Craigslist Privacy Policy

This document is Craigslist's privacy policy (updated May 29, 2024) governing data collection, use, storage, and disclosure across its websites, mobile applications, and related services. The policy explicitly states that Craigslist does not sell user data to third parties, does not share data for marketing purposes, and does not run advertising beyond user-posted classifieds; data is disclosed externally only to payment processors, phone verification service providers, fraud-prevention service providers, and in response to legal process or corporate transactions. Notably, the policy does not respond to 'Do Not Track' signals, makes no guarantee of data security (stating only 'good faith efforts'), and the international data transfer clause operates as a consent-by-use mechanism, which may engage evaluation under GDPR adequacy and transfer requirements for users in the EU and EEA. The policy acknowledges California Consumer Privacy Act rights for California residents, including rights to know, delete, and non-discrimination, with submission mechanisms at a dedicated URL and email address; it also provides a minor-user content removal mechanism under California law. Compliance teams should note the absence of explicit references to GDPR consent bases, data processing agreements, or a formal data retention schedule, which may create exposure for operations affecting EU or UK users.