The policy states that cookie-derived visitor information and hashed contact identifiers may be shared with or used by third parties for marketing and advertising purposes, while asserting that directly identifying information such as name and contact details is not sold to outside parties.
This analysis describes what Postman's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision distinguishes between the 'sale' of directly identifying data (which the policy states does not occur) and the disclosure of cookie-based visitor data and hashed contact identifiers to advertising partners (which the policy authorizes). Under CCPA and analogous state laws, disclosure of personal information for cross-context behavioral advertising may constitute 'sharing' regardless of whether monetary consideration is exchanged, and this provision may require evaluation under those definitions.
⚠ Cookie-derived visitor information and hashed contact identifiers will be shared with advertising partners for marketing purposes as described in the policy unless the user opts out via the 'Your Privacy Choices' mechanism.
Cross-platform context
See how other platforms handle Advertising Partner Data Sharing and similar clauses.
Compare across platforms →"We are not in the business of selling information about you to advertisers or other third parties. We do not sell information that directly identifies you (like name and contact info) to outside parties. Visitor information, however, including information collected via cookies and other tracking technology, may be provided to other parties for marketing, advertising, or other uses. We may also share or use hashed contact information for this purpose.Excerpt from Postman's Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages the CCPA definition of 'sharing' personal information for cross-context behavioral advertising, which does not require monetary consideration.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This provision distinguishes between the 'sale' of directly identifying data (which the policy states does not occur) and the disclosure of cookie-based visitor data and hashed contact identifiers to advertising partners (which the policy authorizes). Under CCPA and analogous state laws, disclosure of personal information for cross-context behavioral advertising may constitute 'sharing' regardless of whether monetary consideration is exchanged, and …
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Postman.