This analysis describes what Stash's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Biometric data is among the most sensitive categories of personal information because it is immutable — a person cannot change their fingerprints or facial geometry if the data is compromised.
Interpretive note: The excerpt is a definitional list and does not itself state the collection mechanism or the conditions under which each biometric type is collected. The 'including, but not limited to' language means additional biometric types beyond those listed may also be collected.
The updated policy explicitly discloses collection of geolocation data, driver's license numbers, audio and video recordings of customer service calls, and inferences drawn from your personal data to create behavioral profiles reflecting your preferences, characteristics, and psychological trends. The policy also expands the definition of "Stash" to include third parties acting on the company's behalf, meaning your data may be shared with external service providers. The policy now applies to all users of Stash services, not just registered customers. You can review your account settings or contact Stash at the provided email or phone number to access, review, or modify personal information you have provided.
View change record →Stash may collect physical and behavioral biometric identifiers from you, including some that are permanent and cannot be changed.
How other platforms handle this
When you use our Services, we may automatically collect your Data including IP address, operating system, browser you are using, your Account's preference settings, advertising identifiers, WiFi/WLAN Bluetooth, mobile network information...
We collect information when you interact with our Services, including the features you use, the links you click on, and your interactions with others on the Services.
We collect information about existing and potential Guests from other sources to enhance our information and improve the accuracy of our records.
"Biometric information: distinguishing physical or behavioral biological human characteristics used to identify a person, including, but not limited to, fingerprints, hand or facial geometry or patterns, voice characteristics, typing cadence...Excerpt from Stash's Privacy Policy
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
Biometric data is among the most sensitive categories of personal information because it is immutable — a person cannot change their fingerprints or facial geometry if the data is compromised.
Stash may collect physical and behavioral biometric identifiers from you, including some that are permanent and cannot be changed.
ConductAtlas has identified this type of provision across 286 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Stash.