Provision record
Figma · Figma Privacy Policy (Superseded URL) · View original document ↗

Advertising Partner Data Collection via Tracking Technologies

Medium severity High confidence Explicit document language Unique · 0 of 352 platforms
Stay ahead of the changes
Track Figma and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

The policy states that third-party advertising partners are permitted to deploy tracking technologies on Figma's services to collect IP addresses, cookie identifiers, page visit data, location, and time-of-day data for use in interest-based advertising on third-party services.

This analysis describes what Figma's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision authorizes third-party advertising partners to independently collect identifiable behavioral data from Figma users across the service, and that data is then used for cross-site targeted advertising, engaging CCPA sale and sharing provisions and GDPR consent requirements for EU users.

Recent Activity

This document changed recently

Medium May 28, 2026

The updated terms now restrict how Figma may use personal information from children. Children may only use the Services through a Figma for Education Enterprise agreement with their school, and Figma explicitly prohibits using children's personal information to train or improve AI services, serve targeted advertisements, or enable third-party tracking. Parents may contact Figma if they learn a child provided personal information without consent outside of an education agreement.

View change record →

Clause Stability Stable

0
Changes
4
Months Monitored
Jul 9, 2026
First Seen
Jul 9, 2026
Last Seen

Consumer impact (what this means for users)

Under this provision, third-party advertising partners may collect a user's IP address, cookie identifiers, pages visited, inferred location, and time-of-day data through Figma's services, and use that data to serve targeted advertisements on other websites and services. Users can opt out through the 'Manage Cookies' tool in the Figma website footer or through industry opt-out platforms listed in the policy.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Visit figma.com, scroll to the footer, and click 'Manage Cookies' to access the cookie consent tool. Adjust your preferences to opt out of advertising and tracking cookies. You may need to log out of your Figma account to access the footer.

Cross-platform context

See how other platforms handle Advertising Partner Data Collection via Tracking Technologies and similar clauses.

Compare across platforms →
▸ View Original Clause Language DOCUMENT RECORD
"
Through our Services, we allow third-party advertising partners to set Technologies and other tracking tools to collect information regarding your activities and your device (e.g., your IP address, cookie identifiers, page(s) visited, location, time of day). These advertising partners use this information (and similar information collected from other websites) for purposes of delivering targeted advertisements to you when you visit third-party services within their networks. This practice is commonly referred to as "interest-based advertising" or "personalized advertising."

Excerpt from Figma's Privacy Policy (Superseded URL)

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

1.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • Federal Trade Commission (ftc)
    Oversees unfair or deceptive business practices and can investigate companies that mislead consumers about data collection, sharing, or use.
    Who can file: Anyone affected by the company's practices (US or international)
    What you need: Your account details, a timeline of relevant events, and a description of the specific issue
    What to expect: Complaints inform FTC enforcement priorities and investigations but do not result in individual resolution or compensation
    File a complaint →
  • State Attorney General
    State AGs in California, New York, Texas, and other states can investigate violations of state consumer protection and privacy laws, including CCPA (California), SHIELD Act (New York), and equivalents.
    Who can file: Residents of states with comprehensive privacy laws — primarily California, Virginia, Colorado, Connecticut, and Utah
    What you need: Evidence of the violation, explanation of how your state rights were affected, and your account or contact information with the company
    What to expect: Outcomes vary by state. May result in investigation, enforcement action, or requirement for the company to change practices. No direct individual compensation in most cases.

    Search "[your state] attorney general consumer complaint" to find your state's direct complaint form

Provision details

Document information
Document
Figma Privacy Policy (Superseded URL)
Entity
Figma
Document last updated
May 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-015825
Document ID
CA-D-00544
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
f7f03821eec4a58f9dc0198f7828ff49a980d5d548d3fa82093da85a7a1559da
Analysis generated
July 9, 2026 08:53 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Figma
Document: Figma Privacy Policy (Superseded URL)
Record ID: CA-P-015825
Captured: 2026-07-09 08:53:35 UTC
SHA-256: f7f03821eec4a58f…
URL: https://conductatlas.com/platform/figma/figma-privacy-policy-superseded-url/provision/CA-P-015825/advertising-partner-data-collection-via-tracking-technologies/
Accessed: Sept. 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Figma's Advertising Partner Data Collection via Tracking Technologies clause do?

This provision authorizes third-party advertising partners to independently collect identifiable behavioral data from Figma users across the service, and that data is then used for cross-site targeted advertising, engaging CCPA sale and sharing provisions and GDPR consent requirements for EU users.

How does this clause affect you?

Under this provision, third-party advertising partners may collect a user's IP address, cookie identifiers, pages visited, inferred location, and time-of-day data through Figma's services, and use that data to serve targeted advertisements on other websites and services. Users can opt out through the 'Manage Cookies' tool in the Figma website footer or through industry opt-out platforms listed in the policy.

Is ConductAtlas affiliated with Figma?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Figma.