Coinbase shares your personal data with a wide range of outside companies including analytics firms, marketing companies, and business partners — not just companies directly running the Coinbase platform.
Reorganized into categorized sharing circumstances (Service Providers, Business Partners, Analytics Partners) and added explicit mention of identity verification and fraud prevention, though excerpt appears truncated in current version.
View full change record →Your transaction history, device identifiers, browsing behavior, and account data may be shared with third-party analytics and marketing partners, potentially for purposes beyond operating the Coinbase platform, which California residents have the right to opt out of.
How other platforms handle this
Process information about your contacts. We may use Personal Information in order to make it easy for you to find and connect your contacts, improve payment accuracy and suggest connections with people you may know. By providing us with information about your contacts you certify that you have permi...
In order to provide financial services and in connection with our everyday business purposes and activities, we may share your personal information with third parties who perform services on our behalf. Examples of these third parties and services include consumer identification verification service...
Microsoft complies with applicable legal requirements providing adequate protection for the transfer of personal data to countries outside of the EEA. We transfer personal data from the EEA using the European Commission approved Standard Contractual Clauses.
Sharing your financial and identity data with marketing and analytics partners goes beyond what many consumers expect from a financial platform and may constitute a 'sale' or 'sharing' of personal information under California law, triggering opt-out rights.
(1) REGULATORY FRAMEWORK: This provision implicates CCPA/CPRA §1798.120 (right to opt out of sale/sharing), §1798.140(ad) (definition of 'sharing' for cross-context behavioral advertising), GDPR Art. 6(1)(f) legitimate interests test and Art. 26 joint controller obligations, GLBA 16 CFR Part 313 (financial privacy notice and opt-out), and FTC Act Section 5 (unfair/deceptive practices). Enforcement: CPPA, FTC, state AGs. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.