This analysis describes what Affirm's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Users who rely on DNT signals to limit tracking will not have those signals honored by Affirm, meaning DNT-based opt-outs have no effect with Affirm.
The updated Privacy Policy establishes that Affirm qualifies as a financial institution under the Gramm-Leach-Bliley Act, meaning personal information collected in connection with Affirm services is governed by federal banking law rather than applicable state privacy laws. The policy now explicitly discloses collection of identity and profile information including full name, date of birth, Social Security number, email, mailing address, phone number, and password. The updated terms also disclose new data sharing arrangements with fraud prevention, identity verification, and risk intelligence providers, which were not previously detailed. You can contact Affirm's privacy team using the phone number provided in the updated policy to exercise data privacy rights.
View change record →Sending a DNT signal has no effect on Affirm's data practices; only legally required signals such as GPC will be honored.
How other platforms handle this
YOU UNDERSTAND THAT FAIRE DOES NOT SCREEN OR INQUIRE INTO THE BACKGROUND OF ANY USERS OF THE SERVICES, NOR DOES FAIRE MAKE ANY ATTEMPT TO VERIFY THE STATEMENTS OF USERS OF THE SERVICES.
Any non-binding quotes provided by the Zillow Companies for Third-Party Providers' financial products are not intended to be official Loan Estimates as defined in the Real Estate Settlement Procedures Act or the Truth in Lending Act...
If you would like to submit a legally binding request to demand someone else's Personal Data (for example, if you have a subpoena or court order), please review our Guidelines for Legal Requests.
Monitoring
Affirm has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"we do not currently recognize or respond to DNT signals. However, as mentioned above, we do honor legally required browser-based signals such as GPC.— Excerpt from Affirm's Affirm Privacy Policy
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Users who rely on DNT signals to limit tracking will not have those signals honored by Affirm, meaning DNT-based opt-outs have no effect with Affirm.
Sending a DNT signal has no effect on Affirm's data practices; only legally required signals such as GPC will be honored.
ConductAtlas has identified this type of provision across 273 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Affirm.