This analysis describes what OpenSea's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated policy establishes new collection of sensitive personal data categories not previously disclosed in explicit detail. Users of OpenSea's onramp services will have their full legal name, date of birth, tax ID, government-issued identification documents, mobile number, and IP address collected and transmitted to third-party onramp providers. Users subject to identity verification for rewards eligibility or compliance will have facial biometric data processed through third-party providers using facial recognition technology; the provider generates and holds the biometric identifier on OpenSea's behalf and destroys it within three years of last interaction. Users participating in rewards programs will have wallet address, name, contact information, and tax identification numbers collected for eligibility determination and tax reporting. You can decline to use onramp services and still access the Platform, and identity verification for rewards is required only in certain circumstances such as when required for rewards eligibility or compliance.
View change record →How other platforms handle this
we will delete your account data after three years of inactivity.
We will retain your Data for as long as necessary: (i) to achieve the purposes as set out in this Policy; (ii) as required by applicable laws and regulations, including any mandated retention periods...
When Personal Information is no longer needed for the purposes for which it was collected, we securely delete, anonymize, or put it beyond use.
"If a child under 13 (or under 16 for individuals in the EEA/UK) submits identifiable information to us and we learn that the identifiable information is the information of a child under 13 ... we will attempt to delete the information as soon as possible.Excerpt from OpenSea's Privacy Policy
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause states: “If a child under 13 (or under 16 for individuals in the EEA/UK) submits identifiable information to us and we learn that the identifiable information is the information of a child under 13 ... we will attempt to delete the information as soon as possible.”
ConductAtlas has identified this type of provision across 267 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenSea.