Duo Security · Duo Privacy · View original document ↗

Cookies and Tracking Technologies

Low severity Medium confidence Explicitdocumentlanguage Common · 70 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Duo Security Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Cisco uses cookies and tracking tools from itself and third-party partners on the Duo website to track your browsing behavior, which pages you visit, and how long you spend on them, and uses that data for analytics and advertising.

This analysis describes what Duo Security's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Third-party tracking on the Duo website means your browsing behavior may be shared with advertising and analytics partners outside of Cisco, and you may be tracked across websites if third-party cookies are in use.

Interpretive note: The policy does not enumerate specific third-party tracking partners or distinguish between essential and non-essential cookies, limiting the ability to assess the full scope of data sharing through tracking technologies.

Consumer impact (what this means for users)

Your browsing activity on duo.com, including pages visited and links clicked, may be shared with third-party analytics and advertising partners through cookies and tracking pixels placed on the site.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    Use the cookie consent management tool available on the Duo website to review and adjust your cookie and tracking preferences, opting out of non-essential cookies.

How other platforms handle this

Whatnot Medium

We use cookies and similar tracking technologies to track the activity on our Services and store certain information. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Services. You can instruct your browser to refuse all c...

Ideogram Medium

We and our third-party partners may use cookies, web beacons, and other tracking technologies to collect information about your use of our Services, including your browser type, pages viewed, links clicked, and the date and time of your visit.

Tabnine Medium

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website and services. This includes information about the pages you visit, links you click, and how you navigate our site. We use this information for analytics, persona...

See all platforms with this clause type →

Monitoring

Duo Security has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We and our third-party partners use cookies, web beacons, pixels, and similar tracking technologies on our websites and in our communications. These technologies collect information such as your browser type, operating system, pages visited, time spent on pages, links clicked, and the referring URL. We use this information for analytics, advertising, and to improve our services.

— Excerpt from Duo Security's Duo Privacy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: The EU ePrivacy Directive, implemented through national laws in EU member states, requires prior informed consent for non-essential cookies and tracking technologies for EU users. GDPR applies to any personal data collected through tracking technologies. The UK's Privacy and Electronic Communications Regulations impose similar consent requirements for UK users. The FTC has issued guidance on online tracking and third-party data sharing relevant to US users. GOVERNANCE EXPOSURE: Medium. The use of third-party tracking pixels and advertising cookies on a B2B security vendor's website is notable because visitors may include enterprise IT administrators and security professionals whose browsing behavior could be shared with advertising networks. The adequacy of cookie consent mechanisms on duo.com would need to be verified against applicable ePrivacy requirements. JURISDICTION FLAGS: EU and UK users are entitled to granular consent choices for non-essential cookies under ePrivacy rules. California residents have rights under CPRA regarding the sharing of personal information through cross-context behavioral advertising. Organizations in sectors with heightened confidentiality expectations, such as healthcare or government, should assess whether employee visits to vendor websites via corporate devices implicate internal privacy policies. CONTRACT AND VENDOR IMPLICATIONS: Enterprise procurement teams evaluating Duo should assess whether the third-party tracking on the Cisco website involves sharing of any user data associated with enterprise accounts or visitor sessions with advertising networks. This is distinct from authentication data but may affect enterprise data governance policies for corporate device usage. COMPLIANCE CONSIDERATIONS: Legal teams should verify that the cookie consent mechanism on duo.com meets current ePrivacy and GDPR requirements for EU users, including whether implied consent is used or whether explicit opt-in is required for advertising cookies. Organizations should review their own acceptable use policies regarding corporate device access to vendor websites with third-party trackers.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has jurisdiction over online tracking and third-party data sharing practices that may constitute unfair or deceptive acts under the FTC Act.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
DMA
European Union
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Duo Privacy
Entity
Duo Security
Document last updated
May 5, 2026
Tracking information
First tracked
May 7, 2026
Last verified
May 9, 2026
Record ID
CA-P-007441
Document ID
CA-D-00696
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
76697f41b9802295d06a87d1528973ffe114cdf77c5e038c903ecb798ac000bc
Analysis generated
May 7, 2026 07:36 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Duo Security
Document: Duo Privacy
Record ID: CA-P-007441
Captured: 2026-05-07 07:36:01 UTC
SHA-256: 76697f41b9802295…
URL: https://conductatlas.com/platform/duo-security/duo-privacy/cookies-and-tracking-technologies/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Low
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Duo Security's Cookies and Tracking Technologies clause do?

Third-party tracking on the Duo website means your browsing behavior may be shared with advertising and analytics partners outside of Cisco, and you may be tracked across websites if third-party cookies are in use.

How does this clause affect you?

Your browsing activity on duo.com, including pages visited and links clicked, may be shared with third-party analytics and advertising partners through cookies and tracking pixels placed on the site.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 70 platforms. See the full comparison.

Is ConductAtlas affiliated with Duo Security?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Duo Security.