Every time you use Hugging Face, it automatically records your location, IP address, device type, browser, operating system, and login activity — without you actively providing this information.
Simply browsing Hugging Face results in automatic collection of your IP address, geographic location, device specifications, and session activity, which together can be used to identify and profile you even without account registration.
Cross-platform context
See how other platforms handle Information We Automatically Collect and similar clauses.
Compare across platforms →Automatic collection of IP address and location data means Hugging Face builds a detailed profile of when and where you access the platform, even if you never consciously share personal information.
(1) REGULATORY FRAMEWORK: IP addresses and device fingerprint data constitute personal data under GDPR Recital 30 and Art. 4(1) (confirmed by CJEU in Breyer v. Germany, C-582/14). This triggers GDPR Arts. 5, 6, and 13 obligations for lawful, transparent collection. Location data derived from IP addresses may constitute sensitive inference data in some contexts. CCPA §1798.140 includes IP addresses in the definition of personal information. FTC Act Section 5 applies to deceptive practices in automatic data collection. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.