The policy states that Figma recognizes GPC signals from supported browsers and treats them as CCPA opt-out requests for sale and sharing of personal information for targeted advertising, when the signal can be associated with an identifiable consumer. DNT signals are not recognized.
This analysis describes what Figma's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision operationalizes CCPA's GPC signal recognition requirement, establishing that GPC-enabled browsers trigger an opt-out of sale and sharing for targeted advertising, while also providing a manual opt-out mechanism through the Manage Cookies footer link. The policy's qualification that recognition depends on the ability to associate the signal with an identifiable consumer introduces a practical limitation on GPC effectiveness.
The updated terms now restrict how Figma may use personal information from children. Children may only use the Services through a Figma for Education Enterprise agreement with their school, and Figma explicitly prohibits using children's personal information to train or improve AI services, serve targeted advertisements, or enable third-party tracking. Parents may contact Figma if they learn a child provided personal information without consent outside of an education agreement.
View change record →Under this provision, California users who enable a GPC signal in a supported browser will have that signal treated as a CCPA opt-out from the sale or sharing of their personal information for targeted advertising, subject to Figma's ability to associate the signal with their identity. An alternative manual opt-out is available through the 'Manage Cookies' link in the figma.com footer.
Cross-platform context
See how other platforms handle GPC Signal Recognition and CCPA Opt-Out and similar clauses.
Compare across platforms →"Do Not Track ("DNT") and Global Privacy Consent ("GPC") signals are a privacy preferences that users can set in certain web browsers. We do not respond to DNT signals; however, we do recognize and process GPC signals by certain web browsers. If we are able to reasonably associate a GPC signal with an identifiable consumer, we will treat it as a request to opt-out of the "sale" or "sharing"/processing for targeted advertising of that consumer's personal information (as such terms are defined by the California Consumer Privacy Act). You can also opt out of the "sale" or "sharing" of your personal information by clicking on the "Manage Cookies" link in the footer of figma.com.Excerpt from Figma's Privacy Policy (Superseded URL)
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision operationalizes CCPA's GPC signal recognition requirement, establishing that GPC-enabled browsers trigger an opt-out of sale and sharing for targeted advertising, while also providing a manual opt-out mechanism through the Manage Cookies footer link. The policy's qualification that recognition depends on the ability to associate the signal with an identifiable consumer introduces a practical limitation on GPC effectiveness.
Under this provision, California users who enable a GPC signal in a supported browser will have that signal treated as a CCPA opt-out from the sale or sharing of their personal information for targeted advertising, subject to Figma's ability to associate the signal with their identity. An alternative manual opt-out is available through the 'Manage Cookies' link in the figma.com …
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Figma.