HubSpot · HubSpot Privacy Policy · View original document ↗

Cookies and Advertising Tracking

Medium severity High confidence Explicitdocumentlanguage Rare · 1 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity HubSpot recorded 6 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for HubSpot Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

HubSpot and its advertising partners use cookies and tracking technologies to monitor your browsing behavior across the internet and show you targeted ads. You can opt out through cookie settings, but declining cookies may limit some site functionality.

This analysis describes what HubSpot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Behavioral advertising tracking involves collecting data about your online movements across multiple websites over time, which is a significant privacy consideration and subject to consent requirements in many jurisdictions.

Consumer impact (what this means for users)

Third-party advertising partners may collect data about your browsing habits across the web when you visit HubSpot's website, and this data may be used to serve targeted ads to you elsewhere online. In the EU and UK, this requires your active consent via the cookie banner; in the US, you can opt out of the sale or sharing of this data under CCPA.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Visit HubSpot's CCPA opt-out page to opt out of the sale or sharing of your personal data for advertising purposes. For cookie-level controls, use the cookie preferences center accessible via the cookie banner on HubSpot's website.

How other platforms handle this

American Airlines Medium

American gets this information by using technologies, including cookies, web beacons, and mobile device geolocation to provide and improve our Interactive Services and advertising, including across browsers and devices (also known as cross-device linking). This technical information may be combined ...

Whatnot Medium

We use cookies and similar tracking technologies to track the activity on our Services and store certain information. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Services. You can instruct your browser to refuse all c...

Progressive Medium

We and our service providers may use cookies, web beacons, pixel tags, and other tracking technologies to collect information about your browsing behavior, device type, IP address, and interactions with our website and advertisements.

See all platforms with this clause type →

Monitoring

HubSpot has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We use cookies and similar tracking technologies to track the activity on our Service and hold certain information. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service. We work with third-party advertising partners to display ads on our behalf across the internet. These partners may use cookies and similar technologies to collect information about your visits to our website and other websites over time in order to provide you with targeted advertising.

— Excerpt from HubSpot's HubSpot Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: This provision engages the EU ePrivacy Directive (Cookie Law) and GDPR Article 6 for consent-based cookie processing, enforced by EU data protection authorities. In the US, the CCPA/CPRA defines sharing personal data for cross-context behavioral advertising as a regulated activity subject to opt-out rights, enforced by the California Privacy Protection Agency. The FTC Act Section 5 applies to deceptive or unfair data collection practices related to tracking. UK GDPR and PECR apply for UK users. GOVERNANCE EXPOSURE: Medium. HubSpot's use of third-party advertising cookies is standard industry practice, but the consent and opt-out mechanisms must be operationally sound to avoid regulatory exposure. Under GDPR, pre-ticked consent boxes or implied consent for non-essential cookies are not valid. Under CPRA, sharing data with advertising partners for cross-context behavioral advertising triggers opt-out rights even if no monetary consideration is exchanged. JURISDICTION FLAGS: EU/EEA requires granular, affirmative consent for non-essential cookies with a functional reject option. UK requires PECR compliance for cookie placement. California requires a conspicuous opt-out mechanism for behavioral advertising data sharing. States with active privacy laws (Colorado, Virginia, Connecticut, Texas) have analogous opt-out requirements that may apply. CONTRACT AND VENDOR IMPLICATIONS: Business customers embedding HubSpot tracking scripts on their own websites should ensure their own privacy notices and cookie banners accurately disclose HubSpot's role as a third-party tracker. Failure to do so may create independent liability for the business customer under GDPR or state privacy laws. Procurement teams should confirm that HubSpot's advertising partner list is available and that sub-processor notifications are provided for material changes. COMPLIANCE CONSIDERATIONS: Consent management platform configurations should be audited to ensure HubSpot tracking tags are blocked until valid consent is obtained in EU/UK contexts. US-facing properties should implement a compliant opt-out mechanism for behavioral advertising data sharing. Business customers using HubSpot's tracking pixel should include HubSpot in their cookie disclosures and data maps.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has authority over unfair or deceptive advertising tracking practices under Section 5 of the FTC Act, and has issued guidance on behavioral advertising and consumer privacy.
    File a complaint →
  • State AG
    State attorneys general in California and other states with active privacy laws (Colorado, Virginia, Connecticut) may investigate non-compliant cookie consent or behavioral advertising opt-out practices.
    File a complaint →

Applicable regulations

EU AI Act
European Union
CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
HubSpot Privacy Policy
Entity
HubSpot
Document last updated
May 5, 2026
Tracking information
First tracked
May 10, 2026
Last verified
May 10, 2026
Record ID
CA-P-009803
Document ID
CA-D-00208
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
fe8174733afb623b01d20e9bf2797cfe1a6f367f639df8ac00b981f71a13d9ef
Analysis generated
May 10, 2026 22:52 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: HubSpot
Document: HubSpot Privacy Policy
Record ID: CA-P-009803
Captured: 2026-05-10 22:52:49 UTC
SHA-256: fe8174733afb623b…
URL: https://conductatlas.com/platform/hubspot/hubspot-privacy-policy/cookies-and-advertising-tracking/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does HubSpot's Cookies and Advertising Tracking clause do?

Behavioral advertising tracking involves collecting data about your online movements across multiple websites over time, which is a significant privacy consideration and subject to consent requirements in many jurisdictions.

How does this clause affect you?

Third-party advertising partners may collect data about your browsing habits across the web when you visit HubSpot's website, and this data may be used to serve targeted ads to you elsewhere online. In the EU and UK, this requires your active consent via the cookie banner; in the US, you can opt out of the sale or sharing of this …

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.

Is ConductAtlas affiliated with HubSpot?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by HubSpot.