What can I do about this clause?

{'method': 'IN_APP', 'recipient': 'https://www.duolingo.com/privacy', 'difficulty': 'EASY', 'action_type': 'EXPORT_DATA', 'instructions': "Access Duolingo's cookie preference center via the privacy policy page or browser settings to disable non-essential tracking cookies. EU users should look for a 'Reject All' option in the OneTrust cookie banner.", 'deadline_days': None, 'deadline_hours': 24}

Which regulatory agencies enforce this type of clause?

{'agency': 'FTC', 'reason': 'The FTC enforces against deceptive tracking practices under Section 5 of the FTC Act and has authority over third-party cookie-based behavioral advertising.', 'complaint_url': 'https://reportfraud.ftc.gov/'}

What is the severity of this clause?

ConductAtlas classifies this Cookies and Third-Party Tracking clause as high severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

Cookies and Third-Party Tracking — Duolingo

Share 𝕏 Share in Share 🔒 PDF

What it is

Duolingo and its advertising partners use cookies and tracking tools to monitor how you use the app and website, and to target you with personalized ads. You can adjust these settings through your browser or Duolingo's cookie preferences.

Consumer impact (what this means for users)

Every time you use Duolingo's website, third-party trackers from companies like Google and Meta collect data about your behavior, which is combined with their own profiles of you and used to target advertising across the internet.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.

Export Your Data
Within 24 hours
Access Duolingo's cookie preference center via the privacy policy page or browser settings to disable non-essential tracking cookies. EU users should look for a 'Reject All' option in the OneTrust cookie banner.

Cross-platform context

See how other platforms handle Cookies and Third-Party Tracking and similar clauses.

Compare across platforms →

Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Third-party tracking technologies enable a wide network of advertisers to build detailed behavioral profiles from your Duolingo activity, often without users realizing the extent of the data collection.

View original clause language

We and our partners use cookies, web beacons, and similar tracking technologies to collect information about your use of our services and to provide you with targeted advertisements. You can control cookies through your browser settings and our cookie preference center.

Institutional analysis (Compliance & legal intelligence)

REGULATORY FRAMEWORK: EU ePrivacy Directive Art. 5(3) requires prior informed consent for non-essential cookies. GDPR Art. 6(1)(a) applies to consent-based tracking. CCPA/CPRA treats cross-context behavioral advertising cookies as 'sharing' of personal information requiring opt-out. FTC Act Section 5 applies to undisclosed tracking. UK PECR Regulation 6 mirrors ePrivacy requirements. Primary enforcers: EU DPAs (especially CNIL, which has fined Google and Meta for cookie consent failures), ICO, CPPA.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

FTC

The FTC enforces against deceptive tracking practices under Section 5 of the FTC Act and has authority over third-party cookie-based behavioral advertising.
File a complaint →

Provision details

Document information

Document

Duolingo Privacy Policy

Entity

Duolingo

Document last updated

April 29, 2026

Tracking information

First tracked

April 18, 2026

Last verified

April 18, 2026

Record ID

CA-P-002769

Document ID

CA-D-00084

Evidence Provenance

Source URL

https://www.duolingo.com/privacy

Wayback Machine

View archived versions →

SHA-256

18dc44f61316909c4efd9113eadb61be0022e2b5dce55feb464c0f8eb1b08ef1

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: Duolingo | Document: Duolingo Privacy Policy | Record: CA-P-002769
Captured: 2026-04-18 09:22:23 UTC | SHA-256: 18dc44f61316909c…
URL: https://conductatlas.com/platform/duolingo/duolingo-privacy-policy/cookies-and-third-party-tracking/
Accessed: May 2, 2026

Classification

Severity

High

Cookies and Third-Party Tracking