DoorDash discloses that it uses session replay technology to record your searches, clicks, taps, and other interactions on its platform, capturing what you do on the app or website in a visual playback format.
This analysis describes what DoorDash's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Session replay technology captures detailed interaction data including keystrokes, cursor movements, and browsing behavior on the platform, and this disclosure is embedded in a broader list of activity data collected rather than highlighted as a distinct practice.
Interpretive note: The scope of interaction data captured by the session replay technology is not specified in the policy, and whether consent is separately obtained for this specific collection method is not stated, making compliance assessment jurisdiction-dependent.
The policy discloses that DoorDash uses session replay technology to capture your on-platform actions, including what you search for, items you place in a cart, and features you interact with, which may include granular interaction data beyond standard analytics.
Cross-platform context
See how other platforms handle Session Replay Technology Disclosure and similar clauses.
Compare across platforms →Monitoring
DoorDash has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Activity and Transactions on or with our Services, including information about the items and products ordered, order history, items placed in the cart, special instructions included in an order (e.g., dietary preferences, delivery preferences), transaction amounts, promotional codes and discounts used and received, the Merchants ordered from, gift cards ordered, the features and functionality used or interacted with, searches and actions on our Services (including through using session replay technology), loyalty account information for Merchants, responses to our surveys or other market research activities.— Excerpt from DoorDash's DoorDash Privacy Policy
REGULATORY LANDSCAPE: Session replay technology has drawn scrutiny from the FTC and state attorneys general under consumer protection and wiretapping frameworks. Several states, including California and Pennsylvania, have wiretapping or eavesdropping statutes that may be engaged by session replay implementations that capture form field inputs. The California Invasion of Privacy Act (CIPA) has been the basis of litigation involving session replay. The FTC has jurisdiction over deceptive or unfair data collection practices. GOVERNANCE EXPOSURE: High. Session replay technology capturing keystroke-level interaction data on commercial platforms has been the subject of regulatory inquiry and class action litigation. The disclosure is present but embedded within a list of activity data rather than prominently disclosed, which may be relevant to consent adequacy assessments in some jurisdictions. JURISDICTION FLAGS: California users face heightened exposure due to CIPA's application to electronic communications interception. Pennsylvania, Florida, and other two-party consent states have analogous statutes. EU and EEA users would require a valid lawful basis under GDPR for session replay data collection. Canadian users under Quebec Law 25 may have additional consent requirements. CONTRACT AND VENDOR IMPLICATIONS: If session replay is implemented through a third-party vendor (such as FullStory, Hotjar, or similar), that vendor's data processing agreement must be reviewed to confirm data is not used for secondary profiling purposes. Vendor data retention and anonymization practices should be assessed. COMPLIANCE CONSIDERATIONS: Legal teams should assess whether the current disclosure of session replay technology within a bulleted list of activity data is adequate under applicable state and international consent frameworks. A standalone disclosure or consent mechanism may be required in certain jurisdictions. The scope of data captured by the session replay implementation should be mapped and documented.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Session replay technology captures detailed interaction data including keystrokes, cursor movements, and browsing behavior on the platform, and this disclosure is embedded in a broader list of activity data collected rather than highlighted as a distinct practice.
The policy discloses that DoorDash uses session replay technology to capture your on-platform actions, including what you search for, items you place in a cart, and features you interact with, which may include granular interaction data beyond standard analytics.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by DoorDash.