Eventbrite may share your personal data with advertising companies to show you targeted ads, and under California law this may count as a 'sale' of your data, but you can opt out through your account settings.
This analysis describes what Eventbrite's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Your browsing behavior, event interests, and personal identifiers may be shared with advertising partners for targeted advertising, and exercising the opt-out requires affirmative action by the user.
Interpretive note: Whether Eventbrite's opt-out mechanism satisfies CPRA's GPC recognition requirement and whether advertising data flows qualify as 'sale' or 'sharing' depends on implementation details not fully disclosed in the policy text.
The updated terms expand the circumstances under which your email address is shared with event organizers. Previously, Eventbrite shared email addresses only with organizers of events you registered for. Under the revised policy, your email is also shared with organizers if you elect to receive their marketing communications through the Eventbrite platform. The policy clarifies that organizers own the data relationship with you for these marketing subscriptions, while Eventbrite processes the consent and delivery on their behalf.
View change record →The updated terms establish formal procedures for UK-based users to lodge data protection complaints directly with Eventbrite via privacy@eventbrite.com, with assurance that complaints will follow ICO guidelines. The revised policy also confirms that all users have the right to escalate complaints to their national data protection authority or applicable regulator if they believe Eventbrite has violated privacy laws or has not adequately addressed their request. Previously, the policy referenced a Data Privacy Framework Notice but did not specify complaint procedures or regulatory escalation pathways. These additions clarify existing legal rights under UK and EU data protection law rather than creating new consumer obligations.
View change record →Previous version had empty excerpt; current version now clarifies mechanisms for opting out (account settings and privacy portal) and explicitly defines data sharing as potential 'sale' or 'sharing' under privacy laws.
View full change record →Users who do not actively opt out may have their personal data including behavioral and interest data shared with advertising partners for cross-context behavioral advertising, which California law classifies as a regulated 'sale or sharing' of personal information.
How other platforms handle this
We will also provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
"We may share your personal information with advertising partners for the purpose of showing you ads that are more relevant to you. This may constitute a 'sale' or 'sharing' of personal information under applicable privacy laws. You have the right to opt out of the sale or sharing of your personal information for targeted advertising purposes. To exercise this right, you can visit your account privacy settings or submit a request through our privacy portal.Excerpt from Eventbrite's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Your browsing behavior, event interests, and personal identifiers may be shared with advertising partners for targeted advertising, and exercising the opt-out requires affirmative action by the user.
Users who do not actively opt out may have their personal data including behavioral and interest data shared with advertising partners for cross-context behavioral advertising, which California law classifies as a regulated 'sale or sharing' of personal information.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Eventbrite.