Duolingo · Duolingo Privacy Policy · View original document ↗

Targeting Cookies and Cross-Site Advertising

Medium severity High confidence Explicitdocumentlanguage Unique · 0 of 352 platforms
Get alerted the next time Duolingo changes these terms. Get same-day alerts →
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Duolingo Monitor emails you the same day this changes. The archive stays free.
Get same-day alerts →

Get the weekly research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.

Document Record

What it is

This provision discloses that Duolingo's website places targeting cookies from Google, Meta, Amazon, and unspecified other companies, which those companies may use to track user activity across multiple websites for personalized advertising purposes.

This analysis describes what Duolingo's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes that cross-site behavioral tracking occurs through third-party cookies placed by named advertising platforms, and that users in the EU and UK are opted out of personalized advertising by default while users in other jurisdictions must actively opt out.

Recent Activity

This document changed recently

Medium May 27, 2026

The updated policy removes explicit language stating that Android users and website users are not subject to audio collection for product improvement purposes. Previously, the policy authorized audio collection only from iOS users, with an explicit carve-out for Android and web users. The revised language now states that all users may choose not to share audio within app Settings, suggesting audio collection may now occur across all platforms unless the opt-out mechanism is used. The practical operational effect of this change depends on whether Duolingo implements audio collection on Android and web platforms, which the policy change does not explicitly confirm. You can decline audio sharing for product improvement by adjusting the setting within the app.

View change record →

Clause Stability Stable

0
Changes
3
Months Monitored
Jul 9, 2026
First Seen
Jul 9, 2026
Last Seen

Consumer impact (what this means for users)

Under this provision, Duolingo's website places targeting cookies from Google, Meta, Amazon, and other companies that may track browsing activity across multiple websites. Users can manage or reject these cookies through the Duolingo Privacy Preference Center or opt out of personalized advertising in app Settings.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Access the Duolingo Privacy Preference Center on the website to manage or reject targeting cookies, or use the Tracking toggle in app Settings to disable tracking.

Cross-platform context

See how other platforms handle Targeting Cookies and Cross-Site Advertising and similar clauses.

Compare across platforms →

Monitoring

Duolingo has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Get Monitor Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Please note that our cookies include Targeting Cookies from Google, Meta, Amazon, and other companies, which these companies may use to track your activities across multiple websites to deliver personalized advertising to you.

Excerpt from Duolingo's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

1) REGULATORY LANDSCAPE: This provision implicates the EU ePrivacy Directive (Cookie Law) and GDPR consent requirements for EU and EEA users, requiring prior informed consent before placing non-essential tracking cookies. UK PECR imposes equivalent requirements for UK users. The CCPA and California Privacy Rights Act require disclosure of cross-context behavioral advertising and provide opt-out rights for California residents. The FTC Act is relevant to the accuracy of consent and opt-out mechanism representations. 2) GOVERNANCE EXPOSURE: Medium. The policy discloses that EU and UK users are opted out of personalized advertising by default, which aligns with GDPR and PECR requirements. However, the policy does not specify whether targeting cookies are blocked by default for EU users or whether opt-out occurs at the advertising-delivery level only. This distinction may affect compliance posture under applicable cookie consent requirements. 3) JURISDICTION FLAGS: EU and EEA users require prior consent for non-essential cookies under GDPR and the ePrivacy Directive. UK users are subject to PECR. California users have CCPA opt-out rights for cross-context behavioral advertising. The policy's reference to 'other companies' placing targeting cookies, without exhaustive disclosure, may raise transparency concerns under GDPR Article 13. 4) CONTRACT AND VENDOR IMPLICATIONS: The involvement of Google, Meta, and Amazon as cookie vendors means their respective data processing terms govern how tracked data is used beyond Duolingo's platform. Procurement and compliance teams should assess whether Duolingo's cookie consent implementation satisfies the consent standards required by each named vendor's own terms and applicable law. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should audit the implementation of the Privacy Preference Center to confirm that non-essential cookies are not loaded prior to user consent for EU and UK users. The cookie list page referenced in the policy should be reviewed for completeness and currency. CCPA opt-out disclosures should be verified against California regulatory guidance on cross-context behavioral advertising.

Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Start Professional · $99/mo Start with Monitor · $29/mo

Applicable agencies

  • FTC
    The FTC has jurisdiction over cross-site behavioral tracking and personalized advertising practices under the FTC Act's unfair or deceptive practices authority.
    File a complaint →
  • State AG
    California residents may file complaints with the California AG regarding CCPA cross-context behavioral advertising opt-out compliance.
    File a complaint →

Provision details

Document information
Document
Duolingo Privacy Policy
Entity
Duolingo
Document last updated
May 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-016015
Document ID
CA-D-00084
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
ffd79e13b1f23d8f50cc63af7c7e06fe3d89fe994f3f6c441c5f01a292a571ad
Analysis generated
July 9, 2026 09:23 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Duolingo
Document: Duolingo Privacy Policy
Record ID: CA-P-016015
Captured: 2026-07-09 09:23:37 UTC
SHA-256: ffd79e13b1f23d8f…
URL: https://conductatlas.com/platform/duolingo/duolingo-privacy-policy/provision/CA-P-016015/targeting-cookies-and-cross-site-advertising/
Accessed: July 23, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Governance intelligence across arbitration, AI governance, data rights, indemnification, and retention
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
Start Professional · $99/mo Start with Monitor · $29/mo

Frequently Asked Questions

What does Duolingo's Targeting Cookies and Cross-Site Advertising clause do?

This provision establishes that cross-site behavioral tracking occurs through third-party cookies placed by named advertising platforms, and that users in the EU and UK are opted out of personalized advertising by default while users in other jurisdictions must actively opt out.

How does this clause affect you?

Under this provision, Duolingo's website places targeting cookies from Google, Meta, Amazon, and other companies that may track browsing activity across multiple websites. Users can manage or reject these cookies through the Duolingo Privacy Preference Center or opt out of personalized advertising in app Settings.

Is ConductAtlas affiliated with Duolingo?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Duolingo.