Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that the company's websites do not respond to browser Do Not Track signals, distinguishing DNT from the Global Privacy Control which the company states it will honor.
This analysis describes what Hims & Hers's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The agreement states that the platform does not honor Do Not Track browser signals. Users who wish to limit tracking must use the Global Privacy Control, visit privacy.hims.com/policies, or use cookie and advertising opt-out controls described in the policy.
How other platforms handle this
We currently do not respond to "Do Not Track" or similar signals except where we expressly indicate otherwise.
our services rely on cookies to function properly, for things like remembering your language preferences.
We maintain administrative, technical, and physical safeguards in accordance with appropriate industry standards that are designed to protect against unauthorized use, disclosure, or access to personal information.
Monitoring
Hims & Hers has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"there is not a common understanding of how to interpret the DNT signal; therefore, our websites do not respond to browser DNT signals.Excerpt from Hims & Hers's Privacy Policy
1. REGULATORY LANDSCAPE: The absence of Do Not Track response is not currently mandated by federal law in the United States; however, some state privacy laws and the FTC have addressed tracking signal response in guidance. The California Online Privacy Protection Act previously addressed DNT disclosure requirements. The company's explicit disclosure of its DNT non-response alongside its GPC compliance commitment reflects the current regulatory distinction between these signals. 2. GOVERNANCE EXPOSURE: Low. Failure to honor DNT signals is consistent with common industry practice and is not currently subject to mandatory compliance requirements under most applicable U.S. frameworks. The policy's explicit disclosure of this practice satisfies applicable transparency requirements where they exist. 3. JURISDICTION FLAGS: California's current privacy framework focuses on GPC compliance rather than DNT; the policy's GPC compliance commitment addresses that requirement. No jurisdiction currently mandates DNT signal response in a way that creates enforcement exposure from this disclosure. 4. CONTRACT AND VENDOR IMPLICATIONS: No direct vendor or contract implications arise from this provision. Analytics and advertising partner integrations should be assessed separately for their tracking practices independent of DNT signal response. 5. COMPLIANCE CONSIDERATIONS: Legal teams should confirm that the Global Privacy Control implementation is technically functional and honors opt-out signals for both data sales and targeted advertising as required under CCPA and CPRA; review whether any state privacy law updates have introduced DNT response obligations since this policy was last updated; and assess whether the policy's disclosure of DNT non-response is sufficiently prominent given the user population served.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The policy states that the company's websites do not respond to browser Do Not Track signals, distinguishing DNT from the Global Privacy Control which the company states it will honor.
The agreement states that the platform does not honor Do Not Track browser signals. Users who wish to limit tracking must use the Global Privacy Control, visit privacy.hims.com/policies, or use cookie and advertising opt-out controls described in the policy.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Hims & Hers.