What are the institutional and regulatory implications of this document?

1) REGULATORY LANDSCAPE: This document engages with the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General. The simultaneous deployment of advertising tracking pixels from Taboola, Google Tag Manager, Snapchat, Pinterest, and Outbrain alongside the consent management layer may require evaluation under CCPA definitions of sale and sharing of personal information, part…

How does Shein's Shein Terms and Conditions affect users?

The agreement establishes data collection and disclosure practices for US Shein shoppers, with the page infrastructure deploying advertising and analytics tracking from at least six third-party vendors including Taboola, Google, Snapchat, Pinterest, and Outbrain. Under these terms, the Privacy SDK is configured to process Global Privacy Control signals, which under California law may constitute a valid opt-out of sale or sharing of personal information. You can exercise GPC-based opt-out rights…

How often is Shein's Shein Terms and Conditions updated?

ConductAtlas monitors this document daily and captures every version with cryptographic hashing and timestamp verification. Update frequency varies — see the change timeline on this page for complete version history.

Can I get alerted when Shein updates this document?

Yes. Monitor subscribers ($19/month) can add Shein to their watchlist and receive same-day email alerts whenever this document or any other Shein document changes.

CA-D-000261

Shein Terms and Conditions

Shein

Last change detected June 12, 2026 Terms of service

SHA-256: 7bab91de25f44e9cc78… 8 versions captured 8 changes documented

Create free account

Track 1 platform and get the weekly governance digest. No credit card required.

View original document at Shein ↗

This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology

5 Total

0 High severity

3 Medium severity

2 Low severity

Summary

This is Shein's US Consumer Privacy Notice, published at us.shein.com, governing how Shein collects, uses, and discloses personal information for US-based shoppers. The page simultaneously loads tracking pixels from Taboola, Google Tag Manager, Snapchat (four separate pixel configurations), Pinterest, and Outbrain alongside a cookie consent SDK that manages GPC signals and cookie clearing. The Privacy SDK is configured to support Global Privacy Control, linking to a separate Privacy and Security Policy at /Privacy-Security-Policy-a-282.html, though the full text of the substantive consumer rights notice was not available in the provided document source.

Technical / Legal Breakdown

This document is Shein's US Consumer Privacy Notice, governing data collection, use, and disclosure practices for users of the us.shein.com platform, with the stated legal basis appearing to be compliance with US state privacy laws including the California Consumer Privacy Act. The page source reveals active deployment of multiple third-party tracking technologies including Taboola, Google Tag Manager (DC-15299257), Snapchat (multiple pixel IDs: af90c7f8-bd28-4988-b1ce-1711aad792f4, 8fbe1595-8c5a-46b1-bbb2-66f3d57debde, 61be30a0-f186-4c86-aa42-fede180621d7, 90a6a3ab-e767-459b-a5ce-b259efb872dd), Pinterest, and Outbrain, loaded alongside a proprietary Privacy SDK that manages cookie consent, GPC signal handling, and cookie clearing. The document source includes a Global Privacy Control (GPC) integration via the Privacy SDK, with a configured privacy policy link at /Privacy-Security-Policy-a-282.html, though the full substantive policy text was truncated in the provided source and could not be fully assessed. The document engages with the CCPA and California Consumer Privacy Rights Act (CPRA) given the explicit US consumer privacy notice designation, and the GPC signal support suggests awareness of California opt-out of sale or sharing obligations. Material compliance considerations include the simultaneous loading of numerous advertising and analytics trackers alongside the consent management SDK, which may require evaluation under CCPA sale or sharing definitions depending on how data flows to these third parties.

Institutional Analysis

Institutional analysis available with Compliance

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.

Start Compliance free trial

8 important changes detected

8 versions captured · Last updated: June 2026

June 12, 2026

low

What changed Shein's Terms and Conditions were updated on June 12, 2026, with one sentence modified in the document. The detected change involved navigation menu additions to the user interface header, specifically the addition of 'Sign in / Register My Orders my message My Coupons My Points Recently Viewed More Services' links. This appears to be a frontend navigation update rather than a substantive change to terms of service, rights, obligations, or policies.

Why this matters This change does not materially affect the terms consumers operate under. The detected modification was a user interface update adding navigation links to account features in the header menu. No changes to data collection, rights, obligations, fees, or contractual terms were identified.

View full change record →

June 12, 2026

low

What changed On June 12, 2026, Shein modified two sentences in its Terms and Conditions document, including a change to search example text from 'bikini' to 'squishy' and removal of login/registration UI elements from the document. The substantive Privacy Notice section dated March 31, 2026, remains unchanged. This appears to be a formatting or navigation element update with no material change to privacy, data collection, or consumer rights as stated in the policy.

Why this matters The detected changes appear to be formatting and navigation element updates rather than substantive policy revisions. The Privacy Notice section that explains data collection, use, and consumer rights remains dated March 31, 2026, with no modifications noted. No new obligations, restrictions, or data practices have been added or removed based on the available change information.

View full change record →

May 13, 2026 low

Shein removed two sentences from its website interface that notified users about saved shopping cart items and prompted them to sign in to view those items. The removed messaging stated: …

View change record →

May 11, 2026 low

On May 11, 2026, Shein updated its Terms and Conditions with minor interface changes to its website navigation and user account messaging. The changes include updated example search terms in …

View change record →

May 1, 2026 low

Shein's privacy notice updated a single example product reference, changing from 'bikini' to 'dresses' in their search navigation help text. This is a minor editorial update to product category language …

View change record →

April 29, 2026 medium

Shein removed language from their cookie consent interface that asked users whether they agreed to have their account remembered for future logins. The new version no longer includes this yes/no …

View change record →

April 22, 2026 low

Shein's Terms and Conditions document was updated on April 22, 2026, with minor formatting and structural changes to the navigation and category sections of their website. Two sentences referencing saved …

View change record →

April 19, 2026 low

Shein updated its website interface on April 19, 2026 to add three UI elements: a message informing returning users that saved shopping cart items are preserved, a prompt to sign …

View change record →

Recent Provision Changes Jun 12, 2026

5 provisions unchanged.

View full change record →

Medium — 3 provisions

Global Privacy Control Signal Recognition Compare →

The Privacy SDK deployed on the Shein US privacy notice page is configured with GPC support enabled (enableGpcSdk: true), linking GPC settings to the Shein Privacy and Security Policy. This configuration indicates the platform is set up to recognize and process Global Privacy Control browser signals.

Added May 20, 2026 Standard Seen across 284 platforms
Multi-Vendor Advertising Pixel Deployment Compare →

The Shein US privacy notice page loads advertising and analytics tracking scripts from Taboola, Google Tag Manager (property DC-15299257), four distinct Snapchat pixel configurations, Outbrain, and Pinterest. These scripts are conditionally loaded based on the privacy consent SDK state, as indicated by the data-sheinprivacytype attribute pattern on each script tag.

Added May 20, 2026 Standard Seen across 284 platforms
One-Shot Identifier (OEST) Management Compare →

The platform deploys a proprietary one-shot identifier system (GLOBAL_SN_OEST) that generates and manages a UUID-based user identifier stored in both cookies and localStorage, with a configured expiry of 400 days. The identifier is synchronized with server-side records via a POST request to /bff-api/user-api/init_info/update_oneshot and is encoded using base64 with timestamp embedding.

Added May 20, 2026 Standard Seen across 284 platforms

Low — 2 provisions

Consent Agreement Timeout Configuration Compare →

The Privacy SDK is configured with a consent agreement timeout of 365 days (1000 * 60 * 60 * 24 * 365 milliseconds), meaning recorded consent preferences are retained and applied for up to one year before the consent mechanism is re-triggered. Cookie clearing is enabled (enableClearCookie: true) while storage clearing is disabled (enableClearStorage: false).

Added May 20, 2026 Standard Seen across 262 platforms
Privacy SDK Cookie Management and Storage Interception Compare →

The Privacy SDK is configured to intercept document cookie operations (disableInterceptDocumentCookie: false), enable cookie clearing upon consent events (enableClearCookie: true), but disable local storage clearing (enableClearStorage: false) and disable storage list interception (enableInterceptStorageList: false). The cookie clearing API endpoint is configured at /bff-api/user-api/cookie_banner/remove_cookies.

Added May 20, 2026 Standard Seen across 284 platforms