Recent changes
A chronological feed of substantive shifts in the legal documents we track. 100 changes so far.
Added a GDPR-style legal-basis section and expanded rights, while also broadening account-centre data combination, partner processing, and ad personalization disclosures.
Amazon’s privacy notice was localized for Australia, shifting to Australian entities, spelling, and contacts while adding cross-border sharing details and replacing US-specific references.
Amazon's Australia privacy notice replaces the U.S. version, adds Australian-specific wording and cross-border disclosures, and narrows some access/children provisions.
Roblox says its updated policy clarifies who can see personalized and non-personalized ads and adds details about sharing information with authorities.
Amazon broadened its privacy notice with U.S. state disclosures, added more account and advertising controls, and expanded data collection/use details, including store surveillance and new access rights.
Amazon’s privacy notice was updated to a U.S. version, adding state privacy disclosures, broader store data collection, new ad/privacy choices, and Washington-law dispute terms.
GitHub updated its privacy policy to allow use of user content and affiliate sharing for AI/ML product development and training, and tied private repository access to the Terms of Service.
GitHub added AI/ML training and improvement uses for personal data, including AI outputs and affiliate sharing, and tied private repository access to the Terms of Service.
Amazon’s privacy notice is localized for Australia, shifting to Australian entities and laws, adding cross-border disclosures, and changing some access, choices, and children’s privacy details.
Roblox added disclosures on children’s persistent identifiers, service-provider processing, and retention periods, including age-assurance selfies and up to two years of security-related retention after account deletion.
PayPal greatly expands its privacy policy to allow broader data collection, AI/automated decision-making, personalized shopping disclosures, and sharing with partners, merchants, affiliates, and service providers.
Walmart greatly expanded its privacy notice, adding broad new data collection, advertising/sharing disclosures, VIZIO account linking, biometric/geolocation details, and regional rights information.
GitLab expanded data collection and sharing, added DPF transfer terms, and narrowed deletion/privacy-request handling for paid or enterprise accounts.
Medium replaced an error page with a detailed privacy policy describing broad data collection, sharing, international transfers, and user rights under California and European laws.
Robinhood replaced a minimal notice with a detailed policy allowing AI training on user interactions, targeted advertising, affiliate sharing, and broad data use for its new Social product.
Binance replaced a narrow KYC/automated-decision explanation with a comprehensive privacy notice that greatly expands disclosed data collection, sharing, profiling, AI use, and children’s account terms.
Wise replaced a sparse notice with a detailed privacy policy expanding disclosed data collection, sharing, automated decision-making, marketing, international transfers, and country-specific rights and disclosures.
Bolt replaced a basic cookie notice with a full passenger privacy policy detailing extensive data collection, sharing, retention, profiling, identity checks, ratings-based suspensions, and marketing uses.
Privacy policy now explicitly allows broader collection from third-party/public sources and for AI training, plus analytics/advertising cookie use and detailed EU/California privacy rights.
Messenger now points to Meta’s broader Privacy Policy, expanding disclosed collection, sharing, AI training, cross-company use, off-platform tracking, and longer retention/deletion timelines.
Threads replaced a placeholder page with Meta’s full privacy policy, broadly expanding disclosed data collection, cross-company sharing, AI use, advertising, retention and law-enforcement sharing.
Privacy policy now broadly expands data collection, session recording, affiliate/third-party sharing, cross-service advertising uses, and covers all WBD services beyond HBO Max.
WhatsApp replaced a brief privacy overview with a full policy detailing extensive data collection, sharing with Meta/businesses/third parties, global transfers, retention, and user rights.
Meta greatly expands disclosed data collection, sharing, AI training, cross-company use, and retention practices, including data from non-users, partners, devices, and legal/safety requests.
Meta greatly expands disclosed data collection, sharing, AI training, cross-company use, retention, and legal/law-enforcement access, including for non-users and off-platform activity.