Recent changes
A chronological feed of substantive shifts in the legal documents we track. 53 changes so far.
Hinge mostly clarified wording and contact details, and shortened one data-retention period for customer care exchanges from six years to five.
Roblox now limits personalized ads to users 18+ and clarifies ad-account data collection and disclosure to authorities.
Meta added a detailed legal-basis section, clarified rights, and expanded ad and account-centre processing disclosures.
Added a GDPR-style legal-basis section and expanded rights, while also broadening account-centre data combination, partner processing, and ad personalization disclosures.
Amazon’s privacy notice was localized for Australia, shifting to Australian entities, spelling, and contacts while adding cross-border sharing details and replacing US-specific references.
Amazon's Australia privacy notice replaces the U.S. version, adds Australian-specific wording and cross-border disclosures, and narrows some access/children provisions.
Roblox says its updated policy clarifies who can see personalized and non-personalized ads and adds details about sharing information with authorities.
Amazon broadened its privacy notice with U.S. state disclosures, added more account and advertising controls, and expanded data collection/use details, including store surveillance and new access rights.
Amazon’s privacy notice was updated to a U.S. version, adding state privacy disclosures, broader store data collection, new ad/privacy choices, and Washington-law dispute terms.
GitHub updated its privacy policy to allow use of user content and affiliate sharing for AI/ML product development and training, and tied private repository access to the Terms of Service.
GitHub added AI/ML training and improvement uses for personal data, including AI outputs and affiliate sharing, and tied private repository access to the Terms of Service.
Amazon’s privacy notice is localized for Australia, shifting to Australian entities and laws, adding cross-border disclosures, and changing some access, choices, and children’s privacy details.
Roblox added disclosures on children’s persistent identifiers, service-provider processing, and retention periods, including age-assurance selfies and up to two years of security-related retention after account deletion.
PayPal greatly expands its privacy policy to allow broader data collection, AI/automated decision-making, personalized shopping disclosures, and sharing with partners, merchants, affiliates, and service providers.
Walmart greatly expanded its privacy notice, adding broad new data collection, advertising/sharing disclosures, VIZIO account linking, biometric/geolocation details, and regional rights information.
GitLab expanded data collection and sharing, added DPF transfer terms, and narrowed deletion/privacy-request handling for paid or enterprise accounts.
Medium replaced an error page with a detailed privacy policy describing broad data collection, sharing, international transfers, and user rights under California and European laws.
Robinhood replaced a minimal notice with a detailed policy allowing AI training on user interactions, targeted advertising, affiliate sharing, and broad data use for its new Social product.
Binance replaced a narrow KYC/automated-decision explanation with a comprehensive privacy notice that greatly expands disclosed data collection, sharing, profiling, AI use, and children’s account terms.
Wise replaced a sparse notice with a detailed privacy policy expanding disclosed data collection, sharing, automated decision-making, marketing, international transfers, and country-specific rights and disclosures.
Bolt replaced a basic cookie notice with a full passenger privacy policy detailing extensive data collection, sharing, retention, profiling, identity checks, ratings-based suspensions, and marketing uses.
Privacy policy now explicitly allows broader collection from third-party/public sources and for AI training, plus analytics/advertising cookie use and detailed EU/California privacy rights.
Messenger now points to Meta’s broader Privacy Policy, expanding disclosed collection, sharing, AI training, cross-company use, off-platform tracking, and longer retention/deletion timelines.
Threads replaced a placeholder page with Meta’s full privacy policy, broadly expanding disclosed data collection, cross-company sharing, AI use, advertising, retention and law-enforcement sharing.
Privacy policy now broadly expands data collection, session recording, affiliate/third-party sharing, cross-service advertising uses, and covers all WBD services beyond HBO Max.