Netflix Privacy Statement

This is Netflix's privacy policy — the document that explains what personal data Netflix collects about you, including your viewing history, search queries, voice inputs, device location, and payment details, and how that data is used and shared. The single most important thing to know is that Netflix admits it 'sells' and 'shares' your personal information — including your viewing habits and device identifiers — with advertising partners for targeted advertising, which you have the right to opt out of. You can opt out of the sale and sharing of your personal information for advertising by visiting netflix.com/account or using the 'Do Not Sell or Share My Personal Information' link in Netflix's privacy settings.

This document is Netflix's global Privacy Statement governing the collection, use, and disclosure of personal information across the Netflix service, Netflix Games, and related platforms, operating under multiple legal frameworks including GDPR, CCPA/CPRA, and various US state privacy laws. Netflix's most significant obligations include providing data subject rights (access, deletion, correction, portability, opt-out of sale/sharing), maintaining a Data Protection Officer, and disclosing that personal information including identifiers, viewing history, device data, voice inputs, precise geolocation, and inferred characteristics is collected and disclosed to third-party service providers, advertising partners, and business partners. A notable provision is Netflix's explicit acknowledgment that it 'sells' and 'shares' personal information under CCPA definitions — specifically identifiers, viewing activity, and device/network data — for cross-context behavioral advertising, which creates elevated regulatory exposure and deviates from the more common industry posture of claiming only 'service provider' disclosures. The policy engages GDPR (Arts. 6, 13, 14, 17, 20), CCPA/CPRA (§§1798.100–1798.199), Virginia CDPA, Colorado CPA, Connecticut CTDPA, Texas TDPSA, Oregon OCPA, and other US state privacy statutes, with enforcement by the FTC, California AG, California Privacy Protection Agency (CPPA), and EU/EEA supervisory authorities. Material compliance considerations include the adequacy of consent mechanisms for voice data collection, the sufficiency of opt-out mechanisms for data sale/sharing for advertising-with-account subscribers, and Netflix's cross-border data transfer reliance on Standard Contractual Clauses.