The policy states that Meta receives information about user activity occurring outside Meta platforms from advertisers and third-party partners and uses this off-platform behavioral data to personalize ads shown on Meta Products and through Meta Audience Network, including for individuals who are not logged in or do not have a Meta account.
This analysis describes what Meta's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that ad personalization is based in part on data sourced from outside Meta's own platforms, and that this processing applies regardless of whether a user is logged in or holds an account, extending the scope of data collection and use to non-account holders.
The updated Privacy Policy no longer explicitly directs US residents to the United States Regional Privacy Notice, which previously provided details about consumer privacy rights available under state laws like the California Consumer Privacy Act and similar regulations. This removal does not eliminate those rights themselves, but it makes the Privacy Policy less clear about where consumers can find information on how to exercise those rights. Consumers can still locate the Regional Privacy Notice through Meta's website or by searching for it directly, but the removal reduces the accessibility and prominence of that guidance within the primary policy document.
View change record →The provision text remains identical but was renamed from 'Third-Party Partner Data Use for Ad Personalization' and severity remains 'high.'
View full change record →Under this clause, information about activity on third-party websites, apps, and services may be provided to Meta by partners and used to personalize the ads a user sees on Meta Products and other apps using Meta's advertising services. The agreement states this applies even when users are not logged into a Meta account.
Cross-platform context
See how other platforms handle Off-Platform Activity Data Used for Ad Personalization and similar clauses.
Compare across platforms →"Receiving and using information from third parties to tailor the ads you see: We'll use information that advertisers, businesses and other partners provide us about activity off the Meta Company Products that we have associated with you to personalize ads that we show you on our Products, and on websites, apps and devices that use our advertising services. We receive this information whether or not you're logged in or have an account on our Products, see the Cookies Policy for more information.Excerpt from Meta's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision engages GDPR Articles 6 and 13 regarding lawful basis for processing data received from third parties and transparency obligations toward data subjects who have not directly interacted with Meta.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that ad personalization is based in part on data sourced from outside Meta's own platforms, and that this processing applies regardless of whether a user is logged in or holds an account, extending the scope of data collection and use to non-account holders.
Under this clause, information about activity on third-party websites, apps, and services may be provided to Meta by partners and used to personalize the ads a user sees on Meta Products and other apps using Meta's advertising services. The agreement states this applies even when users are not logged into a Meta account.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Meta.