Twilio · Twilio Privacy Notice

Segment Analytics Integration

High severity
Share 𝕏 Share in Share 🔒 PDF

What it is

Twilio uses its own Segment customer data platform to track your page views and behavior on twilio.com, with cookies set across the entire .twilio.com domain for up to 90 days.

Consumer impact (what this means for users)

Segment tracks your activity across all twilio.com subdomains for 90 days via cookies, and the 'alwaysLoadSegment: true' configuration flag suggests Segment loads regardless of cookie consent category selection, which may conflict with GDPR requirements.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Within 30 days
    Submit a data deletion request via Twilio's privacy request form linked from their privacy policy page, specifying that you are requesting deletion of website visitor and analytics data collected via Segment.

Cross-platform context

See how other platforms handle Segment Analytics Integration and similar clauses.

Compare across platforms →
Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Because Twilio owns Segment, your website visitor data collected via Segment may be accessible across Twilio's product ecosystem, potentially linking your browsing behavior to your Twilio or Segment account data.

View original clause language
var segmentKey = "NBBzVMlQO9GFFqU6upGyk4gqf6zV28TH"; var domain = ".twilio.com"; TrustArcWrapper.withTrustArc(analytics, { alwaysLoadSegment: true }).load(segmentKey, cookieConfig); analytics.page({},{ page: properties });

Institutional analysis (Compliance & legal intelligence)

REGULATORY FRAMEWORK: GDPR Art. 5(1)(b) (purpose limitation), Art. 5(1)(c) (data minimization), Art. 6(1)(a) (consent), Art. 9 (if any sensitive data is inferred), CCPA §1798.100 (right to know), and §1798.135 (opt-out of sale/sharing). The 'alwaysLoadSegment: true' flag is a material compliance concern under ePrivacy Directive Art. 5(3).

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

  • FTC
    The FTC has authority over deceptive data practices including analytics tools that collect data beyond what is disclosed or without valid consent under Section 5 of the FTC Act.
    File a complaint →
  • State AG
    California's Attorney General and CPPA enforce CCPA/CPRA provisions including opt-out rights for sharing of personal information, which may be implicated by Segment's cross-domain cookie tracking.
    File a complaint →

Provision details

Document information
Document
Twilio Privacy Notice
Entity
Twilio
Document last updated
April 29, 2026
Tracking information
First tracked
April 27, 2026
Last verified
April 27, 2026
Record ID
CA-P-003591
Document ID
CA-D-00252
Evidence Provenance
Source URL
Wayback Machine
SHA-256
b33b0cb6d64f68eac8a674782ff99bd2944c56116d36896801552a5b9b7a5b64
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Twilio | Document: Twilio Privacy Notice | Record: CA-P-003591
Captured: 2026-04-27 14:55:19 UTC | SHA-256: b33b0cb6d64f68ea…
URL: https://conductatlas.com/platform/twilio/twilio-privacy-notice/segment-analytics-integration/
Accessed: May 2, 2026
Classification
Severity
High
Categories

Other provisions in this document