This is Reddit's Privacy Policy, which explains what personal information Reddit collects about you — including your posts, messages, browsing behavior, device data, and inferred location — and how it uses and shares that data, including with advertisers and for AI model training. The most important thing to know is that Reddit may use your publicly posted content to train artificial intelligence and machine learning models, and shares personal data with advertising partners for targeted ads, which you can partially opt out of through your account privacy settings. If you are a California resident or EU/UK user, you have specific rights to access, delete, or opt out of the sale and sharing of your personal data by visiting Reddit's privacy settings or submitting a request through their designated privacy portal.
This document is Reddit's Privacy Policy, governing the collection, use, storage, and disclosure of personal data for all users of Reddit's platforms and services, with legal bases including consent, legitimate interests, and contractual necessity under applicable frameworks including GDPR and CCPA. The policy creates significant obligations for Reddit to disclose data practices and grants users rights to access, correct, delete, and port their data, while imposing on users an obligation to understand that broad categories of information — including usage data, location inferences, device identifiers, and user-generated content — are collected automatically and may be used for targeted advertising. A notably expansive provision permits Reddit to share personal data with third-party advertising partners and to use content posted by users to train AI and machine learning models, which deviates from many platform peers in its explicitness and scope. The policy explicitly engages GDPR (EU 2016/679), UK GDPR, CCPA/CPRA (Cal. Civ. Code §1798.100 et seq.), and COPPA (15 U.S.C. §6501), with Reddit acting as both data controller and, in some contexts, processor. Material compliance considerations include the adequacy of consent mechanisms for AI/ML training uses of user content, the sufficiency of opt-out infrastructure for CCPA 'sale' and 'sharing' of personal information, and cross-border data transfer mechanisms for EU/UK users.
REGULATORY EXPOSURE: This policy engages GDPR (EU 2016/679, particularly Art. 6 lawful basis, Art. 13/14 transparency, Art. 17 erasure, Art. 20 portability, Art. 46 transfer mechanisms), UK GDPR (pos…
REGULATORY EXPOSURE: This policy engages GDPR (EU 2016/679, particularly Art. 6 lawful basis, Art. 13/14 transparency, Art. 17 erasure, Art. 20 portability, Art. 46 transfer mechanisms), UK GDPR (post-Brexit equivalent obligations), CCPA/CPRA (Cal. Civ. Code §1798.100, §1798.120 opt-out of sale/sha…
Compliance intelligence locked
Regulatory exposure, material risk, and due diligence action items.
1 change analyzed since monitoring began.