The policy discloses automated collection of precise geolocation data, advertising identifiers, UDIDs, device serial numbers, IP addresses, and video recordings of restaurant visits through in-restaurant digital technology.
This analysis describes what McDonald's's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses a broad range of automated data collection spanning online, mobile, and physical restaurant environments, including persistent device identifiers and in-restaurant video, which collectively enable cross-context tracking of individual customers.
Interpretive note: The provision discloses in-restaurant video collection without specifying whether biometric data is extracted from those recordings; the compliance implications depend on whether biometric processing occurs, which is not addressed in the document.
Under this clause, McDonald's automated collection encompasses geolocation via GPS, Wi-Fi, Bluetooth, and cell tower proximity, advertising identifiers, unique device identifiers, device serial numbers, IP addresses, and video recordings within restaurants. Geolocation collection can be disabled through device or browser settings, and location-dependent features may not function if collection is disabled.
Cross-platform context
See how other platforms handle Collection of Location, Device Identifiers, and In-Restaurant Video and similar clauses.
Compare across platforms →"Our online services and in-restaurant technology may collect information about the location of your mobile device or computer using geolocation and technology such as GPS, Wi-Fi, Bluetooth, or cell tower proximity. For most mobile devices and computer systems, you can disable the collection of this information by using the device or web-browser settings... We may collect information about your: internet protocol (IP) address; computer or mobile-device operating system and browser type; type of mobile device and its settings; unique device identifier (UDID) or mobile equipment identifier (MEID) of your mobile device; device and component serial numbers; advertising identifiers (for example, an Identifier for Advertising (IDFA) on Apple devices) or similar identifiers... visits to our restaurants, where recorded using digital technology (e.g. video recordings)Excerpt from McDonald's's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision discloses a broad range of automated data collection spanning online, mobile, and physical restaurant environments, including persistent device identifiers and in-restaurant video, which collectively enable cross-context tracking of individual customers.
Under this clause, McDonald's automated collection encompasses geolocation via GPS, Wi-Fi, Bluetooth, and cell tower proximity, advertising identifiers, unique device identifiers, device serial numbers, IP addresses, and video recordings within restaurants. Geolocation collection can be disabled through device or browser settings, and location-dependent features may not function if collection is disabled.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by McDonald's.