Anthropic · Anthropic Privacy Policy · View original document ↗

Automatic Collection of Device and Location Data

Medium severity High confidence Explicitdocumentlanguage Rare · 1 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Anthropic recorded 2 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Anthropic Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

When you use Claude, Anthropic automatically receives technical details about your device, your approximate location (derived from your IP address), advertising identifiers, and how you use the service.

This analysis describes what Anthropic's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The policy states that advertising identifiers, probabilistic identifiers, and IP-derived location data are collected automatically, which are categories of data with direct relevance to targeted advertising and behavioral profiling capabilities, though the policy states Anthropic does not sell personal data.

Clause Stability Stable

0
Changes
3
Months Monitored
May 12, 2026
First Seen
May 22, 2026
Last Seen
This clause type exists across 3350 other provisions on other platforms.

Consumer impact (what this means for users)

Device and connection data collected automatically includes advertising identifiers, probabilistic identifiers, and location data derived from IP address; users who wish to limit this collection may adjust browser or device permissions, though the policy does not specify the effect of doing so on service functionality.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Review Anthropic's Cookie Policy at anthropic.com/legal/cookies to access opt-out controls for cookie and identifier-based data collection.

How other platforms handle this

Threads Medium

We collect information about your location, such as data from your device's GPS or IP address, when you use our products.

Ledger Medium

At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.

Strava Medium

If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes; we do not disclose it to third parties without your prior consent; and we will only use it for the specific purposes described in this Policy.

See all platforms with this clause type →

Monitoring

Anthropic has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
Device and Connection Information. Consistent with your device or browser permissions, your device or browser automatically sends us information about when and how you install, access, or use our Services. This includes information such as your device type, operating system information, browser information and web page referers, mobile network, connection information, mobile operator or internet service provider (ISP), time zone setting, IP address (including information about the location of the device derived from your IP address), identifiers (including device or advertising identifiers, probabilistic identifiers, and other unique personal or online identifiers), and device location.

— Excerpt from Anthropic's Anthropic Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY LANDSCAPE: This provision engages GDPR Articles 4 and 6 (personal data definition and lawful basis for processing), the ePrivacy Directive regarding cookie and device identifier collection, enforced by EU supervisory authorities; CCPA provisions on personal information including unique identifiers and probabilistic identifiers; and Illinois BIPA to the extent biometric identifiers are involved (though not explicitly stated here). The collection of advertising identifiers and probabilistic identifiers may require evaluation under GDPR lawful basis requirements. (2) GOVERNANCE EXPOSURE: Medium. The enumeration of advertising identifiers and probabilistic identifiers as collected data categories is noteworthy given that the policy simultaneously states Anthropic does not sell personal data and does not engage in targeted advertising of third-party products. The practical use of these identifiers should be documented and reconciled with stated purposes. (3) JURISDICTION FLAGS: EU/EEA users are subject to GDPR and ePrivacy Directive requirements for identifier collection. California residents may evaluate this collection under CPRA sensitive personal information provisions to the extent precise geolocation data is collected. Washington State users integrating health applications are subject to a separate Consumer Health Data Privacy Policy. (4) CONTRACT AND VENDOR IMPLICATIONS: Organizations deploying Claude in enterprise contexts should assess whether automatic collection of device identifiers from employee devices is consistent with their own acceptable use and privacy policies. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should review the Cookie Policy referenced in this document (anthropic.com/legal/cookies) to assess opt-out mechanisms for identifier-based data collection, and verify that consent mechanisms for cookie and identifier collection are implemented consistently with GDPR and ePrivacy requirements for EU-facing services.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has jurisdiction over consumer privacy practices including collection of device identifiers and tracking technologies under its unfair or deceptive practices authority.
    File a complaint →

Applicable regulations

EU AI Act
European Union
BIPA
Illinois, USA
CCPA/CPRA
California, USA
Colorado AI Act
US-CO
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
EU AI Act - High Risk Provisions
EU
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Anthropic Privacy Policy
Entity
Anthropic
Document last updated
May 5, 2026
Tracking information
First tracked
May 9, 2026
Last verified
May 12, 2026
Record ID
CA-P-011309
Document ID
CA-D-00012
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
20bca03faeb6eca729c8a9ece674a093b027618cf9e96f1e0a652dcaef888ca9
Analysis generated
May 9, 2026 14:50 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Anthropic
Document: Anthropic Privacy Policy
Record ID: CA-P-011309
Captured: 2026-05-09 14:50:44 UTC
SHA-256: 20bca03faeb6eca7…
URL: https://conductatlas.com/platform/anthropic/anthropic-privacy-policy/automatic-collection-of-device-and-location-data/
Accessed: June 27, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Anthropic's Automatic Collection of Device and Location Data clause do?

The policy states that advertising identifiers, probabilistic identifiers, and IP-derived location data are collected automatically, which are categories of data with direct relevance to targeted advertising and behavioral profiling capabilities, though the policy states Anthropic does not sell personal data.

How does this clause affect you?

Device and connection data collected automatically includes advertising identifiers, probabilistic identifiers, and location data derived from IP address; users who wish to limit this collection may adjust browser or device permissions, though the policy does not specify the effect of doing so on service functionality.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.

Is ConductAtlas affiliated with Anthropic?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Anthropic.