139 Total
36 High severity
84 Medium severity
19 Low severity

Key Facts

Through whom does StockX collect biometric data?
StockX collects biometric data through its third-party identity verification provider, Persona, which captures a photo of your ID and your face and compares facial geometry.
What does StockX's third-party identity verification provider capture and compare?
StockX collects biometric data through its third-party identity verification provider, Persona, which captures a photo of your ID and your face and compares facial geometry.
What may StockX's identity verification process collect and use?
StockX's identity verification process may collect and use biometric data.
When will StockX seek your consent?
StockX will seek your consent before having your biometric data collected.
What right do users have?
StockX grants users the right not to be discriminated against for exercising any of their privacy rights.
For exercising what may users not be discriminated against?
StockX grants users the right not to be discriminated against for exercising any of their privacy rights.
What right does StockX grant users to direct StockX?
StockX grants users the right to direct StockX to limit the use or disclosure of their sensitive personal information.
What right does StockX grant users regarding the sharing of their personal information?
StockX grants users the right to opt out of the sharing of their personal information for cross-context behavioral advertising or targeted advertising.
Does StockX currently engage in segmentation or automated decision-making?
StockX currently engages in segmentation or automated decision-making without human intervention, including profiling.
What payment information does StockX collect through a third-party payment gateway?
StockX collects payment card, billing address, bank account, bank card, and digital payment services account information through a third-party payment gateway and does not store this payment information on its own servers.
Stay ahead of the changes
Track StockX and get the diff the day its terms change.
Summary

StockX's privacy policy explains what personal information the company collects about you, who it shares that information with, and what rights you have over it. StockX collects sensitive data including biometric information and government IDs through third-party providers, and may sell or share your name, address, and email with advertisers, social media platforms, and data brokers. You have the right to opt out of targeted advertising, to limit how StockX uses your sensitive personal information, and to be free from discrimination for exercising these rights.

Analysis

The StockX Privacy Policy establishes the company's practices for collecting, using, and sharing personal information across its platform. StockX collects extensive sensitive data including biometric information (via third-party provider Persona), government-issued identification documents, tax identification numbers, and payment information routed through a third-party payment gateway that StockX does not store on its own servers. StockX may share or sell personal information — including name, address, and email — to advertising partners, social media platforms, data brokers, and analytics providers, and employs targeting cookies that enable cross-site behavioral tracking. The policy grants users rights to opt out of targeted advertising, to limit use or disclosure of sensitive personal information, and to non-discrimination for exercising any privacy right, while also disclosing that StockX engages in automated decision-making and profiling without human intervention.

What this means for you

StockX collects some of the most sensitive categories of personal data, including biometric data (photographs of your face and ID processed by a third-party provider called Persona) and government identification documents; StockX will seek your consent before biometric data is collected. Your personal information — including name, address, and email — may be sold or shared with advertising partners, data brokers, and social media platforms, and targeting cookies track your activity across other websites to serve you ads. You can exercise your right to opt out of the sharing of your personal information for cross-context behavioral advertising or targeted advertising, and you can direct StockX to limit the use or disclosure of your sensitive personal information.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

1 important change detected

2 versions captured · Last updated: July 2026

July 9, 2026

medium
What changed StockX updated its privacy policy on July 9, 2026 to explicitly authorize sharing and selling of personal information to additional categories of third parties. The revised policy adds Live Sellers on the Live Shopping Platform and Sellers on the Listings Marketplace as recipients of user data, and explicitly states that data may be 'shared or sold' to advertising partners and data brokers, whereas the previous version used language limited to 'sharing.' The policy also reorganized its table of contents with numbered sections for clarity.
Why this matters The updated policy authorizes StockX to share and sell personal information to a broader range of recipients than previously disclosed. Specifically, the policy now explicitly permits sharing or selling personal data, including identifiers, transaction data, and browsing behavior, to Live Sellers on the Live Shopping Platform, Sellers on the Listings Marketplace, and third-party data brokers. The prior version limited disclosures to 'sharing' with 'StockX Verified Sellers' without explicit reference to data sales or data brokers. Under the revised terms, data sale and sharing is now standard practice for analytics, advertising, and marketplace partners. The policy does not describe a consumer opt-out mechanism for this data sharing or selling.
View full change record →
Featured, High severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

139 provisions
12 featured
15 clause types
36 high severity
Privacy Rights 42 9 high
Show all 42 privacy rights provisions
AI / Automated Decision-Making 1 1 high
General Contract Terms 1 1 high
Stay ahead of the changes

Monitoring

StockX has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Biometric Data Collected Through Persona Third Party and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured July 9, 2026 01:22 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000734
Version ID CA-V-004654
SHA-256 5f972315c3314294a56a18746e81c4d551f0e9d4e19b8710fa0ff79e384791d4
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans