Fastly · Fastly Privacy Policy · View original document ↗

Data Sharing with Advertising and Analytics Partners

Medium severity Medium confidence Explicitdocumentlanguage Uncommon · 13 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Fastly Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Fastly uses third-party advertising and analytics companies that can track your behavior on Fastly's website and potentially across other websites over time. This tracking is used to understand usage patterns and may be used to serve targeted advertising.

This analysis describes what Fastly's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Cross-site tracking by advertising and analytics companies is a primary mechanism through which personal data is aggregated and profiled at scale. For EU users, this activity typically requires explicit consent under the ePrivacy Directive and GDPR.

Interpretive note: The specific legal basis Fastly relies on for advertising tracking in the EU (consent vs. legitimate interests) is not unambiguously stated in the policy, and the applicable standard varies by EU member state and evolving regulatory guidance.

Consumer impact (what this means for users)

Your browsing behavior on Fastly's website may be shared with advertising and analytics third parties who can track you across multiple websites. EU residents and California residents have rights to limit or opt out of this activity, but must take active steps to do so.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Contact privacy@fastly.com to request that your personal data not be used for advertising or analytics purposes. California residents may also submit a CPRA opt-out of sharing request to the same address.

How other platforms handle this

Zoom Medium

Zoom may share personal data with third-party advertising partners and analytics providers to deliver targeted advertising and measure the effectiveness of advertising campaigns. This may include sharing identifiers, device information, and behavioral data with partners such as advertising networks.

Calendly Medium

We may share personal information with third-party advertising partners and analytics providers to help us understand how our services are used and to serve relevant advertising. These third parties may use cookies, pixel tags, and similar tracking technologies to collect information about your use ...

Spotify Medium

We receive some of the data mentioned above from third parties. The below table describes the categories of those third parties. If you connect your Spotify account to a third party application, service or device, we may collect and use information from them. This collection is to make the integrati...

See all platforms with this clause type →

Monitoring

Fastly has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We may share your personal information with third-party advertising and analytics companies. These companies may use tracking technologies to collect information about your use of our websites and other websites over time. This information may be used to, among other things, analyze and track data, determine the popularity of certain content, and better understand your online activity.

— Excerpt from Fastly's Fastly Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: This provision engages GDPR's lawful basis requirements (particularly consent under Article 6 and the conditions under Article 7), the EU ePrivacy Directive as implemented in EU member state law, and the CCPA/CPRA's opt-out rights for the sale or sharing of personal information. The FTC enforces against unfair or deceptive data practices in the US context. EU data protection authorities (including the Irish DPC, if Fastly's EU establishment is in Ireland) have primary enforcement authority for EU-related advertising tracking. (2) GOVERNANCE EXPOSURE: Medium. Advertising and analytics data sharing is common across the industry, but the legal basis for such sharing in the EU context is under active regulatory scrutiny. The use of 'legitimate interests' as a basis for advertising tracking has faced significant challenge from EU DPAs. If Fastly relies on legitimate interests rather than consent for this activity in the EU, the policy may require evaluation against current regulatory guidance. (3) JURISDICTION FLAGS: EU/EEA users face the highest exposure because cross-site tracking without adequate consent may violate the ePrivacy Directive irrespective of GDPR compliance. California residents have a right to opt out of the 'sharing' of personal information for cross-context behavioral advertising under CPRA even where no monetary sale occurs. Illinois and other states with emerging comprehensive privacy laws may impose similar rights. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers who embed Fastly tracking code or rely on Fastly analytics products should evaluate whether this data sharing is disclosed in their own privacy notices and consent mechanisms. If Fastly's analytics tools are deployed on customer-facing properties, the customer may bear direct compliance obligations for obtaining end-user consent. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should audit the specific third-party advertising and analytics vendors listed or referenced in Fastly's cookie policy or consent management disclosures, assess whether consent mechanisms on Fastly's website meet applicable standards for EU users, and evaluate whether the CPRA's opt-out of sharing right is implemented in a readily accessible manner for California residents.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has authority over consumer privacy and data sharing practices, including cross-site behavioral advertising and whether disclosures and opt-outs meet fair practice standards
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
DMA
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
Fastly Privacy Policy
Entity
Fastly
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 11, 2026
Record ID
CA-P-010403
Document ID
CA-D-00676
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
cbddaed40180df2ad9f739ec146b4892475952ea75220d4fd8a1912da0062603
Analysis generated
May 8, 2026 15:45 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Fastly
Document: Fastly Privacy Policy
Record ID: CA-P-010403
Captured: 2026-05-08 15:45:23 UTC
SHA-256: cbddaed40180df2a…
URL: https://conductatlas.com/platform/fastly/fastly-privacy-policy/data-sharing-with-advertising-and-analytics-partners/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Fastly's Data Sharing with Advertising and Analytics Partners clause do?

Cross-site tracking by advertising and analytics companies is a primary mechanism through which personal data is aggregated and profiled at scale. For EU users, this activity typically requires explicit consent under the ePrivacy Directive and GDPR.

How does this clause affect you?

Your browsing behavior on Fastly's website may be shared with advertising and analytics third parties who can track you across multiple websites. EU residents and California residents have rights to limit or opt out of this activity, but must take active steps to do so.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 13 platforms. See the full comparison.

Is ConductAtlas affiliated with Fastly?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Fastly.