Cross-Context Behavioral Advertising Disclosure

What it is

Anyscale shares your personal data with advertising partners for targeted advertising purposes. Under California law, this may count as 'selling' your data, and you have the right to opt out.

Why it matters (compliance & governance perspective)

This provision directly affects how your personal information is used for advertising and whether it is shared with third parties you have no direct relationship with.

Change history

Consumer impact (what this means for users)

Your behavioral and device data may be shared with third-party advertising companies for cross-context behavioral advertising, which California law may treat as a sale of personal information. California residents can opt out by contacting privacy@anyscale.com, updating cookie preferences, or using the Global Privacy Control browser extension.

What you can do

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: This provision directly implicates CCPA/CPRA, which defines 'sharing' personal information for cross-context behavioral advertising as a regulated activity subject to opt-out rights regardless of monetary exchange. The California Privacy Protection Agency (CPPA) and the California Attorney General have enforcement authority. The provision also engages the FTC Act's prohibition on unfair or deceptive practices in connection with how opt-out representations are operationalized. GOVERNANCE EXPOSURE: Medium. The policy explicitly acknowledges that sharing data with advertising partners may constitute a 'sale' or 'sharing' under CCPA/CPRA. Compliance exposure depends on whether the opt-out mechanisms (email, cookie preferences, GPC) are fully and technically implemented. The GPC signal recognition commitment is a specific CPPA requirement, and failure to honor it technically constitutes a CPRA violation. JURISDICTION FLAGS: California creates the highest exposure given CPRA's specific opt-out and sensitive data requirements. Virginia, Colorado, Connecticut, and Texas privacy laws contain similar opt-out rights for targeted advertising that may apply depending on user residence, though the policy does not explicitly address these states beyond California and Nevada. CONTRACT AND VENDOR IMPLICATIONS: Organizations using Anyscale's platform should assess whether employee or customer data processed through Anyscale's marketing touchpoints could be captured by this sharing provision. Vendor assessments should confirm that Anyscale's advertising partner contracts include appropriate data processing restrictions and that onward transfer obligations are met. COMPLIANCE CONSIDERATIONS: Legal teams should audit whether Anyscale's GPC signal recognition is technically implemented on all web properties. Cookie consent mechanisms should be reviewed to confirm that advertising cookies are not loaded prior to consent or opt-out signal processing. A 'Do Not Sell or Share My Personal Information' link should be confirmed as present on the website per CPRA requirements.

Applicable agencies

Applicable regulations

Provision details

Other risks in this policy

• Customer Data Carve-Out medium
• EU-U.S. Data Privacy Framework Participation medium
• Automatic Collection of Device and Behavioral Data medium
• Third-Party Data Sharing with Business Partners and Advertising Partners medium
• Privacy Notice Updates at Sole Discretion low
• Data Retention at Company Discretion low

Related Analysis

• OpenAI Changed Its Privacy Policy 4 Times in One Week. Here Is What Actually Changed.

  Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.