9 Total
5 High severity
4 Medium severity
0 Low severity
Summary

Pinterest's Privacy Policy explains how the platform collects and uses your personal data, including your browsing history, location, device information, and the content you save or interact with — even if you've never created a Pinterest account. The most important thing to know is that Pinterest shares your data with advertising partners and may use your uploaded photos and content to train its artificial intelligence systems. If you're a California resident, you can opt out of the sale or sharing of your personal data by visiting Pinterest's privacy settings.

Technical Summary

This document is Pinterest's global Privacy Policy governing the collection, use, sharing, and retention of personal data for all users of Pinterest's platforms, with legal bases including consent, legitimate interests, and contractual necessity varying by jurisdiction. The policy obligates Pinterest to collect extensive categories of data including browsing activity, device identifiers, inferred interests, location data, and content interactions, while also permitting broad sharing with advertisers, measurement partners, and affiliated entities. Notably, Pinterest explicitly states it collects data about non-users through pixels and partner integrations, and retains the right to use content uploaded by users to train AI/ML models, both of which represent significant expansions beyond typical industry practice. The policy engages GDPR (with Pinterest Europe UC as EEA/Switzerland controller and Pinterest Inc. as UK controller), CCPA/CPRA for California residents, and various other jurisdictions' frameworks, with Pinterest's international data transfer mechanism relying on Standard Contractual Clauses. Material compliance considerations include the adequacy of consent mechanisms for AI training use of user content, the robustness of opt-out mechanisms for data sale/sharing under CCPA, and the lawfulness of processing non-user data under GDPR Article 6.

Evidence Provenance
Captured April 19, 2026 06:07 UTC
Document ID CA-D-000098
Version ID CA-V-000676
Wayback Machine View archived versions →
SHA-256 803a5ec94b0965d7afd6203d1d06be6798ce7e4d39a982274a9e40ccd76567ad
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Institutional Analysis

🔒 Institutional analysis locked

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Upgrade to Professional — $149/mo
Change Timeline
View full version history (0 captures) →
High Severity — 5 provisions
Medium Severity — 4 provisions

Cross-platform context

See how other platforms handle AI and Machine Learning Data Training and similar clauses.

Compare across platforms →

Applicable Regulations

EU AI Act
European Union
CCPA/CPRA
California, USA
COPPA
United States Federal
CFAA
United States Federal
CAN-SPAM
United States Federal
DMCA
United States Federal
DSA
European Union
GDPR
European Union
UK GDPR
United Kingdom