Captured before automated identity checks (Oct 14, 2026): accurate as of its capture on Sep 11, 2026; our capture on Oct 15, 2026 found the same text, but its identity was not checked by them.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This document establishes Craigslist's practices regarding collection, use, and storage of personal information including name, email, phone number, location, and device data. The policy specifies that personal data is not sold or shared for advertising purposes, but authorizes transfer and storage of user data on United States-based servers regardless of user location. The document states that data security measures are provided on a good faith basis without guarantee of complete protection.
This document is Craigslist's privacy policy (updated May 29, 2024) governing data collection, use, storage, and disclosure across its websites, mobile applications, and related services. The policy explicitly states that Craigslist does not sell user data to third parties, does not share data for marketing purposes, and does not run advertising beyond user-posted classifieds; data is disclosed externally only to payment processors, phone verification service providers, fraud-prevention service providers, and in response to legal process or corporate transactions. Notably, the policy does not respond to 'Do Not Track' signals, makes no guarantee of data security (stating only 'good faith efforts'), and the international data transfer clause operates as a consent-by-use mechanism, which may engage evaluation under GDPR adequacy and transfer requirements for users in the EU and EEA. The policy acknowledges California Consumer Privacy Act rights for California residents, including rights to know, delete, and non-discrimination, with submission mechanisms at a dedicated URL and email address; it also provides a minor-user content removal mechanism under California law. Compliance teams should note the absence of explicit references to GDPR consent bases, data processing agreements, or a formal data retention schedule, which may create exposure for operations affecting EU or UK users.
The policy establishes that Craigslist collects personal information and shares specified subsets with payment processors, phone verification providers, and fraud-prevention services. Users operate under a framework where data is not sold for marketing purposes, but where security protections are limited to good faith efforts rather than enforceable guarantees. The document authorizes California residents to request access to or deletion of personal data through designated channels (craigslist.org/about/ccpa or ccpa@craigslist.org).
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“By accessing CL or providing us data, you agree we may use and disclose data we collect as described here or as communicated to you, transmit it outside your resident jurisdiction, and store it on servers in the United States.”
“Right to know: You have the right to request that we disclose the data we collect, use and disclose, and other information relating to data we collect about you. Right to delete: You have the right to request the deletion …”
“We may share some or all of the above listed data in the following circumstances: to respond to subpoenas, search warrants, court orders, or other legal process. to protect the rights, property, or safety of CL users, CL, or the …”
“We may share some or all of the above listed data in the following circumstances: to respond to subpoenas, search warrants, court orders, or other legal process. to protect the rights, property, or safety of CL users, CL, or the …”
“We retain data as needed to facilitate and personalize your use of CL, combat fraud/abuse and/or as required by law. We make good faith efforts to store data securely, but can make no guarantees.”
“We retain data as needed to facilitate and personalize your use of CL, combat fraud/abuse and/or as required by law.”
“We make good faith efforts to store data securely, but can make no guarantees.”
“By accessing CL or providing us data, you agree we may use and disclose data we collect as described here or as communicated to you, transmit it outside your resident jurisdiction, and store it on servers in the United States.”
“Right to know: You have the right to request that we disclose the data we collect, use and disclose, and other information relating to data we collect about you. Right to delete: You have the right to request the deletion …”
“We do not respond to "Do Not Track" signals (see allaboutdnt.com).”
“If you are a registered CL user under the age of 18, you may request (via eraser@craigslist.org) and obtain removal of content or information publicly posted on CL. Please note that removal does not ensure complete or comprehensive removal of …”
“We do not share your data with third parties for marketing purposes. We do not engage in cross-marketing or link-referral programs. We do not employ tracking devices for marketing purposes. We do not send you unsolicited communications for marketing purposes. …”
We have not recorded a change to this document since we began capturing it. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle International Data Transfer — Consent by Access and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.