This analysis describes what OpenRouter's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated policy raises the minimum age to use OpenRouter from 13 to 18 years old, meaning users under 18 are no longer eligible. For users who upload files through the Files API feature, the revised terms establish specific handling procedures: files are encrypted at rest and in transit, transmitted to model providers you select, retained until deletion or account closure, and not used for training or marketing purposes. The policy specifies that access is restricted to automated systems necessary to operate the service, and manual access occurs only for investigating violations, responding to legal process, or providing support. You can delete uploaded files at any time, which triggers removal efforts from active systems and backups within timeframes specified in the Data Processing Agreement.
View change record →How other platforms handle this
If you are accessing the Website from a location outside the EEA, U.K., or Canada, you understand that we apply U.S. law and the U.S. advertising industry self-regulatory program to Tracking Technologies associated with the Website.
In the EU and EEA, the choice of Texas governing law shall not apply only where a mandatory consumer protection law explicitly prohibits such choice of law provisions.
If you are located in the European Economic Area or the UK, you have the right to lodge a complaint with a supervisory authority if you believe our processing of your information violates applicable law.
"When information is transferred outside the EEA or UK, we ensure it benefits from an adequate legal protection by relying on (1) adequacy decisions from the European Commission...and (2) standard contractual clauses approved by the European Commission under Article 46 of the GDPR...Excerpt from OpenRouter's Privacy Policy
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The clause states: “When information is transferred outside the EEA or UK, we ensure it benefits from an adequate legal protection by relying on (1) adequacy decisions from the European Commission...and (2) standard contractual clauses approved by the European Commission under Article 46 of the GDPR...”
ConductAtlas has identified this type of provision across 267 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenRouter.