Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that Meta receives information about users' off-platform activity from advertisers, businesses, and other partners, and uses that information to personalize ads shown on Meta Products and on third-party websites and apps, including for users who are not logged in or do not have a Meta account.
This analysis describes what Meta's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that ad personalization is based not only on activity within Meta Products but also on behavioral data supplied by third-party partners from off-platform contexts, and that this processing applies to individuals who may not have a Meta account or may not be logged in, which engages regulatory frameworks governing tracking of non-users.
Under this clause, Meta collects information about activity that occurs outside of Meta Products from advertisers and other partners, and associates that information with users to personalize ads, including when users are not logged in to Meta Products. This off-platform data collection and association applies regardless of whether the individual has an active session on a Meta Product.
Cross-platform context
See how other platforms handle Third-Party Partner Data Use for Ad Personalization and similar clauses.
Compare across platforms →Monitoring
Meta has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Receiving and using information from third parties to tailor the ads you see: We'll use information that advertisers, businesses and other partners provide us about activity off the Meta Company Products that we have associated with you to personalize ads that we show you on our Products, and on websites, apps and devices that use our advertising services. We receive this information whether or not you're logged in or have an account on our Products, see the Cookies Policy for more information.Excerpt from Meta's Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages GDPR's lawful basis requirements for processing data of individuals who may not have provided consent to Meta directly, the ePrivacy Directive's requirements for cookie and tracking consent, CCPA's opt-out rights for the sharing of personal information for cross-context behavioral advertising, and FTC guidance on data broker and tracking practices. 2) GOVERNANCE EXPOSURE: High. The extension of ad personalization to individuals not logged in or without accounts raises significant questions about the legal basis for processing and the adequacy of notice and consent, particularly under GDPR and the ePrivacy Directive in the EU. 3) JURISDICTION FLAGS: EU and EEA users face heightened exposure. California residents have opt-out rights under CPRA for cross-context behavioral advertising. UK users are similarly positioned under UK GDPR and PECR. Users in other jurisdictions with emerging privacy legislation may also be affected. 4) CONTRACT AND VENDOR IMPLICATIONS: Advertisers and businesses that share off-platform user data with Meta should assess whether their own privacy disclosures to users adequately cover the onward transfer and use of that data by Meta for ad personalization. 5) COMPLIANCE CONSIDERATIONS: Compliance teams at organizations that share customer data with Meta for advertising purposes should evaluate whether their consent mechanisms cover this use, update privacy notices to reflect the scope of data sharing with Meta, and assess whether data sharing agreements with Meta align with applicable legal requirements.
Regulatory citations, enforcement risk, and due diligence action items.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes that ad personalization is based not only on activity within Meta Products but also on behavioral data supplied by third-party partners from off-platform contexts, and that this processing applies to individuals who may not have a Meta account or may not be logged in, which engages regulatory frameworks governing tracking of non-users.
Under this clause, Meta collects information about activity that occurs outside of Meta Products from advertisers and other partners, and associates that information with users to personalize ads, including when users are not logged in to Meta Products. This off-platform data collection and association applies regardless of whether the individual has an active session on a Meta Product.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Meta.