Runway shares your personal data with advertising and analytics companies, which several US state laws classify as a 'sale' of your data even though no money changes hands, and you can opt out using the privacy choices link in the website footer.
This analysis describes what Runway's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This disclosure means your personal information is being shared with third parties for advertising purposes in ways that trigger opt-out rights in California and at least 15 other states; without actively opting out, this sharing continues by default.
Interpretive note: Whether Runway's opt-out mechanism fully satisfies the technical and operational requirements of CCPA, CPRA, and analogous state statutes (particularly regarding GPC signal recognition and opt-out durability) is a jurisdiction-specific legal question that depends on regulatory guidance and enforcement posture.
Your personal data is shared with third-party advertising and analytics partners by default, and opting out requires affirmative action on each device and each browser you use, with the opt-out potentially lost if you clear cookies.
How other platforms handle this
We may share your personal data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. We may also share your personal data with advertising partners to display relevant advertising to y...
In order to provide you with services, Valve needs to share some data with the publisher or developer of the game (for example to verify your ownership of the game and register your Steam ID with the publisher), or with other third parties that Valve works with to provide services to you. Valve will...
Zoom may share personal data with third-party advertising partners and analytics providers to deliver targeted advertising and measure the effectiveness of advertising campaigns. This may include sharing identifiers, device information, and behavioral data with partners such as advertising networks.
Monitoring
Runway has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"While we do not 'sell' personal information in the traditional sense, our disclosure of personal information to third-party advertising and analytics partners as described in the section titled 'When we disclose the information we collect about you' above may be considered a 'sale' subject to these opt-out rights. You can opt out of such disclosures by clicking the 'Your Privacy Choices' link on our website footer, or designate an authorized agent to do so on your behalf. Note, if you use a cookie blocker such as Ghostery, it may block visibility of this tool or link, including in your web footer. If you have enabled a legally recognized browser-based opt out preference signal (such as Global Privacy Control) on your browser, we recognize such preference in accordance and to the extent required by applicable law.— Excerpt from Runway's Runway Privacy Policy
(1) REGULATORY LANDSCAPE: This provision engages CCPA and CPRA (California), Colorado Privacy Act, Connecticut Data Privacy Act, and analogous statutes in the 15-plus states listed in the policy. Each statute defines 'sale' or 'sharing for targeted advertising' differently; the policy's acknowledgment that disclosures 'may be considered a sale' reflects this definitional variance. The FTC has authority over deceptive practices in online advertising data flows. (2) GOVERNANCE EXPOSURE: High. The policy places opt-out responsibility on the user (per-device, per-browser) and acknowledges that opt-out preference signals via Global Privacy Control are recognized only 'to the extent required by applicable law,' which introduces compliance ambiguity in states like California where GPC recognition is mandatory. The caveat that cookie blockers may prevent visibility of the opt-out tool creates an additional mechanism failure risk. (3) JURISDICTION FLAGS: California (mandatory GPC recognition under CPRA), Colorado (GPC recognition required), Connecticut, and other states where opt-out mechanisms must be conspicuous and functional create the highest exposure. Enterprise customers with EU users should assess whether behavioral advertising data flows satisfy GDPR legitimate interest or consent requirements. (4) CONTRACT AND VENDOR IMPLICATIONS: Data sharing agreements with advertising and analytics partners should be reviewed to confirm whether recipients qualify as 'service providers' or 'contractors' under CCPA (limiting onward use) versus 'third parties' triggering full sale/sharing opt-out rights. The policy's reference to Google Analytics and Stripe by name suggests these are key sub-processors requiring current DPA review. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should audit the functionality and visibility of the 'Your Privacy Choices' opt-out mechanism across devices and browsers, confirm GPC signal recognition is implemented as required by California law, and verify that opt-out preferences are maintained independent of cookie-clearing events where technically feasible. Annual review of advertising partner contracts should confirm alignment with the policy's disclosure of data sharing purposes.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This disclosure means your personal information is being shared with third parties for advertising purposes in ways that trigger opt-out rights in California and at least 15 other states; without actively opting out, this sharing continues by default.
Your personal data is shared with third-party advertising and analytics partners by default, and opting out requires affirmative action on each device and each browser you use, with the opt-out potentially lost if you clear cookies.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Runway.