Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that Rumble and third-party advertising partners collect usage activity, device identifiers, unique identifiers, IP addresses, and potentially hashed email addresses, and use this data combined across devices and websites to build behavioral profiles for targeted advertising.
This analysis describes what Rumble's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes cross-device and cross-site behavioral profiling for advertising by both Rumble and third-party partners, using data categories including hashed email addresses that may qualify as Personal Information under certain data protection laws. The involvement of third-party advertising partners means data collected on Rumble may be combined with data from other sites those partners operate across.
The updated policy modifies the language governing notification of Personal Information disclosure. The prior version stated that Rumble 'will attempt to notify you before we disclose your Personal Information,' whereas the revised language states the company 'may attempt to notify you.' This shifts the provision from an asserted commitment to attempt notification toward a discretionary authorization to do so when permitted by law. Under the revised terms, notification attempts are now framed as optional rather than intended.
View change record →The agreement authorizes Rumble and third-party advertising partners to collect device identifiers, unique identifiers, IP addresses, usage activity, and hashed email addresses, and to combine this data across devices and websites to create behavioral profiles used for targeted advertising. Users in applicable jurisdictions have the right to opt out of this targeted advertising profiling as described in the policy.
Cross-platform context
See how other platforms handle Third-Party Advertising Partners and Behavioral Profiling and similar clauses.
Compare across platforms →Monitoring
Rumble has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We and our third-party advertising partners collect information from visitors to our websites, including usage activity, device identifiers, cookies, unique identifiers, and IP addresses. We may also collect hashed email addresses that may include Personal Information under certain data protection laws. We and our third-party advertising partners engage in targeted advertising when displaying ads to you based on Personal Information that is collected across other devices or websites, or profiles created from your activity across websites. Such Personal Information may be combined with other device or activity information to deliver ads that are personalized or targeted to you.Excerpt from Rumble's Privacy Policy
(1) REGULATORY LANDSCAPE: Cross-device and cross-site behavioral profiling for advertising engages the CCPA/CPRA's definitions of sale and sharing of Personal Information, GDPR's requirements for consent-based profiling and automated decision-making disclosures, and the FTC Act's consumer protection provisions. The use of hashed email addresses as a cross-platform identifier may constitute Personal Information under CCPA, GDPR, and other applicable laws depending on the specifics of implementation. (2) GOVERNANCE EXPOSURE: High. The combination of data across devices and websites by both Rumble and third-party partners creates a complex data flow that should be documented in data mapping exercises. The use of hashed email addresses as an identifier introduces additional compliance considerations under data protection laws that treat pseudonymized data as personal information where re-identification is possible. (3) JURISDICTION FLAGS: California's CPRA imposes opt-out rights for profiling in connection with targeted advertising. EU and UK users are subject to GDPR requirements for consent-based profiling and transparency about automated processing. Illinois BIPA may be implicated if any biometric data is incidentally collected in the profiling process, though the policy does not disclose biometric data collection. Colorado, Virginia, and other states with profiling opt-out rights also apply. (4) CONTRACT AND VENDOR IMPLICATIONS: Data processing agreements with third-party advertising partners should specify permissible data use, retention limits, and restrictions on combining Rumble-collected data with data from other sources. Procurement teams should assess whether advertising partner contracts include appropriate representations about compliance with applicable advertising and privacy laws. (5) COMPLIANCE CONSIDERATIONS: Data mapping should document the specific data flows from Rumble to each third-party advertising partner, including the categories of data shared, the purposes of sharing, and the legal basis for each flow. The policy's reference to hashed email addresses should be evaluated against applicable definitions of Personal Information in each jurisdiction to determine whether additional disclosures or consent mechanisms are required.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision authorizes cross-device and cross-site behavioral profiling for advertising by both Rumble and third-party partners, using data categories including hashed email addresses that may qualify as Personal Information under certain data protection laws. The involvement of third-party advertising partners means data collected on Rumble may be combined with data from other sites those partners operate across.
The agreement authorizes Rumble and third-party advertising partners to collect device identifiers, unique identifiers, IP addresses, usage activity, and hashed email addresses, and to combine this data across devices and websites to create behavioral profiles used for targeted advertising. Users in applicable jurisdictions have the right to opt out of this targeted advertising profiling as described in the policy.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Rumble.