Governance document

CA-D-000684

PlanetScale Privacy Policy

PlanetScale

Last change detected July 24, 2026 Privacy policy

SHA-256: a21fc7547a08b462d8b… 2 versions captured 1 change documented

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

View original document at PlanetScale ↗

This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology

68 Total

24 High severity

37 Medium severity

7 Low severity

Key Facts

Who may automatically log and combine information about the user, their device, and their interaction over time with the Services?

PlanetScale, its service providers, and its advertising partners may automatically log and combine information about the user, their device, and their interaction over time with the Services.

When can users pursue binding arbitration through the Data Privacy Framework Panel?

PlanetScale permits users to pursue binding arbitration through the Data Privacy Framework Panel if neither PlanetScale nor its third-party dispute resolution provider has resolved the user's complaint.

Can users pursue binding arbitration if neither PlanetScale nor its third-party dispute resolution provider has resolved the complaint?

Will PlanetScale ensure that relevant safeguards are in place during cross-border data transfers?

PlanetScale will ensure that relevant safeguards are in place to afford adequate protection for personal information during cross-border data transfers and will comply with applicable data protection laws.

Does PlanetScale comply with applicable data protection laws?

Has PlanetScale agreed to participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure?

PlanetScale has agreed to participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure, under which VeraSafe will provide appropriate recourse to users free of charge.

Will VeraSafe provide appropriate recourse to users free of charge?

PlanetScale has agreed to participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure, under which VeraSafe will provide appropriate recourse to users free of charge.

What may PlanetScale do with third-party advertising companies such as Google?

PlanetScale may engage third-party advertising companies, such as Google, to display its ads on their online services.

Does PlanetScale sell personal information?

PlanetScale does not sell personal information.

Is PlanetScale liable under the Data Privacy Framework for any failure by a third party to comply with the Framework's requirements?

PlanetScale remains liable under the Data Privacy Framework for any failure by a third party to comply with the Framework's requirements, unless PlanetScale proves it is not responsible for the event giving rise to the damage.

Stay ahead of the changes

Track PlanetScale and get the diff the day its terms change.

Monitor PlanetScale + up to 20 platforms — $4.99/mo →

Summary

PlanetScale's privacy policy explains how it and its partners collect and use your data, including sharing it with advertising companies like Google to show you ads on other platforms. PlanetScale does not sell your personal information, and you can limit how your data is used for interest-based advertising by clicking 'Do Not Share My Personal Information' in the website footer or by adjusting settings in its Cookie Policy. The Services are not intended for children under 16, and if you have a privacy complaint that PlanetScale cannot resolve, you can escalate it to VeraSafe for free and, as a last resort, to binding arbitration.

Analysis

This privacy policy establishes PlanetScale's practices for collecting, using, sharing, and retaining personal information in connection with its Services. PlanetScale, its service providers, and advertising partners may automatically log and combine data about users, their devices, and their activity over time, and PlanetScale may share that data with third-party advertising companies to facilitate targeted and lookalike advertising on external platforms. PlanetScale commits that it does not sell personal information, retains personal information only as long as necessary where applicable law requires it, and maintains cross-border transfer safeguards in accordance with applicable data protection laws. Users are afforded a concrete opt-out mechanism for interest-based advertising sharing, and dispute resolution escalates through VeraSafe and, as a last resort, binding arbitration via the Data Privacy Framework Panel. PlanetScale bears default liability for third-party Data Privacy Framework violations unless it demonstrates it is not responsible for the event giving rise to the damage.

What this means for you

This document means that PlanetScale and its advertising partners automatically collect and combine data about you and your device over time, and may share that data with third parties—including companies like Google—to show you or similar users ads on other platforms. PlanetScale does not sell your personal information, and it retains your data only as long as necessary where law requires. You can limit the sharing of your personal information for interest-based advertising by clicking 'Do Not Share My Personal Information' in the website footer.

Institutional Analysis

Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

Monitor PlanetScale + up to 20 platforms — $4.99/mo → Get the research letter, free

1 important change detected

2 versions captured · Last updated: July 2026

July 24, 2026

low

What changed PlanetScale revised how its Privacy Policy applies to enterprise customer data. Previously, the policy stated it does not govern data processed on behalf of enterprise customers. The updated language now specifies that such processing is governed by a Data Processing Addendum or Business Associate Agreement between the parties, and clarifies that the Privacy Policy continues to govern PlanetScale's processing of personal information it controls.

Why this matters The updated terms clarify that PlanetScale's Privacy Policy continues to govern personal information it processes as a controller. For enterprise customers, data processing is explicitly governed by separate Data Processing Addendum or Business Associate Agreements rather than this Privacy Policy. This is a clarification of existing practice rather than a material operational change.

View full change record →

Featured, High severity

Automatic collection of device and activity data Compare →

The claim establishes that data collection is automatic, persistent over time, and shared across multiple parties—including advertising partners—expanding the scope of who holds combined user data.

Added July 10, 2026 Standard Seen across 296 platforms
Binding arbitration available through Data Privacy Framework Panel Compare →

The claim establishes that binding arbitration is available only as a last resort, after two prior resolution steps have failed, limiting when this right can be exercised.

Added July 10, 2026 Standard Seen across 206 platforms
Cross-border transfers require adequate safeguards Compare →

The claim establishes a direct obligation on PlanetScale to maintain adequate protections whenever personal data crosses borders, grounding a legal commitment to international data protection standards.

Added July 10, 2026 Standard Seen across 288 platforms
Data Privacy Framework disputes resolved via VeraSafe procedure Compare →

The claim establishes that PlanetScale has made a binding commitment to a named external dispute resolution mechanism that users can access at no cost.

Added July 10, 2026 Standard Seen across 206 platforms
Interest-based advertising via third-party companies Compare →

The claim establishes that PlanetScale's advertising activity involves third-party platforms, meaning PlanetScale's ads may appear on external services operated by those third parties.

Added July 10, 2026 Standard Seen across 288 platforms
PlanetScale does not sell personal information Compare →

The claim establishes an explicit prohibition on the sale of personal information, which is a legally significant commitment under privacy frameworks such as the CCPA.

Added July 10, 2026 Standard Seen across 288 platforms
PlanetScale remains liable for third-party DPF violations Compare →

The claim establishes that liability for third-party Data Privacy Framework violations rests with PlanetScale by default, shifting the burden to PlanetScale to disprove its own responsibility.

Added July 10, 2026 Standard Seen across 229 platforms
Retention limited to necessary period under applicable law Compare →

The claim establishes that the retention limitation is conditional on applicable law requiring it, meaning the obligation to limit retention does not apply universally but only where law mandates it.

Added July 10, 2026 Standard Seen across 275 platforms
Right to opt out of interest-based advertising sharing Compare →

The claim establishes that users have a concrete mechanism to limit the sharing of their personal information, with two specific named options provided.

Added July 10, 2026 Standard Seen across 290 platforms
Services not intended for children under 16 Compare →

The claim establishes an explicit age-based restriction on the intended audience for the Services, which has implications under children's privacy laws.

Added July 10, 2026 Common Seen across 148 platforms
Sharing with law enforcement and government authorities Compare →

The claim establishes that disclosure to law enforcement, government bodies, and private parties is governed by PlanetScale's own good-faith belief of necessity or appropriateness, not a formal legal order or external threshold.

Added July 10, 2026 Standard Seen across 288 platforms
User data shared for lookalike advertising on other platforms Compare →

The claim establishes that PlanetScale may share user data with third parties specifically to enable lookalike advertising on external platforms, extending the use of user data beyond PlanetScale's own Services.

Added July 10, 2026 Standard Seen across 288 platforms