This analysis describes what OpenSea's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This represents a direct commitment against two specific categories of data transaction as legally defined under California law, covering both current practice and a defined historical period.
Interpretive note: The qualifiers 'as those terms are defined under the CCPA' are legally significant — this statement does not address data transfers that fall outside those statutory definitions.
The updated policy establishes new collection of sensitive personal data categories not previously disclosed in explicit detail. Users of OpenSea's onramp services will have their full legal name, date of birth, tax ID, government-issued identification documents, mobile number, and IP address collected and transmitted to third-party onramp providers. Users subject to identity verification for rewards eligibility or compliance will have facial biometric data processed through third-party providers using facial recognition technology; the provider generates and holds the biometric identifier on OpenSea's behalf and destroys it within three years of last interaction. Users participating in rewards programs will have wallet address, name, contact information, and tax identification numbers collected for eligibility determination and tax reporting. You can decline to use onramp services and still access the Platform, and identity verification for rewards is required only in certain circumstances such as when required for rewards eligibility or compliance.
View change record →Users, particularly California residents, can rely on OpenSea's stated policy that their personal information is not sold or shared under the CCPA definitions.
How other platforms handle this
Applicable subprocessors may run security and safety classifiers on web pages and share results with OpenAI.
in the case of Cohere, to potential assignees, acquirers or successors of Cohere if and to the extent such persons need to know such Confidential Information in connection with a potential sale, merger, amalgamation or other corporate transaction...
We may share your Personal Data with Service Providers, Third-Party Vendors, Consultants, and other Business Partners in order to provide Services on our behalf...
"We do not "sell" or "share" (as those terms are defined under the CCPA) personal information, nor have we done so in the preceding 12 months.Excerpt from OpenSea's Privacy Policy
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This represents a direct commitment against two specific categories of data transaction as legally defined under California law, covering both current practice and a defined historical period.
Users, particularly California residents, can rely on OpenSea's stated policy that their personal information is not sold or shared under the CCPA definitions.
ConductAtlas has identified this type of provision across 280 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenSea.