6 Total
2 High severity
3 Medium severity
1 Low severity
Summary

This document is the source code of Arlo's website homepage, which reveals that Arlo uses a large number of tracking technologies including Facebook, Google, Bing, and a session-recording tool called VWO that can record your mouse movements, clicks, and scrolling behavior as you browse. The most important thing to know is that VWO's session recording tool is configured to capture detailed behavioral data on visitors across Arlo's site, including checkout pages, tied to a persistent identifier stored on your device. If you want to limit this tracking, you can use the OneTrust cookie consent tool visible on Arlo's site to manage your cookie preferences, or use a browser-level privacy setting or extension to block third-party tracking scripts.

Technical / Legal Breakdown

The submitted document is the HTML source of Arlo's public-facing homepage rather than a standalone privacy policy instrument; it does not establish a formal legal basis for data processing in conventional policy language. What the document does reveal operationally is the deployment of an extensive third-party tracking stack including Google Tag Manager (GTM-N664BBN), Google Analytics (G-Y55ZPK6P6Y, G-9JDZRFG0NF), Google Ads (AW-940182079), Facebook Pixel (ID 440148160614636), Microsoft Bing Ads, and VWO (Visual Website Optimizer, account 350170) for behavioral analytics, A/B testing, session recording, and heatmapping across all site visitors. The VWO configuration explicitly enables session recording ('Visitor Sessions Recorded') and heatmap capture on pages including the homepage, product detail pages, and checkout flows, with behavioral data tied to persistent visitor UUIDs stored in cookies scoped to the arlo.com domain. The OneTrust consent management platform is deployed, which suggests an intent to manage cookie consent in compliance with applicable frameworks such as GDPR and CCPA, but the document does not disclose the granular consent categories or the legal basis asserted for each processing activity. Regulatory frameworks engaged include GDPR and the ePrivacy Directive (given OneTrust deployment and cookie consent infrastructure), CCPA (given California-segmented VWO targeting visible in segment_code referencing US geography), and FTC Act Section 5 (given the scope of behavioral tracking and advertising pixel deployment); the absence of the actual privacy policy text creates material uncertainty about how Arlo documents these practices for users.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial
High — 2 provisions
Medium — 3 provisions
Low — 1 provision

Monitoring

Arlo has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle Facebook Pixel Behavioral Advertising Integration and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
ePrivacy Directive
European Union
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 5, 2026 06:45 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000744
Version ID CA-V-001367
SHA-256 12d840f6d06447e23f8148f80e6aa70571f1e66544dde6399006c100f4aacfa2
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans