Headspace · Headspace Privacy Policy · View original document ↗

Cookies and Tracking Technologies

Medium severity High confidence Explicitdocumentlanguage Common · 78 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Headspace recorded 2 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Headspace Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Headspace uses cookies and tracking technologies on its platform to personalize your experience, remember your preferences, serve you ads on other websites, and analyze how you use the service.

This analysis describes what Headspace's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Advertising cookies can track your activity across the web, not just on Headspace, and in the context of a mental health platform, the data derived from your usage patterns may infer sensitive information about your mental health that is then shared with advertising networks.

Clause Stability Stable

0
Changes
3
Months Monitored
May 10, 2026
First Seen
May 22, 2026
Last Seen
This clause type exists across 3350 other provisions on other platforms.

Consumer impact (what this means for users)

Cookies used for advertising on Headspace may track your browsing behavior beyond the Headspace platform and share that data with advertising partners, which may include behavioral signals that reveal or infer mental health status; you can manage cookie preferences through the OneTrust consent management tool deployed on the Headspace website.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Visit the Headspace Cookie Policy at headspace.com/cookie-policy and use the OneTrust cookie consent management tool to review and adjust your cookie preferences, including opting out of advertising and analytics cookies.

How other platforms handle this

Ledger Medium

At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.

Garmin Medium

If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...

Strava Medium

We may display advertisements on our Services and those advertisements may be targeted to your interests based on your personal information. We may share your personal information with advertising partners for interest-based advertising purposes. You may opt out of interest-based advertising by visi...

See all platforms with this clause type →

Monitoring

Headspace has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We use cookies and similar tracking technologies (collectively, "Cookies") to enhance your experience on our Platform... We may use Cookies for purposes such as recognizing you when you log in, remembering your preferences, delivering advertising to you on third-party websites, understanding how you use our Platform, and improving our Products and Services.

— Excerpt from Headspace's Headspace Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: Cookie and tracking technology practices engage the EU ePrivacy Directive (commonly known as the Cookie Law) and GDPR for EU users, requiring informed consent for non-essential cookies including advertising and analytics cookies. UK PECR applies similarly for UK users. CCPA and CPRA treat certain cookie-based data sharing as a sale of personal information, requiring an opt-out mechanism for California residents. The FTC has authority over deceptive cookie consent practices. GOVERNANCE EXPOSURE: Medium. The use of advertising cookies on a mental health platform creates heightened exposure because the data generated may constitute health-related behavioral data subject to stricter consent standards under GDPR Article 9 and CPRA's sensitive personal information provisions. Consent management platforms must be configured to block advertising and analytics cookies prior to obtaining valid consent, and consent signals must be transmitted to all downstream advertising vendors. JURISDICTION FLAGS: EU and UK users are most affected by consent requirements for non-essential cookies under ePrivacy Directive and GDPR. California residents have opt-out rights for cookie-based data sharing that qualifies as a sale or sharing of personal information under CCPA and CPRA. Global Privacy Control (GPC) signal compliance should be verified for California users. CONTRACT AND VENDOR IMPLICATIONS: Advertising technology vendors receiving cookie data must be assessed for compliance with applicable consent requirements. Programmatic advertising partners should receive consent signals from the OneTrust implementation and contractually commit to honoring opt-out signals including GPC. COMPLIANCE CONSIDERATIONS: Compliance teams should audit the OneTrust implementation to verify that advertising and analytics cookies are blocked prior to consent for EU and UK users, that GPC signals are honored for California users, and that the list of cookie vendors disclosed in the cookie policy is current and complete. Given the mental health context, teams may also want to assess whether any advertising cookies receive data that could qualify as consumer health data under applicable state law.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has jurisdiction over deceptive or unfair cookie consent practices and over data sharing via advertising cookies that may constitute a sale of personal information under applicable law
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
HIPAA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Headspace Privacy Policy
Entity
Headspace
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 10, 2026
Record ID
CA-P-009702
Document ID
CA-D-00216
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
c1c69938a2255531d9160216a80441cc6e236ee7a78005f747b818b71812b907
Analysis generated
May 8, 2026 10:00 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Headspace
Document: Headspace Privacy Policy
Record ID: CA-P-009702
Captured: 2026-05-08 10:00:58 UTC
SHA-256: c1c69938a2255531…
URL: https://conductatlas.com/platform/headspace/headspace-privacy-policy/cookies-and-tracking-technologies/
Accessed: July 4, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Headspace's Cookies and Tracking Technologies clause do?

Advertising cookies can track your activity across the web, not just on Headspace, and in the context of a mental health platform, the data derived from your usage patterns may infer sensitive information about your mental health that is then shared with advertising networks.

How does this clause affect you?

Cookies used for advertising on Headspace may track your browsing behavior beyond the Headspace platform and share that data with advertising partners, which may include behavioral signals that reveal or infer mental health status; you can manage cookie preferences through the OneTrust consent management tool deployed on the Headspace website.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 78 platforms. See the full comparison.

Is ConductAtlas affiliated with Headspace?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Headspace.