This analysis describes what OpenRouter's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated policy raises the minimum age to use OpenRouter from 13 to 18 years old, meaning users under 18 are no longer eligible. For users who upload files through the Files API feature, the revised terms establish specific handling procedures: files are encrypted at rest and in transit, transmitted to model providers you select, retained until deletion or account closure, and not used for training or marketing purposes. The policy specifies that access is restricted to automated systems necessary to operate the service, and manual access occurs only for investigating violations, responding to legal process, or providing support. You can delete uploaded files at any time, which triggers removal efforts from active systems and backups within timeframes specified in the Data Processing Agreement.
View change record →How other platforms handle this
to withdraw your consent to our processing of your data (where such processing is based on consent)
Request Restriction or Object to Processing of your information.
You also have the right to object to the processing of Service Data or to export Service Data to another service.
"Where our processing of your personal data is based on your consent, you have the right to withdraw consent, but that withdrawal does not affect the lawfulness of processing based on consent provided before your withdrawal.Excerpt from OpenRouter's Privacy Policy
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The clause states: “Where our processing of your personal data is based on your consent, you have the right to withdraw consent, but that withdrawal does not affect the lawfulness of processing based on consent provided before your withdrawal.”
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenRouter.