Every time you use the Hugging Face platform, it automatically records your IP address, location associated with your session, device type and operating system, browser, and cookie-based preferences without requiring any action from you.
This analysis describes what Hugging Face's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses automatic collection of IP addresses and session location data, which under GDPR and other frameworks qualify as personal data; this collection occurs passively for all users regardless of account status.
The policy states that Hugging Face automatically collects your IP address, approximate session location, device identifiers, operating system, browser type, and cookie data each time you use the Services, including when browsing without being logged in.
How other platforms handle this
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
"The Company automatically records information from your use of the Services such as: information about your Use of the Services, your session (date, location), your IP address, information from cookies, especially your login information, your preferences, information about your device: type, model, version, operating system, browserExcerpt from Hugging Face's Privacy Policy
REGULATORY LANDSCAPE: IP addresses and device identifiers are classified as personal data under GDPR and many other privacy frameworks, triggering GDPR Article 13 disclosure obligations and lawful basis requirements.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision discloses automatic collection of IP addresses and session location data, which under GDPR and other frameworks qualify as personal data; this collection occurs passively for all users regardless of account status.
The policy states that Hugging Face automatically collects your IP address, approximate session location, device identifiers, operating system, browser type, and cookie data each time you use the Services, including when browsing without being logged in.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Hugging Face.