Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy authorizes sharing of behavioral and profile data with advertising networks including Google and Facebook for targeted advertising placement, and the use of member data to build lookalike audiences on third-party advertising platforms; data collected by these third parties through cookies and tracking technologies is governed by those third parties' own privacy policies.
This analysis describes what Peloton's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that member behavioral data, fitness activity inferences, and profile information may flow to major third-party advertising platforms and that data collected by those platforms through tracking technologies is subject to the third parties' own data governance frameworks rather than Peloton's policy. The lookalike audience mechanism involves sharing characteristics derived from member data with advertising networks for use in targeting non-member consumers.
Under this clause, behavioral data and inferred preferences derived from member fitness activity may be used to serve targeted advertisements on Google, Facebook, and other third-party platforms, and to construct lookalike audiences. The policy states that data collected by these third parties via cookies and tracking technologies is governed by those third parties' privacy policies rather than Peloton's.
Cross-platform context
See how other platforms handle Third-Party Advertising Partner Data Sharing and similar clauses.
Compare across platforms →Monitoring
Peloton has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Contracting with third-party agencies, advertising companies, ad networks, social media companies and other technology services to place ads about our products and services on other websites and services. For example, we may place ads through Google and Facebook that you may view on their platforms as well as on other websites and services. These third parties may use cookies and similar technologies to track your activity, the information collected by these third parties in this manner is subject to that third party's own privacy policies; and Using aggregated information from third parties for creating similar audiences in order to better target advertisements on their networks to potential consumers who appear to have shared characteristics.Excerpt from Peloton's Privacy Policy
REGULATORY LANDSCAPE: This provision implicates GDPR consent requirements under the ePrivacy Directive for cookie-based tracking used to enable third-party advertising, and CCPA provisions on the sale or sharing of personal information for cross-context behavioral advertising. The FTC Act applies to representations about data sharing with advertising partners. State laws including California CPRA's opt-out of sharing for cross-context behavioral advertising are directly relevant. The use of fitness-adjacent inferences in advertising targeting may require evaluation under state health data statutes. GOVERNANCE EXPOSURE: High. The disclosure that third-party advertising platforms collect data through their own tracking technologies, subject only to those platforms' policies, means that Peloton members' data enters data ecosystems governed by external privacy frameworks over which Peloton asserts no ongoing control. The lookalike audience mechanism involves disclosure of aggregated member characteristics to advertising platforms. JURISDICTION FLAGS: California CPRA creates a specific right to opt out of sharing personal information for cross-context behavioral advertising that is directly applicable to this provision. EU/EEA users are protected by GDPR consent requirements that should limit the use of fitness-related behavioral data for advertising without explicit consent. UK ICO guidance on real-time bidding and online advertising is relevant for UK users. CONTRACT AND VENDOR IMPLICATIONS: The policy does not describe contractual restrictions on how advertising partners use data received through lookalike audience mechanisms or cookie-based tracking, distinguishing this from the AI service provider provisions where contractual restrictions are explicitly described. Organizations assessing Peloton as a platform vendor should note that advertising data flows are disclosed as subject to third-party policies. COMPLIANCE CONSIDERATIONS: Legal teams should assess whether Peloton's consent mechanisms for advertising-related data sharing satisfy GDPR consent requirements and CPRA opt-out rights. Cookie consent management and the Cookies Policy referenced in the document should be reviewed to confirm that advertising tracking is gated behind affirmative consent where required. The use of health-adjacent fitness data in advertising targeting workflows should be assessed under applicable health data frameworks.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes that member behavioral data, fitness activity inferences, and profile information may flow to major third-party advertising platforms and that data collected by those platforms through tracking technologies is subject to the third parties' own data governance frameworks rather than Peloton's policy. The lookalike audience mechanism involves sharing characteristics derived from member data with advertising networks for use …
Under this clause, behavioral data and inferred preferences derived from member fitness activity may be used to serve targeted advertisements on Google, Facebook, and other third-party platforms, and to construct lookalike audiences. The policy states that data collected by these third parties via cookies and tracking technologies is governed by those third parties' privacy policies rather than Peloton's.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Peloton.