Whatnot · Whatnot Privacy Policy · View original document ↗

Cookies and Tracking Technologies

Medium severity Medium confidence Explicitdocumentlanguage Common · 70 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Whatnot recorded 2 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Whatnot Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Whatnot uses cookies, tracking pixels, and similar tools to monitor your activity on the platform and collect data about how you use the service, and you can limit this through browser settings.

This analysis describes what Whatnot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Tracking technologies enable Whatnot and third parties to monitor your behavior across sessions and potentially across other websites, which feeds into the advertising and profiling practices described elsewhere in the policy.

Interpretive note: The policy does not describe a cookie consent management mechanism for EU or UK users, making it unclear whether the disclosed practices comply with ePrivacy and GDPR consent requirements in those jurisdictions.

Consumer impact (what this means for users)

Cookies and tracking tools collect behavioral data that may be shared with advertising partners. Users can limit some tracking through browser cookie settings, though this may affect platform functionality.

How other platforms handle this

Ideogram Medium

We and our third-party partners may use cookies, web beacons, and other tracking technologies to collect information about your use of our Services, including your browser type, pages viewed, links clicked, and the date and time of your visit.

Tabnine Medium

We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our website and services. This includes information about the pages you visit, links you click, and how you navigate our site. We use this information for analytics, persona...

Windsurf Medium

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store Personal Information, including your browser type, operating system version, domains, IP address, the URL of the page that referred you, referring/exit pages and information about your interactions ...

See all platforms with this clause type →

Monitoring

Whatnot has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We use cookies and similar tracking technologies to track the activity on our Services and store certain information. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Services. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

— Excerpt from Whatnot's Whatnot Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: This provision engages the EU ePrivacy Directive (Cookie Law) and GDPR, which require informed consent before placing non-essential cookies on EU users' devices. The UK PECR imposes similar requirements for UK users. The FTC's guidance on online behavioral advertising is relevant for US users. California's CPRA treats certain cookie-based data sharing as a 'sale' or 'sharing' requiring opt-out. GOVERNANCE EXPOSURE: Medium. The policy's cookie disclosure does not describe a consent management mechanism for EU and UK users, which is a standard compliance requirement under ePrivacy and GDPR. The browser-based opt-out described is insufficient for GDPR consent purposes. JURISDICTION FLAGS: EU and UK users face heightened exposure given ePrivacy and GDPR consent requirements for non-essential cookies. California users should be aware that cookie-based behavioral data sharing may constitute a 'sale' under CPRA. CONTRACT AND VENDOR IMPLICATIONS: Third-party cookie and tracking vendors should be assessed to confirm data processing agreements are in place and that their use of cookie data is consistent with disclosed purposes. COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether a consent management platform is deployed for EU and UK users, whether the cookie banner provides adequate disclosure and a genuine choice to refuse non-essential cookies, and whether the Global Privacy Control signal is honored for California users.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has authority over deceptive or unfair online tracking practices, including failure to honor stated opt-out mechanisms for behavioral advertising
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Whatnot Privacy Policy
Entity
Whatnot
Document last updated
May 5, 2026
Tracking information
First tracked
May 11, 2026
Last verified
May 11, 2026
Record ID
CA-P-010493
Document ID
CA-D-00732
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
b004999cb5790fcea852f2c7a74f97dc701c834bd53dc7719ae5d0ff36889183
Analysis generated
May 11, 2026 06:35 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Whatnot
Document: Whatnot Privacy Policy
Record ID: CA-P-010493
Captured: 2026-05-11 06:35:36 UTC
SHA-256: b004999cb5790fce…
URL: https://conductatlas.com/platform/whatnot/whatnot-privacy-policy/cookies-and-tracking-technologies/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Whatnot's Cookies and Tracking Technologies clause do?

Tracking technologies enable Whatnot and third parties to monitor your behavior across sessions and potentially across other websites, which feeds into the advertising and profiling practices described elsewhere in the policy.

How does this clause affect you?

Cookies and tracking tools collect behavioral data that may be shared with advertising partners. Users can limit some tracking through browser cookie settings, though this may affect platform functionality.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 70 platforms. See the full comparison.

Is ConductAtlas affiliated with Whatnot?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Whatnot.