Skip to content

Advertising pixel from Criteo

Criteo OneTag and website tracking lawsuits

Criteo OneTag tracks the products a visitor views so Criteo can show them retargeting ads on other sites.

Free, about a minute, no signup for your score.

What Suitcast knows about Criteo OneTag

High risk

Type
Advertising pixel
Complaints naming it, 12 months
20

Requests the scanner matches to it

  • dynamic.criteo.com
  • static.criteo.net
  • sslwidget.criteo.com
  • gum.criteo.com
  • .criteo.com
  • .criteo.net

The short answer

Criteo OneTag is an advertising pixel from Criteo. Suitcast rates its risk under the California Invasion of Privacy Act, CIPA, as high, because complaints describe scripts like it recording visitors before they consent. It is named in 20 verified complaints in the last 12 months. The fix is to load it only after a visitor accepts, or to remove it when it is not used.

Why complaints name it

Complaints describe it as building a shopping profile and sharing it with an ad network before consent.

The act allows $5,000 per violation, which is why firms look for scripts that run the moment a page opens.

The fix

How to stop Criteo OneTag firing before consent

Written for the person who runs the site, with the setting to change.

  1. Ask your developer to fire the tag only after your banner records an accept, or give it an ad_storage consent requirement in Google Tag Manager.

  2. Remove it if your Criteo campaigns have ended.

How the scan checks this

  1. Loads your pages like a first visit. A real browser, nothing clicked, nothing accepted.
  2. Checks every request before the banner is answered. A request to dynamic.criteo.com is matched to Criteo OneTag and recorded with the millisecond it fired.
  3. Clicks reject and watches again. When the banner has a reject button, the scan presses it; if Criteo OneTag keeps firing, the report says so.

Scanner rules and limits are on the methodology page.

Trend

Complaints naming Criteo OneTag, month by month

Verified tracking complaints whose text names this script, by the month they were filed.

Website accessibility (ADA) Website tracking (CIPA)

November 2025 to October 2026, current month to date

Industries

Industries sued over Criteo OneTag

Verified complaints naming this script, by the defendant's industry.

By the defendant's industry

Verified filings, 12 months
  1. 1Retail and online stores2
  2. 2Clothing and fashion brands1
  3. 3Medical and health providers1

Court records

Latest verified complaints naming Criteo OneTag

Newest first. Every row links to the court record.
  1. Tracking

    Munoz v. LG Electronics U.S.A., Inc.

    C.D. California. Attributed to New Jersey

    Court recordfor Munoz v. LG Electronics U.S.A., Inc. (opens in a new tab)
  2. Tracking

    Eugenio v. Sprouts Farmers Market, Inc.

    N.D. California, filed by Potter Handy, LLP. Attributed to Arizona

    Court recordfor Eugenio v. Sprouts Farmers Market, Inc. (opens in a new tab)
  3. Tracking

    Pearson v. Hims & Hers Health, Inc.

    N.D. California, filed by Schubert Jonckheer & Kolbe. Attributed to California

    Court recordfor Pearson v. Hims & Hers Health, Inc. (opens in a new tab)
  4. Tracking

    Ewart v. Fender Musical Instruments Corp.

    N.D. California, filed by Gutride Safier LLP. Attributed to California

    Court recordfor Ewart v. Fender Musical Instruments Corp. (opens in a new tab)
  5. Tracking

    Esparza v. V.F. Corporation

    S.D. California. Attributed to Pennsylvania

    Court recordfor Esparza v. V.F. Corporation (opens in a new tab)
  6. Tracking

    Haviland v. Alen Corporation

    W.D. Texas, filed by Tauler Smith LLP. Attributed to Texas

    Court recordfor Haviland v. Alen Corporation (opens in a new tab)
  7. Tracking

    Hsu v. Fantasia Trading LLC

    N.D. California, filed by Almeida Law Group LLC. Attributed to California

    Court recordfor Hsu v. Fantasia Trading LLC (opens in a new tab)
  8. Tracking

    Haviland v. State and Liberty Clothing Co., LLC

    E.D. California, filed by Tauler Smith LLP. Attributed to Michigan

    Court recordfor Haviland v. State and Liberty Clothing Co., LLC (opens in a new tab)
  9. Tracking

    John Reyes v. AliExpress International United States Corporation

    C.D. California. Attributed to California

    Court recordfor John Reyes v. AliExpress International United States Corporation (opens in a new tab)
  10. Tracking

    Babbini v. ID5 Technology, Inc.

    N.D. California, filed by Bursor & Fisher, P.A.. Attributed to New York

    Court recordfor Babbini v. ID5 Technology, Inc. (opens in a new tab)
  11. Tracking

    Christy v. Lenovo (United States) Inc.

    N.D. California, filed by Akin Gump Strauss Hauer & Feld. Attributed to North Carolina

    Court recordfor Christy v. Lenovo (United States) Inc. (opens in a new tab)
  12. Tracking

    Lawrence Schallert v. StockX, LLC

    C.D. California, filed by Tauler Smith LLP. Attributed to Michigan

    Court recordfor Lawrence Schallert v. StockX, LLC (opens in a new tab)
  13. Tracking

    Erakat v. Hobby Lobby Stores, Inc.

    N.D. California, filed by Law Offices of Ross Cornell APC. Attributed to Oklahoma

    Court recordfor Erakat v. Hobby Lobby Stores, Inc. (opens in a new tab)
  14. Tracking

    Abdullah v. Stitch Fix, Inc.

    N.D. California, filed by Law Offices of Ross Cornell APC. Attributed to Delaware

    Court recordfor Abdullah v. Stitch Fix, Inc. (opens in a new tab)
  15. Tracking

    Nieves v. Microsoft Corporation

    N.D. California, filed by Bursor & Fisher P.A.. Attributed to Washington

    Court recordfor Nieves v. Microsoft Corporation (opens in a new tab)

Same type

Other advertising pixels the scanner checks

Scripts of the same kind carry the same pattern in complaints, and the same fix.

Questions owners ask

Whether Criteo OneTag is a problem, how to check your site, and where the counts come from.
Is having Criteo OneTag on my site illegal?
No. The complaints do not claim the script is illegal; they claim it recorded a visitor before the visitor consented, or kept recording after the visitor declined. Loading Criteo OneTag only after consent, or removing it when it is not used, is what removes the pattern the complaints describe.
How do I know if Criteo OneTag fires before consent on my site?
Run the free scan. It loads your pages without clicking anything and checks every request that leaves the browser against its tracker catalog, recording the millisecond each match fired. If Criteo OneTag appears, it fired before consent. When your banner has a reject button, the scan clicks it and reports whether the script kept firing.
Where do the case counts on this page come from?
From the complaint text of verified California Invasion of Privacy Act filings. When a complaint names this script, the case is linked to it. Complaints that are not yet available in the public record are not counted, so the number is a floor.

Keep going

Does Criteo OneTag fire before consent on your site?

The free scan checks every request your pages make before the banner is answered, shows the millisecond Criteo OneTag fired, and whether it kept firing after reject.

Free, about a minute, no signup for your score.

Suitcast identifies risk indicators. It is not legal advice and does not determine compliance.