Is having Mailchimp site tracking on my site illegal?

No. The complaints do not claim the script is illegal; they claim it recorded a visitor before the visitor consented, or kept recording after the visitor declined. Loading Mailchimp site tracking only after consent, or removing it when it is not used, is what removes the pattern the complaints describe.

How do I know if Mailchimp site tracking fires before consent on my site?

Run the free scan. It loads your pages without clicking anything and checks every request that leaves the browser against its tracker catalog, recording the millisecond each match fired. If Mailchimp site tracking appears, it fired before consent. When your banner has a reject button, the scan clicks it and reports whether the script kept firing.

Where do the case counts on this page come from?

From the complaint text of verified California Invasion of Privacy Act filings. When a complaint names this script, the case is linked to it. Complaints that are not yet available in the public record are not counted, so the number is a floor.

Email marketing from Intuit Mailchimp

Mailchimp site tracking and website tracking lawsuits

Mailchimp's connected site script tracks visitor page views and product interest to power pop-ups and follow-up emails.

What Suitcast knows about Mailchimp site tracking

Medium risk

Type: Email marketing
Vendor: Intuit Mailchimp

Requests the scanner matches to it

chimpstatic.com
.chimpstatic.com
.list-manage.com
downloads.mailchimp.com

The short answer

Mailchimp site tracking is an email marketing script from Intuit Mailchimp. Suitcast rates its risk under the California Invasion of Privacy Act, CIPA, as medium, because complaints describe scripts like it recording visitors before they consent. The fix is to load it only after a visitor accepts, or to remove it when it is not used.

Why complaints name it

Complaints describe it as collecting browsing activity before the visitor agreed.

The act allows $5,000 per violation, which is why firms look for scripts that run the moment a page opens.

The fix

How to stop Mailchimp site tracking firing before consent

Written for the person who runs the site, with the setting to change.

Load the script only after accept through your WordPress consent plugin or Google Tag Manager consent mode, or turn off site tracking in Mailchimp under Integrations if you only use it to send newsletters.

How the scan checks this

Loads your pages like a first visit. A real browser, nothing clicked, nothing accepted.
Checks every request before the banner is answered. A request to chimpstatic.com is matched to Mailchimp site tracking and recorded with the millisecond it fired.
Clicks reject and watches again. When the banner has a reject button, the scan presses it; if Mailchimp site tracking keeps firing, the report says so.

Scanner rules and limits are on the methodology page.

Same type

Other email marketing scripts the scanner checks

Scripts of the same kind carry the same pattern in complaints, and the same fix.

Questions owners ask

Whether Mailchimp site tracking is a problem, how to check your site, and where the counts come from.

Is having Mailchimp site tracking on my site illegal?: No. The complaints do not claim the script is illegal; they claim it recorded a visitor before the visitor consented, or kept recording after the visitor declined. Loading Mailchimp site tracking only after consent, or removing it when it is not used, is what removes the pattern the complaints describe.
How do I know if Mailchimp site tracking fires before consent on my site?: Run the free scan. It loads your pages without clicking anything and checks every request that leaves the browser against its tracker catalog, recording the millisecond each match fired. If Mailchimp site tracking appears, it fired before consent. When your banner has a reject button, the scan clicks it and reports whether the script kept firing.
Where do the case counts on this page come from?: From the complaint text of verified California Invasion of Privacy Act filings. When a complaint names this script, the case is linked to it. Complaints that are not yet available in the public record are not counted, so the number is a floor.

Keep going

Does Mailchimp site tracking fire before consent on your site?

The free scan checks every request your pages make before the banner is answered, shows the millisecond Mailchimp site tracking fired, and whether it kept firing after reject.

Suitcast identifies risk indicators. It is not legal advice and does not determine compliance.