Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that PayPal collects Personal Information from individuals who do not hold a PayPal account when they use Pay without a PayPal Account, Unbranded Payment Services, Fastlane, or receive payments via Visa+ or Hyperwallet. Transaction data collected without an account may be linked to a subsequently created PayPal account.
This analysis describes what PayPal's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that Personal Information collection applies to non-account holders transacting through PayPal-powered services, including unbranded payment infrastructure such as Braintree. The retroactive transaction linking provision means prior non-account transactions may be associated with a newly created account.
⚠ Personal Information collected during non-account transactions will be retained and processed under this policy; if a PayPal account is later created, prior transaction data may be linked to that account as stated in the policy
Cross-platform context
See how other platforms handle Non-Account Holder Data Collection and Transaction Linking and similar clauses.
Compare across platforms →Monitoring
PayPal has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Our Services may be accessed by individuals without a PayPal account or profile. We will collect Personal Information from you even if you are a non-account holder when you use our Services, such as when you use our Pay without a PayPal Account, use Unbranded Payment Services (e.g., Braintree), use a Fastlane profile, or when you receive a payment through the Visa+ service from a PayPal account holder or a payment from a payor using the Hyperwallet services. If you Pay without a PayPal account, we may link your transaction information with your PayPal account if you create a PayPal account later.Excerpt from PayPal's Privacy Statement
(1) REGULATORY LANDSCAPE: This provision engages the FTC Act's consumer protection requirements for notice and data practices affecting individuals who may not be aware they are transacting through PayPal infrastructure. For EU/EEA users, GDPR notice requirements apply to non-account holder data collection, and the legal basis for processing non-account holder data should be identified. The CCPA/CPRA covers consumers who interact with businesses through third-party services, which may include non-account holder interactions with Braintree-powered checkouts. (2) GOVERNANCE EXPOSURE: Medium. The retroactive transaction linking provision creates a data continuity obligation for compliance teams to ensure that non-account holder data collected under this policy is appropriately governed when it is merged with account-level data upon registration. The breadth of non-account holder collection across unbranded payment infrastructure means consumers may not associate their data with PayPal. (3) JURISDICTION FLAGS: California residents who transact through Braintree-powered checkouts without a PayPal account may have CCPA/CPRA rights against PayPal as the data controller of their transaction data. EU/EEA non-account holders are entitled to GDPR notice at the time of collection under Articles 13 and 14. (4) VENDOR IMPLICATIONS: Merchants and developers using Braintree or other Unbranded Payment Services should be aware that their customer transaction data is collected by PayPal under this policy. This may be relevant to merchant privacy notices and data processing agreements. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should ensure that non-account holder data collection is covered in merchant-facing data processing agreements and that notice mechanisms for non-account holders transacting through unbranded services are adequate under applicable law.
This provision establishes that Personal Information collection applies to non-account holders transacting through PayPal-powered services, including unbranded payment infrastructure such as Braintree. The retroactive transaction linking provision means prior non-account transactions may be associated with a newly created account.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by PayPal.