Substack vs Wikipedia
Side-by-side comparison of the Terms of Service and Privacy Policy of Substack and Wikipedia.
Substack offers meaningful privacy rights and self-service deletion/editing, and it says creators keep ownership of posts. But those benefits are outweighed by mandatory arbitration, class-action waiver, low liability cap, a perpetual irrevocable content license, broad account termination discretion, significant data collection/sharing, and cross-site tracking without Do Not Track support.
Substack’s legal terms are fairly standard for a publishing platform but tilt mixed-to-user-unfriendly in key areas. Users keep ownership of their content and get account-level access, correction, deletion, portability, and objection rights, but Substack takes a perpetual irrevocable content license, broad liability protections, arbitration with class-action waiver, broad sharing with creators/service providers, and allows tracking cookies including cross-site activity without honoring Do Not Track.
Points of interest
-
negative ●●●●● termsMandatory arbitration waiver
Most disputes must be resolved through individual arbitration in San Francisco County, and you waive class or representative actions. This makes collective claims and court litigation harder for users.
-
negative ●●●●● termsPerpetual content license
You keep ownership of your posts, but Substack gets a royalty-free, perpetual, irrevocable, worldwide license to use and distribute them. That license can continue even after you stop using the service.
-
negative ●●●●○ termsLow liability cap
If something goes wrong, Substack broadly disclaims warranties and caps most liability at the greater of $100 or what you paid in the prior 12 months. Users may have very limited practical recourse for losses.
-
negative ●●●●○ termsBroad termination discretion
Substack can suspend or terminate your account for any reason at its discretion, sometimes without notice. Public posts may also remain available after account deletion.
-
negative ●●●●○ privacyExtensive data sharing
Substack shares personal information with affiliates, creators, service providers, integrated third parties, buyers in a business transfer, and authorities when required. Creator interactions may also be governed by the creator’s own privacy practices rather than Substack’s.
-
negative ●●●●○ privacyCross-site tracking allowed
Substack says it may collect information about your online activity after you leave its site, and it does not honor Do Not Track signals. Users who want minimal tracking do not get that by default.
-
positive ●●●●○ privacyStrong privacy rights listed
Substack states that users may request access, correction, deletion, restriction, portability, and objection, and says it will respond within one month. These are meaningful user controls, especially for EEA/UK-style privacy rights.
-
negative ●●●○○ termsBroad indemnity obligation
You may have to cover Substack’s costs, damages, and attorneys’ fees for third-party claims tied to your use of the platform or violations of the terms. This can shift substantial legal risk onto users.
-
negative ●●●○○ privacyMessages not end-to-end encrypted
Direct messages are not end-to-end encrypted, and Substack personnel may access them for support, safety, or enforcement. Users should not treat Substack DMs as a secure messaging channel.
-
positive ●●●○○ termsSelf-service account deletion
You can edit some profile data and delete your account from account settings without needing to contact support. This is a practical and user-friendly control, even though some public content may persist.
-
positive ●●●○○ termsContent ownership retained
Substack expressly says original content you post remains yours. That is better than terms that claim ownership outright, even though the platform still takes a very broad license.
-
positive ●●○○○ privacyMarketing opt-out available
Substack says marketing emails are based on consent where required and can be unsubscribed from at any time. This is a basic but useful control over promotional communications.
Documents
The service offers strong privacy-friendly features like optional registration details, no sale of personal data, short retention for much nonpublic data, and user data rights. Downsides remain significant: public/permanent contribution history, broad irrevocable content licensing, warranty disclaimers, and California forum and limitation clauses.
Wikipedia/Wikimedia takes a relatively user-friendly legal posture for a large online platform: you can use it without registering, it says it does not sell data, and it offers data rights and advance notice for major privacy changes. Main tradeoffs are that contributions are public and often permanent, content is provided as-is, venue is generally California, and uploaded content is licensed broadly and usually irrevocably.
Points of interest
-
negative ●●●●● privacyEdits are public forever
Anything you contribute is generally public and forms a permanent record tied to your username or temporary account. This can create lasting privacy and reputational consequences.
-
positive ●●●●● privacyMinimal signup data
You can read and even edit without a standard account, and a normal account usually needs only a username and password. This materially lowers the amount of personal data you must hand over to participate.
-
positive ●●●●● privacyNo sale or marketing sharing
Wikimedia expressly says it does not sell your information or share it for third-party marketing. That is a strong privacy commitment compared with many ad-supported platforms.
-
negative ●●●●○ privacyUploads may expose metadata
Photos or videos may include device metadata such as time and location, and that can become public unless you change your device settings. Users can accidentally reveal where or when media was created.
-
negative ●●●●○ termsIrrevocable free content license
If you contribute content you own, you generally license it for broad public reuse under free licenses and cannot later unilaterally revoke that permission. In practice, you give up control over future reuse of your contributions.
-
positive ●●●●○ privacyShort retention default
The policy says personal information is kept only as long as reasonably needed and is often deleted, aggregated, or de-identified after 90 days. This is a meaningful retention limit for nonpublic data.
-
positive ●●●●○ privacyAccess and deletion rights
Users can request access, correction, restriction or objection, deletion-related help, and a copy of their data for transfer. Some data controls and downloads are also available directly in account settings.
-
negative ●●●○○ termsCalifornia forum and short deadline
Legal claims against Wikimedia generally must be brought in San Francisco County under California law, and claims may need to be filed within one year if that is earlier than otherwise allowed. This can make disputes harder for non-California users.
-
negative ●●●○○ termsAs-is warranty disclaimer
Wikimedia provides the service and content without warranties of accuracy, safety, availability, or fitness for a particular purpose. If information is wrong or the service fails, your remedies may be limited.
-
positive ●●●○○ privacyAdvance notice of major changes
Substantial privacy policy changes get advance notice and a 30-day public comment period. This is more transparent than silent or immediate policy updates.
-
neutral ●●○○○ privacyTracking tech used internally
The service uses cookies, local storage, JavaScript, and tracking pixels for security, analytics, and functionality, but says it will not use third-party cookies without permission. This is less aggressive than many sites, though still not tracking-free.
Documents
Comparison is based on each service's published Terms of Service and Privacy Policy. Read the source documents linked above before relying on any specific clause.