When a user views content shared through Dropbox features that offer analytics to content owners, Dropbox collects and shares the viewer's email address, IP address, device identifiers, and content engagement data including viewing duration, frequency, and specific portions viewed, and discloses this information to the file or folder owner.
This analysis describes what Dropbox's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes the transmission of viewer identity and behavioral engagement data to third-party content owners, meaning an individual who views a Dropbox-shared file may have their personal identifiers and viewing behavior disclosed to the file owner without a separate consent prompt at the point of viewing. Compliance teams should evaluate whether this data flow is adequately documented in their records of processing and disclosed to employees or other individuals who may view externally shared content.
Under this clause, viewing content shared via analytics-enabled Dropbox features results in the disclosure of the viewer's email address, IP address, device identifiers, and detailed engagement data to the content owner. This provision applies to users who may not have a Dropbox account but access shared content through a Dropbox link.
Cross-platform context
See how other platforms handle Recipient and Viewer Analytics Disclosure and similar clauses.
Compare across platforms →"When you view content included in portions of our Services that provide analytics to content owners, we collect information including your identifying and device information, such as email addresses, IP addresses, and device identifiers of devices you use to view the content. We also collect information on how you interact with the viewed content, such as the date and time you view the content, the number of times and length of time you view the content, and which portions of the content you view.Excerpt from Dropbox's Privacy Policy
1) REGULATORY LANDSCAPE: This provision implicates GDPR Articles governing lawful basis for processing and transparency obligations, as the disclosure of viewer identity and behavioral data to content owners may constitute a separate processing activity requiring …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision authorizes the transmission of viewer identity and behavioral engagement data to third-party content owners, meaning an individual who views a Dropbox-shared file may have their personal identifiers and viewing behavior disclosed to the file owner without a separate consent prompt at the point of viewing. Compliance teams should evaluate whether this data flow is adequately documented in their …
Under this clause, viewing content shared via analytics-enabled Dropbox features results in the disclosure of the viewer's email address, IP address, device identifiers, and detailed engagement data to the content owner. This provision applies to users who may not have a Dropbox account but access shared content through a Dropbox link.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Dropbox.