The policy states that OpenRouter automatically collects traffic data, location data, log files, browser history, search queries, clicked links, page views, IP address, operating system, browser type, time zone, and other unique device or online identifiers as users interact with the Site or Service.
This analysis describes what OpenRouter's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes collection of a broad set of behavioral and device-level identifiers through automatic technologies, including data categories such as location data and browser history that may constitute personal data or sensitive data under applicable privacy frameworks.
This provision explicitly details automatic data collection of behavioral and device information, significantly expanding transparency about what data is automatically captured beyond just cookies.
View full change record →The agreement establishes that device identifiers, location data, browsing history, and IP addresses are collected automatically without requiring affirmative user action, and these data types may be used in conjunction with cookies to build behavioral profiles or deliver personalized content.
How other platforms handle this
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
"As you navigate through and interact with our Site or Service, we may use automatic data collection technologies to collect certain information about your device, browsing actions and patterns, including: Details of your visits to our Site, including, but not limited to, traffic data, location data, log files to understand how our Service is performing, browser history, search, information about links you click, pages you view, and other communication data and the resources that you access and use on the Site. Information about your computer and internet connection, including your IP address, operating system and browser type, time zone setting, and other unique personal or online identifiers.Excerpt from OpenRouter's Privacy Policy
REGULATORY LANDSCAPE: Automatic collection of IP addresses, location data, and device identifiers constitutes personal data processing under GDPR, requiring a lawful basis for each processing purpose.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision authorizes collection of a broad set of behavioral and device-level identifiers through automatic technologies, including data categories such as location data and browser history that may constitute personal data or sensitive data under applicable privacy frameworks.
The agreement establishes that device identifiers, location data, browsing history, and IP addresses are collected automatically without requiring affirmative user action, and these data types may be used in conjunction with cookies to build behavioral profiles or deliver personalized content.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenRouter.