Meta Privacy Policy

This document is Meta's Privacy Policy governing the collection, use, and sharing of personal data across Meta's family of products including Facebook, Instagram, Messenger, and affiliated services, with the stated legal basis varying by jurisdiction (consent, legitimate interests, and contractual necessity under GDPR for EU/EEA users, and broader implied consent frameworks for others). The policy asserts that Meta collects an extensive range of data categories including content users create, communications, activity across third-party sites and apps via Meta's tracking pixels and APIs, device and network identifiers, location data, biometric-adjacent signals, and inferences drawn about users' interests, behaviors, and characteristics. Notably, the policy states that Meta combines data across its entire product family and from off-platform third-party sources to build unified user profiles for advertising targeting purposes, a scope of cross-context data aggregation that, while disclosed, may require evaluation under GDPR's data minimization and purpose limitation principles and CCPA's cross-context behavioral advertising opt-out requirements. The policy engages GDPR, the EU-U.S. Data Privacy Framework, CCPA/CPRA, COPPA, and a range of national data protection laws; EU users retain rights to access, rectification, erasure, restriction, portability, and objection, while California residents have opt-out rights for sharing of personal information for cross-context behavioral advertising. Material compliance considerations include the adequacy of Meta's consent mechanisms for sensitive inferences, the robustness of its data retention justifications, and the operational implementation of user rights requests across its global infrastructure.