The global section states McDonald's does not sell personal information for monetary consideration, while acknowledging that US state law definitions of 'sale' may encompass sharing with advertising networks and analytics companies for valuable consideration, directing US users to the country-specific addendum.
This analysis describes what McDonald's's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses a structurally significant tension between the policy's assertion of no monetary sale and the acknowledgment that sharing arrangements with advertising and analytics partners may qualify as sales under California and other US state privacy statutes, triggering opt-out rights and disclosure obligations under those frameworks.
Under this clause, McDonald's discloses that sharing identifiers, pseudonymized identifiers, and behavioral inferences with social media, advertising, and analytics partners may constitute a sale of personal information under certain state laws. The US addendum states that consumers may opt out of this sharing through applicable opt-out mechanisms including the Global Privacy Control signal.
Cross-platform context
See how other platforms handle Data Sharing as Potential Sale Under State Law and similar clauses.
Compare across platforms →"We do not sell your personal information for monetary consideration and only share your information as described in this Privacy Statement or as otherwise communicated to you at the time we collect your information. Please note that some US state statutes may define a "sale" to include sharing of personal information with third parties for valuable consideration. Many companies have common arrangements with online advertising networks and analytics companies that may be considered sales under these definitions. Please reference our US Country Specific Addendum (below) for more information.Excerpt from McDonald's's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision discloses a structurally significant tension between the policy's assertion of no monetary sale and the acknowledgment that sharing arrangements with advertising and analytics partners may qualify as sales under California and other US state privacy statutes, triggering opt-out rights and disclosure obligations under those frameworks.
Under this clause, McDonald's discloses that sharing identifiers, pseudonymized identifiers, and behavioral inferences with social media, advertising, and analytics partners may constitute a sale of personal information under certain state laws. The US addendum states that consumers may opt out of this sharing through applicable opt-out mechanisms including the Global Privacy Control signal.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by McDonald's.