This analysis describes what StockX's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Biometric data is among the most sensitive personal data a company can collect; knowing it flows to a named third-party vendor clarifies who handles it.
The updated policy authorizes StockX to share and sell personal information to a broader range of recipients than previously disclosed. Specifically, the policy now explicitly permits sharing or selling personal data, including identifiers, transaction data, and browsing behavior, to Live Sellers on the Live Shopping Platform, Sellers on the Listings Marketplace, and third-party data brokers. The prior version limited disclosures to 'sharing' with 'StockX Verified Sellers' without explicit reference to data sales or data brokers. Under the revised terms, data sale and sharing is now standard practice for analytics, advertising, and marketplace partners. The policy does not describe a consumer opt-out mechanism for this data sharing or selling.
View change record →A third party, Persona, not StockX directly, captures and processes your facial image and ID photo as part of identity verification.
How other platforms handle this
telemetry information collected includes: (i) microservice settings, (ii) usage data and (iii) hardware environment.
Partners who have implemented or integrated certain Instacart services on their websites or applications may also let us collect information about your use of their sites or applications or share such information with us.
If you are an individual user, we collect, use, transfer, disclose and store any personal Data you provide to us in accordance with our privacy policy, (available on our website), and Applicable Privacy Laws.
"We collect this Biometric Data through our third-party service provider of identity verification services, Persona. Persona captures a photo of your ID and your face and compares the facial geometry...Excerpt from StockX's Privacy Policy
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Biometric data is among the most sensitive personal data a company can collect; knowing it flows to a named third-party vendor clarifies who handles it.
A third party, Persona, not StockX directly, captures and processes your facial image and ID photo as part of identity verification.
ConductAtlas has identified this type of provision across 296 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by StockX.