitoring
Airtable has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"You may ask us not to use or disclose your personal information for targeted advertising (sometimes referred to as "sharing" under California law), sales, or analytics purposes. To exercise this right, you must: Toggle cookies off in our Cookie Preference Center, which may be accessed by clicking on "Cookie Preferences" in the footer of this webpage, or enable Global Privacy Control (" GPC ") on your browser; and Submit a request using this form or email privacy@airtable.com .Excerpt from Airtable's Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages CCPA regulations governing the right to opt out of sale and sharing of personal information, including California Privacy Protection Agency (CPPA) guidance on opt-out mechanisms and Global Privacy Control recognition. Colorado, Connecticut, and other named state privacy laws also establish opt-out rights for targeted advertising. The dual-step requirement may require evaluation under CPPA rulemaking on opt-out mechanisms and whether a two-step process constitutes a sufficiently accessible opt-out under applicable law. 2) GOVERNANCE EXPOSURE: Medium. The requirement to both configure a browser/cookie setting and submit a separate form or email creates a higher friction opt-out process than a single-click or GPC-only mechanism. Whether this two-step requirement is consistent with applicable state law guidance is a compliance question that may evolve as regulatory guidance develops. 3) JURISDICTION FLAGS: California creates the highest exposure, as the CPPA has issued guidance on opt-out mechanisms and GPC recognition. Colorado, Connecticut, Texas, and other named states with opt-out rights may also require evaluation of the dual-step mechanism's compliance with state-specific requirements. 4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers using Airtable in a B2B context where their own users' data may be involved should assess whether the opt-out mechanism is adequate for their downstream compliance obligations. Advertising and analytics partners receiving data from Airtable should be assessed for compliance with applicable state law opt-out obligations. 5) COMPLIANCE CONSIDERATIONS: Legal teams should monitor CPPA enforcement activity regarding multi-step opt-out mechanisms and assess whether the current two-step process meets applicable standards. Consent management and preference center implementations should be audited to ensure GPC signals are honored consistently with the policy's stated mechanism.
This provision establishes a two-step opt-out process for targeted advertising that requires both a technical cookie setting action and a separate affirmative request submission, which may require evaluation under state privacy laws that specify the permissible mechanics of opt-out mechanisms.
Under this clause, users in the approximately 19 named states must complete both a cookie preference toggle (or GPC activation) and a separate form or email submission to opt out of targeted advertising and personal information sharing; completing only one step does not constitute a complete opt-out under the stated terms.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Airtable.