Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“You have the right to opt out of the disclosure of personal information about you for consideration and the sharing of personal information about you for cross-context behavioral advertising.”
“McDonald's Global may be liable under the DPF if these vendors process such personal information in a manner inconsistent with the DPF, unless McDonald's Global proves that it is not responsible for the event giving rise to the damage.”
“Our online services and in-restaurant technology may collect information about the location of your mobile device or computer using geolocation and technology such as GPS, Wi-Fi, Bluetooth, or cell tower proximity.”
“online activity on other websites, applications or social media;”
“We process opt-out requests submitted using an opt-out preference signal as required by applicable law. For example, when we detect the Global Privacy Control ("GPC") signal from a browser, we treat the signal as a request to opt out of sale and sharing...”
“We may share all or substantially all categories of your personal information with: members of The McDonald's Family”
This document explains how McDonald's collects your personal information — including your location, your activity on other websites, and data from outside sources — and uses it to send you targeted marketing and to train its AI systems, sharing broadly within the McDonald's corporate family. You have the right to opt out of McDonald's selling or sharing your data for behavioral advertising, and you can do this automatically using a Global Privacy Control signal in your browser. If you leave the McDonald's Rewards program, you permanently lose all points and rewards you have earned.
McDonald's Privacy Policy establishes the company's practices for collecting, using, and sharing personal information across its online services and in-restaurant technology. The policy authorizes collection of geolocation data via GPS, Wi-Fi, Bluetooth, and cell tower proximity, as well as off-platform behavioral data from other websites, applications, and social media, with the option to combine these with directly provided and third-party sourced information. McDonald's uses this personal information for personalized direct marketing and targeted advertising on behalf of both McDonald's and its business partners, and to train the algorithms and AI models used in its service delivery. The policy also permits sharing of all or substantially all categories of personal information with members of The McDonald's Family, grants users the right to opt out of sale-equivalent disclosure and cross-context behavioral advertising data sharing, and processes Global Privacy Control signals as opt-out requests. Withdrawal from the Rewards program results in permanent forfeiture of all accumulated points and rewards.
As an individual user, your personal information — including precise device location and off-platform browsing and social media activity — is collected, combined, and used to deliver personalized marketing for McDonald's and its business partners, and to train McDonald's AI models. Automated profiling for personalization occurs without requiring separate notice, though automated decisions with legal effects require McDonald's to notify you separately. You may opt out of the disclosure of your personal information for consideration and the sharing of it for cross-context behavioral advertising; one concrete action you can take is to enable a Global Privacy Control signal in your browser, which McDonald's treats as an opt-out of sale and sharing.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
1 important change detected
2 versions captured · Latest change detected by ConductAtlas: July 2026
We withheld clauses we had published from this document. Each withholding is recorded in our correction log:
“You have the right to opt out of the disclosure of personal information about you for consideration and the sharing of personal information about you for cross-context behavioral advertising.”
“Our online services and in-restaurant technology may collect information about the location of your mobile device or computer using geolocation and technology such as GPS, Wi-Fi, Bluetooth, or cell tower proximity.”
“online activity on other websites, applications or social media;”
“McDonald's Global may be liable under the DPF if these vendors process such personal information in a manner inconsistent with the DPF, unless McDonald's Global proves that it is not responsible for the event giving rise to the damage.”
“We process opt-out requests submitted using an opt-out preference signal as required by applicable law. For example, when we detect the Global Privacy Control ("GPC") signal from a browser, we treat the signal as a request to opt out of …”
“We may share all or substantially all categories of your personal information with: members of The McDonald's Family”
“to provide you with general and personalized electronic and non-electronic direct marketing information and support our targeted advertising initiatives concerning our products and services, as well as our business partners' products and services...”
“to train algorithms and AI models that we use in the context of providing you with products and services;”
“to personalize and improve our products and services and your overall customer experience...employing profiling technology (unless we notify you separately thereof, this will not include automated individual decisions that have legal effects for you...”
“If McDonald’s Global is unable to resolve your concern regarding your personal information received by McDonald’s Global under the DPF, you have the right to direct your unresolved concern to JAMS, an independent dispute resolution service based in the United …”
“All points and rewards you have earned until the time of withdrawal will no longer be available.”
“We may combine the information you provide to us with information that we collect through automated methods, and with information we receive from other sources.”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
McDonald's has updated this document before. Monitor includes alerts from a daily check, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Ad networks collect data across sites over time and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 343 platforms.