Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that CoreWeave recognizes and honors GPC signals as opt-out requests for sale or sharing of personal information where applicable law requires, processes the GPC signal as a restriction on non-essential tracking technologies on the specific device and browser, and does not respond to Do Not Track browser signals.
This analysis describes what Weights & Biases's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision operationalizes CPRA's requirement that businesses recognize GPC signals as opt-out requests, while clarifying that the effect of the GPC signal is limited to the specific device and browser from which it is sent and is processed through CoreWeave's consent management platform. The explicit non-response to DNT signals is a standard disclosure under California's Online Privacy Protection Act.
This clause establishes that users who enable GPC in their browser will have that signal treated as an opt-out of sharing for cross-context behavioral advertising on the specific device and browser, while Do Not Track signals will not be acted upon by CoreWeave's Services.
Cross-platform context
See how other platforms handle Global Privacy Control Recognition and similar clauses.
Compare across platforms →Monitoring
Weights & Biases has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We recognize and honor Global Privacy Control ("GPC") signals as a valid request to opt out of the sale or sharing of personal information where required by applicable law. Where technically feasible, and as configured through our consent management platform, we treat a GPC signal as a request to restrict certain non-essential tracking technologies on the device and browser from which the signal is sent. The Services do not respond to "Do Not Track" ("DNT") browser signals.Excerpt from Weights & Biases's Privacy Policy
(1) REGULATORY LANDSCAPE: CPRA requires that businesses recognize GPC signals as opt-out requests for sale or sharing of personal information. The California Privacy Protection Agency has issued regulations on GPC implementation. This provision engages California's Online Privacy Protection Act regarding DNT signal disclosures. The CPPA holds enforcement authority over GPC compliance in California. (2) GOVERNANCE EXPOSURE: Low. The provision's GPC recognition language aligns with CPRA requirements. The limitation to the specific device and browser from which the signal is sent is consistent with technically feasible implementation standards. The distinction between GPC recognition and the non-response to DNT is operationally standard. (3) JURISDICTION FLAGS: California is the primary jurisdiction with GPC recognition obligations under CPRA. Colorado's privacy law also requires recognition of universal opt-out mechanisms including GPC. Other state privacy laws with opt-out of targeted advertising rights may apply as regulatory frameworks develop. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers whose users access CoreWeave's Sites should confirm that their own privacy programs account for GPC signal handling at the infrastructure level. The consent management platform reference indicates that GPC implementation is operationalized through a third-party tool, which may be relevant to vendor assessments. (5) COMPLIANCE CONSIDERATIONS: Legal teams should verify that CoreWeave's consent management platform technically processes GPC signals as described and that the restriction applies to all non-essential tracking technologies active on the Sites. Compliance programs in Colorado and other states with universal opt-out signal requirements should assess whether CoreWeave's implementation satisfies those states' specific requirements.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision operationalizes CPRA's requirement that businesses recognize GPC signals as opt-out requests, while clarifying that the effect of the GPC signal is limited to the specific device and browser from which it is sent and is processed through CoreWeave's consent management platform. The explicit non-response to DNT signals is a standard disclosure under California's Online Privacy Protection Act.
This clause establishes that users who enable GPC in their browser will have that signal treated as an opt-out of sharing for cross-context behavioral advertising on the specific device and browser, while Do Not Track signals will not be acted upon by CoreWeave's Services.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Weights & Biases.