McDonald's · McDonald's Privacy Policy · View original document ↗

Third-Party Advertising Partner Data Sharing

Medium severity Medium confidence Explicitdocumentlanguage Rare · 2 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for McDonald's Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

McDonald's shares your personal information with outside advertising and analytics companies, which can then use tracking technologies to target you with ads across the internet, not just on McDonald's platforms.

This analysis describes what McDonald's's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Sharing personal data with third-party advertising networks means your behavior on McDonald's platforms may contribute to a broader cross-site advertising profile maintained by those third parties.

Interpretive note: The policy does not specify the complete list of advertising and analytics partners, making it difficult for consumers to assess the full scope of data sharing without additional disclosure.

Consumer impact (what this means for users)

Your purchase history, browsing behavior, and device identifiers collected on McDonald's services may be shared with advertising partners who can use that data to target you with ads on entirely separate websites and apps.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Scroll to the bottom of the McDonald's website and click 'Your Privacy Choices' to access the opt-out form for the sale or sharing of your personal information with advertising partners.

How other platforms handle this

Lime Medium

We may share your information with third-party advertising partners to provide you with targeted advertising. We also work with third-party analytics providers who help us understand how users interact with our Services. These third parties may use cookies, web beacons, and similar tracking technolo...

Zoom Medium

We work with third-party advertising partners to market our Products, and we share personal data with advertising networks and social media companies to serve ads. We also use analytics providers to help us understand how users interact with our Products.

Notion Medium

We may share your personal information with third-party vendors and service providers that perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance. We may also share your personal information with busines...

See all platforms with this clause type →

Monitoring

McDonald's has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We may share your personal information with third-party advertising and analytics partners to help us deliver relevant advertising to you on our websites and apps and on other websites and apps. These partners may use cookies, pixels, and similar tracking technologies to collect information about your interactions with our services.

— Excerpt from McDonald's's McDonald's Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: Sharing personal information with advertising partners using tracking technologies may constitute a 'sale' or 'sharing' of personal information under CCPA/CPRA, triggering opt-out rights and disclosure requirements. The FTC Act governs deceptive or unfair data sharing practices at the federal level. State privacy laws in Colorado, Connecticut, Virginia, and Texas similarly regulate the sharing of personal data for targeted advertising and may require opt-out mechanisms. GOVERNANCE EXPOSURE: High. The disclosure that personal information is shared with third-party advertising partners through cookies and pixels is a primary CCPA/CPRA compliance vector. Whether McDonald's has implemented a compliant opt-out signal mechanism, including Global Privacy Control recognition, is a material governance question. JURISDICTION FLAGS: California creates the most immediate exposure given CPRA's explicit 'opt-out of sharing' right for cross-context behavioral advertising. Colorado and Connecticut privacy laws similarly require opt-out mechanisms for targeted advertising. The scope of this provision applies broadly to all US users who interact with the website or app. CONTRACT AND VENDOR IMPLICATIONS: Data sharing agreements with advertising and analytics partners should define permitted data uses, prohibit re-sale of McDonald's consumer data, specify retention limits, and include security standards. Procurement teams should assess whether these partners are compliant with applicable state privacy laws in their own right. COMPLIANCE CONSIDERATIONS: Legal teams should audit the implementation of the 'Your Privacy Choices' opt-out to confirm it covers all advertising partner data flows, including server-side tracking. A cookie and pixel audit should be conducted to inventory all third-party tags active on McDonald's digital properties and confirm alignment with the policy's disclosure.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC oversees unfair or deceptive consumer data practices including undisclosed data sharing with advertising networks
    File a complaint →
  • State AG
    State attorneys general in California, Colorado, Connecticut, and other states with comprehensive privacy laws have enforcement authority over opt-out rights for targeted advertising
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
McDonald's Privacy Policy
Entity
McDonald's
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 10, 2026
Record ID
CA-P-009434
Document ID
CA-D-00627
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
88bd88422384384992d46db5a7854db4e88b0dc6dbe1bd287201f50b20d6ff41
Analysis generated
May 8, 2026 07:59 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: McDonald's
Document: McDonald's Privacy Policy
Record ID: CA-P-009434
Captured: 2026-05-08 07:59:02 UTC
SHA-256: 88bd884223843849…
URL: https://conductatlas.com/platform/mcdonalds/mcdonalds-privacy-policy/third-party-advertising-partner-data-sharing/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does McDonald's's Third-Party Advertising Partner Data Sharing clause do?

Sharing personal data with third-party advertising networks means your behavior on McDonald's platforms may contribute to a broader cross-site advertising profile maintained by those third parties.

How does this clause affect you?

Your purchase history, browsing behavior, and device identifiers collected on McDonald's services may be shared with advertising partners who can use that data to target you with ads on entirely separate websites and apps.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 2 platforms. See the full comparison.

Is ConductAtlas affiliated with McDonald's?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by McDonald's.