Calm allows third-party advertising and analytics companies to place tracking technologies on your devices to collect information about your behavior across the web and use it to serve targeted ads.
This analysis describes what Calm's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Third-party tracking extends beyond Calm's own services and may result in your browsing behavior across other websites being collected and used to target you with ads.
Third-party ad and analytics partners may track your online activity across websites and apps using cookies and device identifiers, and this data is used to serve you targeted advertising on other platforms.
How other platforms handle this
American gets this information by using technologies, including cookies, web beacons, and mobile device geolocation to provide and improve our Interactive Services and advertising, including across browsers and devices (also known as cross-device linking). This technical information may be combined ...
We and our service providers may use cookies, web beacons, pixel tags, and other tracking technologies to collect information about your browsing behavior, device type, IP address, and interactions with our website and advertisements.
We use cookies and similar tracking technologies to track the activity on our websites and services and store certain information. Tracking technologies used include beacons, tags, and scripts to collect and track information and to improve and analyze our services. You can instruct your browser to ...
Monitoring
Calm has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We allow others to provide analytics services and serve advertisements on our behalf across the web and other online services. These entities use cookies, web beacons, device identifiers, and other technologies to collect information about your use of the Services and other websites and online services, including your IP address, device identifiers, web browser, mobile network information, pages viewed, time spent on pages or in apps, links clicked, and conversion information.— Excerpt from Calm's Calm Privacy Policy
(1) REGULATORY LANDSCAPE: Cookie-based tracking and behavioral advertising engage the EU ePrivacy Directive (Cookie Directive), GDPR consent requirements, the UK Privacy and Electronic Communications Regulations, and CPRA's 'sharing' opt-out provisions. The FTC also has authority over unfair or deceptive tracking practices. Under GDPR and ePrivacy, non-essential cookies generally require prior informed consent; the policy's provision of a Cookie Preferences Manager and opt-out page is consistent with this requirement but the adequacy of the implementation depends on the specific consent mechanism deployed. (2) GOVERNANCE EXPOSURE: Medium. The scope of third-party tracking described is standard for consumer technology platforms but is substantive; the combination of cross-site tracking with Calm's wellness data context may attract heightened regulatory attention. The policy's reference to Global Privacy Control as a recognized opt-out signal for California users is a positive compliance indicator. (3) JURISDICTION FLAGS: EU/EEA and UK users require prior consent for non-essential cookies under ePrivacy rules. California users under CPRA are entitled to opt out of 'sharing' for cross-context behavioral advertising. The opt-out mechanism at calm.com/optout and the Cookie Preferences Manager should be evaluated to confirm they function correctly for each jurisdiction. (4) CONTRACT AND VENDOR IMPLICATIONS: Each third-party analytics and advertising partner receiving tracking data should be assessed under appropriate data processing or controller agreements. The volume and diversity of third-party partners implied by the policy's disclosure warrants a vendor inventory and periodic assessment. (5) COMPLIANCE CONSIDERATIONS: A cookie audit should be conducted to confirm that all tracking technologies deployed on Calm's web and app properties are disclosed in the Cookie Preferences Manager and that consent is obtained prior to non-essential cookie placement for EU/UK users. The California-specific opt-out page and GPC signal response should be tested for accuracy and completeness.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Third-party tracking extends beyond Calm's own services and may result in your browsing behavior across other websites being collected and used to target you with ads.
Third-party ad and analytics partners may track your online activity across websites and apps using cookies and device identifiers, and this data is used to serve you targeted advertising on other platforms.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Calm.