Shein's website is configured to detect Global Privacy Control signals sent by your browser, which under California law can function as an opt-out of the sale or sharing of your personal information.
This analysis describes what Shein's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
GPC signal honoring is required for businesses covered by the California Privacy Rights Act, and whether detection translates to operational suppression of data sharing is a material compliance question that this document does not resolve.
Interpretive note: The SDK configuration confirms GPC detection is enabled, but whether this detection operationally suppresses data sale or sharing cannot be determined from the document source alone.
Previously, Shein asked users to explicitly agree or disagree with account persistence for future logins. The updated terms remove this choice entirely. Instead of a consent decision, users now see a promotional discount offer in that location. This means users lose direct control over whether Shein maintains their login session across device visits, which affects convenience and privacy preferences around authentication persistence.
View change record →If you use a browser with GPC enabled, Shein's system detects that signal, but the document does not confirm whether this detection results in actual restriction of data sale or sharing activities affecting your personal information.
How other platforms handle this
we do honor legally-recognized browser-based mechanisms (such as the Global Privacy Control designed to signal your opt out choices under certain state laws).
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
"enableGpcSdk: true, gpcSetting: { privacyPolicyLink: '/Privacy-Security-Policy-a-282.html' }Excerpt from Shein's Terms and Conditions
REGULATORY LANDSCAPE: The California Privacy Rights Act requires covered businesses to honor GPC signals as opt-out requests for the sale and sharing of personal information.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
GPC signal honoring is required for businesses covered by the California Privacy Rights Act, and whether detection translates to operational suppression of data sharing is a material compliance question that this document does not resolve.
If you use a browser with GPC enabled, Shein's system detects that signal, but the document does not confirm whether this detection results in actual restriction of data sale or sharing activities affecting your personal information.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Shein.