Skip to content

Email marketing from Klaviyo

Klaviyo onsite tracking and website tracking lawsuits

Klaviyo's onsite script tracks which products a visitor views and powers pop-ups and abandoned cart emails.

Free, about a minute, no signup for your score.

What Suitcast knows about Klaviyo onsite tracking

Medium risk

Type
Email marketing
Complaints naming it, 12 months
7

Requests the scanner matches to it

  • static.klaviyo.com
  • static-tracking.klaviyo.com
  • a.klaviyo.com
  • fast.a.klaviyo.com
  • .klaviyo.com

The short answer

Klaviyo onsite tracking is an email marketing script from Klaviyo. Suitcast rates its risk under the California Invasion of Privacy Act, CIPA, as medium, because complaints describe scripts like it recording visitors before they consent. It is named in 7 verified complaints in the last 12 months. The fix is to load it only after a visitor accepts, or to remove it when it is not used.

Why complaints name it

Complaints describe it as recording browsing activity and typed email addresses before the visitor agreed.

The act allows $5,000 per violation, which is why firms look for scripts that run the moment a page opens.

The fix

How to stop Klaviyo onsite tracking firing before consent

Written for the person who runs the site, with the setting to change.

  1. On Shopify, open the Klaviyo app settings and make sure onsite tracking follows Shopify's customer privacy banner; on WordPress, load the script through your consent plugin.

  2. If you stopped sending email through Klaviyo, remove the script.

How the scan checks this

  1. Loads your pages like a first visit. A real browser, nothing clicked, nothing accepted.
  2. Checks every request before the banner is answered. A request to static.klaviyo.com is matched to Klaviyo onsite tracking and recorded with the millisecond it fired.
  3. Clicks reject and watches again. When the banner has a reject button, the scan presses it; if Klaviyo onsite tracking keeps firing, the report says so.

Scanner rules and limits are on the methodology page.

Trend

Complaints naming Klaviyo onsite tracking, month by month

Verified tracking complaints whose text names this script, by the month they were filed.

Website accessibility (ADA) Website tracking (CIPA)

November 2025 to October 2026, current month to date

Court records

Latest verified complaints naming Klaviyo onsite tracking

Newest first. Every row links to the court record.
  1. Tracking

    Ramirez v. Resident Home, LLC

    N.D. California. Attributed to Florida

    Court recordfor Ramirez v. Resident Home, LLC (opens in a new tab)
  2. Tracking

    A.G. v. STIIIZY, Inc

    C.D. California, filed by Almeida Law Group LLC. Attributed to California

    Court recordfor A.G. v. STIIIZY, Inc (opens in a new tab)
  3. Tracking

    Brown v. Trove Brands, LLC

    N.D. California. Attributed to Utah

    Court recordfor Brown v. Trove Brands, LLC (opens in a new tab)
  4. Tracking

    Heidi Fenton v. The Bird and Be Co., Inc.

    C.D. California

    Court recordfor Heidi Fenton v. The Bird and Be Co., Inc. (opens in a new tab)
  5. Tracking

    Cantin v. Polaroid America Corp

    N.D. California. Attributed to New York

    Court recordfor Cantin v. Polaroid America Corp (opens in a new tab)
  6. Tracking

    Lutge v. Timex.com, Inc.

    N.D. California, filed by Bursor & Fisher, P.A.. Attributed to Connecticut

    Court recordfor Lutge v. Timex.com, Inc. (opens in a new tab)
  7. Tracking

    Jones-Rubin v. Good American, LLC

    N.D. California, filed by Bursor & Fisher, P.A.. Attributed to California

    Court recordfor Jones-Rubin v. Good American, LLC (opens in a new tab)

Same type

Other email marketing scripts the scanner checks

Scripts of the same kind carry the same pattern in complaints, and the same fix.

Questions owners ask

Whether Klaviyo onsite tracking is a problem, how to check your site, and where the counts come from.
Is having Klaviyo onsite tracking on my site illegal?
No. The complaints do not claim the script is illegal; they claim it recorded a visitor before the visitor consented, or kept recording after the visitor declined. Loading Klaviyo onsite tracking only after consent, or removing it when it is not used, is what removes the pattern the complaints describe.
How do I know if Klaviyo onsite tracking fires before consent on my site?
Run the free scan. It loads your pages without clicking anything and checks every request that leaves the browser against its tracker catalog, recording the millisecond each match fired. If Klaviyo onsite tracking appears, it fired before consent. When your banner has a reject button, the scan clicks it and reports whether the script kept firing.
Where do the case counts on this page come from?
From the complaint text of verified California Invasion of Privacy Act filings. When a complaint names this script, the case is linked to it. Complaints that are not yet available in the public record are not counted, so the number is a floor.

Keep going

Does Klaviyo onsite tracking fire before consent on your site?

The free scan checks every request your pages make before the banner is answered, shows the millisecond Klaviyo onsite tracking fired, and whether it kept firing after reject.

Free, about a minute, no signup for your score.

Suitcast identifies risk indicators. It is not legal advice and does not determine compliance.