The policy states that OnlyFans does not sell personal data, does not share personal data for targeted or cross-context behavioural advertising, and does not use cross-site tracking technologies, while disclosing that sensitive information including partial payment card data, government identifiers, usernames and passwords, and biometric data may be disclosed to service providers for business purposes.
This analysis describes what OnlyFans's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision makes explicit data practice representations that engage CCPA opt-out rights and Nevada law requirements. The policy simultaneously confirms no data sale or targeted advertising while disclosing that sensitive information categories are shared with service providers for operational purposes, which the policy characterizes as business purpose disclosures rather than sales.
Under this clause, users' personal data is not sold or shared for targeted advertising or cross-context behavioural advertising purposes, and no cross-site tracking technologies are stated to be in use. Sensitive information including government identifiers, partial payment card data, and biometric information processed by third parties may be disclosed to service providers for operational purposes as described in the policy.
Cross-platform context
See how other platforms handle Sensitive Information and No Targeted Advertising Disclosure and similar clauses.
Compare across platforms →"No sales for targeted advertising: We do not sell or share Personal Data for the purpose of displaying advertisements that are selected based on Personal Data obtained or inferred over time from an individual's activities across businesses or distinctly-branded websites, applications, or other services (otherwise known as 'targeted advertising'). [...] We currently do not use any cross-site tracking technologies and we do not sell Personal Data collected about you, or share Personal Data collected about you for cross-context behavioural advertising.Excerpt from OnlyFans's Privacy Policy
1) REGULATORY LANDSCAPE: This provision directly engages CCPA/CPRA definitions of 'sale' and 'sharing' for cross-context behavioural advertising, Nevada SB 220 opt-out requirements, and the FTC Act's prohibition on unfair or deceptive practices as applied to …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision makes explicit data practice representations that engage CCPA opt-out rights and Nevada law requirements. The policy simultaneously confirms no data sale or targeted advertising while disclosing that sensitive information categories are shared with service providers for operational purposes, which the policy characterizes as business purpose disclosures rather than sales.
Under this clause, users' personal data is not sold or shared for targeted advertising or cross-context behavioural advertising purposes, and no cross-site tracking technologies are stated to be in use. Sensitive information including government identifiers, partial payment card data, and biometric information processed by third parties may be disclosed to service providers for operational purposes as described in the policy.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OnlyFans.