FanDuel collects your exact GPS location from your mobile device and shares it with vendors and, under Section 4.10, potentially with sports leagues, regulators, and law enforcement.
This analysis describes what FanDuel's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Precise GPS-level location data is among the most sensitive categories of personal information because it can reveal where you live, work, worship, or seek medical care, and this policy authorizes sharing it with a broad set of third parties beyond what is necessary for basic service delivery.
The updated privacy policy no longer explicitly covers the FanDuel Fantasy Picks platform (www.fanduel.com/picks) and its mobile app. Previously, the policy stated it applied to the DFS Site, Skill Games Site, and Picks Site together. Now only the DFS Site and Skill Games Site are listed in the policy scope. This creates ambiguity about what privacy rules, data collection practices, retention periods, and user rights apply to your Fantasy Picks account. You should review FanDuel's website to determine whether a separate privacy policy governs Fantasy Picks data, or contact FanDuel directly to clarify what privacy terms apply to that service.
View change record →Your exact physical location is collected whenever you use FanDuel's mobile app and may be shared with advertising vendors, gaming regulators, and the other third parties listed in Section 4.10, creating a detailed record of your movements that extends well beyond gameplay purposes.
How other platforms handle this
We collect information about your location, such as data from your device's GPS or IP address, when you use our products.
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes; we do not disclose it to third parties without your prior consent; and we will only use it for the specific purposes described in this Policy.
Monitoring
FanDuel has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Our Services use precise location-based services (e.g., location collected through GPS technology) in order to locate you so we may verify your location, process payments, perform analytics, deliver you relevant content and ads based on your location, share your location with our vendors as part of the location-based services we offer, and for purposes of legal and regulatory compliance. We also collect non-precise geolocation data (i.e., the city and state in which your device is located based on its IP address). Both precise and non-precise geolocation may be disclosed to third party entities pursuant to Section 4.10 below.— Excerpt from FanDuel's FanDuel Privacy Policy
(1) REGULATORY LANDSCAPE: Precise geolocation data is classified as sensitive personal information under the CPRA (California), and several other state privacy laws including Colorado, Virginia, and Connecticut impose heightened obligations on its collection and use. The FTC has issued guidance treating precise geolocation as a sensitive data category warranting enhanced protection. This provision should be evaluated under each applicable state's sensitive data consent and opt-out requirements. (2) GOVERNANCE EXPOSURE: High. The policy asserts authority to collect continuous GPS-level location data and share it with vendors and third parties under Section 4.10 without a separate consent mechanism specific to sensitive geolocation. Under CPRA and analogous state laws, processing sensitive personal information for purposes beyond service delivery may require opt-in consent rather than opt-out mechanisms. (3) JURISDICTION FLAGS: California residents have the strongest statutory protections for sensitive geolocation data under CPRA. Illinois, Texas, and Washington have enacted or proposed specific location data protections. EU and UK users, if any access the platform, would face the highest bar under GDPR Article 5 purpose limitation and data minimization principles for GPS-level tracking. (4) CONTRACT AND VENDOR IMPLICATIONS: The policy notes that location is shared with vendors as part of location-based services without identifying those vendors specifically. This lack of specificity may complicate data mapping exercises and vendor due diligence. Compliance teams should confirm data processing agreements with all geolocation vendors include appropriate restrictions on downstream use. (5) COMPLIANCE CONSIDERATIONS: Teams should assess whether the current opt-out mechanism for data sales and targeted advertising sharing is sufficient to address sensitive geolocation sharing under applicable state laws, or whether an opt-in consent mechanism is required. A data mapping exercise to identify all vendor recipients of GPS data is recommended.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Precise GPS-level location data is among the most sensitive categories of personal information because it can reveal where you live, work, worship, or seek medical care, and this policy authorizes sharing it with a broad set of third parties beyond what is necessary for basic service delivery.
Your exact physical location is collected whenever you use FanDuel's mobile app and may be shared with advertising vendors, gaming regulators, and the other third parties listed in Section 4.10, creating a detailed record of your movements that extends well beyond gameplay purposes.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by FanDuel.