NBCUniversal automatically tracks your keystrokes and scrolling activity on its services, records form fields you partially complete, and logs these events even when you are offline, uploading them when you reconnect.
This analysis describes what Peacock's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Keystroke logging and offline data queuing go beyond standard analytics and raise questions about the scope of behavioral surveillance, particularly for partially completed forms which may contain data the user chose not to submit.
Information you type into forms but do not submit, as well as your scrolling and keystroke patterns, may be captured and stored by NBCUniversal even without your active submission, and offline activity may be retroactively uploaded.
How other platforms handle this
We use cookies and similar tracking technologies to track the activity on our websites and services and store certain information. Tracking technologies used include beacons, tags, and scripts to collect and track information and to improve and analyze our services. You can instruct your browser to ...
American gets this information by using technologies, including cookies, web beacons, and mobile device geolocation to provide and improve our Interactive Services and advertising, including across browsers and devices (also known as cross-device linking). This technical information may be combined ...
We use cookies, web beacons, pixel tags, and other tracking technologies to collect information about your use of our Services. This information may include your IP address, browser type, operating system, referring URLs, and information about how you interact with our Services.
Monitoring
Peacock has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Connection and Usage (including information collected through cookies): For example: domain names, browsing activity, scrolling and keystroke activity, advertisements viewed, forms or fields you complete or partially complete, search terms, whether you open an email, content (including videos) you view and duration, quality of the service and interaction with the content, logs, and other similar information. If these events occur while you are offline, they may be logged and uploaded to us when you next connect.— Excerpt from Peacock's Peacock Privacy Policy
REGULATORY LANDSCAPE: Keystroke and session replay tracking implicates state wiretapping and electronic surveillance laws, including the California Invasion of Privacy Act (CIPA), which has been the basis for class action litigation involving session replay and form data capture on websites. CCPA treats connection and usage data as personal information. GDPR Article 5 proportionality principles may be engaged where keystroke collection is not strictly necessary for the stated service purpose. GOVERNANCE EXPOSURE: High. The explicit disclosure of keystroke activity and partial form field capture places this practice within the scope of active CIPA litigation theories and FTC scrutiny of deceptive data collection. The offline logging and upload mechanism is operationally notable and may not be adequately disclosed through standard cookie consent flows. JURISDICTION FLAGS: California creates the highest exposure under CIPA. Illinois and other states with electronic surveillance statutes may also apply. EU and UK users benefit from GDPR and UK GDPR proportionality and necessity requirements that may constrain keystroke collection without explicit consent. CONTRACT AND VENDOR IMPLICATIONS: If third-party session replay or analytics vendors are used to implement keystroke and scrolling tracking, those vendors' data processing agreements should be reviewed to ensure they qualify as service providers under CCPA and processors under GDPR, and that data captured is not used for the vendor's own purposes. COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether the cookie consent mechanism and privacy notice at the point of data collection adequately disclose keystroke and offline logging to meet GDPR and CCPA transparency requirements. The partial form field capture practice in particular warrants legal review given active litigation in this area.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Keystroke logging and offline data queuing go beyond standard analytics and raise questions about the scope of behavioral surveillance, particularly for partially completed forms which may contain data the user chose not to submit.
Information you type into forms but do not submit, as well as your scrolling and keystroke patterns, may be captured and stored by NBCUniversal even without your active submission, and offline activity may be retroactively uploaded.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Peacock.