Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that StockX has sold or shared personal identifiers, transaction and commercial data, and internet or electronic usage data with advertising and analytics partners and data brokers in the preceding 12 months.
This analysis describes what StockX's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses that personal data including identifiers and transaction histories has been transferred to data brokers, a category of recipient that may independently aggregate, re-sell, or further process that data outside StockX's direct control. Under CCPA, this disclosure triggers specific consumer opt-out rights and data broker registration obligations that compliance teams should evaluate.
The updated policy authorizes StockX to share and sell personal information to a broader range of recipients than previously disclosed. Specifically, the policy now explicitly permits sharing or selling personal data, including identifiers, transaction data, and browsing behavior, to Live Sellers on the Live Shopping Platform, Sellers on the Listings Marketplace, and third-party data brokers. The prior version limited disclosures to 'sharing' with 'StockX Verified Sellers' without explicit reference to data sales or data brokers. Under the revised terms, data sale and sharing is now standard practice for analytics, advertising, and marketplace partners. The policy does not describe a consumer opt-out mechanism for this data sharing or selling.
View change record →The agreement states that personal identifiers, transaction data, and internet usage data have been sold or shared with data brokers and advertising partners. Under these terms, consumers wishing to restrict this practice must opt out through both the 'Your Privacy Choices' cookie management portal and the account-level Data Sharing Preferences settings.
Cross-platform context
See how other platforms handle Sale and Sharing of Personal Data with Data Brokers and Advertising Partners and similar clauses.
Compare across platforms →Monitoring
StockX has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We may share or sell your Personal Information with third party analytics or advertising partners, including social media platforms and networks, and data brokers who provide analytics or marketing and advertising services. In the past 12 months, we have shared or sold your Personal Information, identifiers, transaction and commercial data, and internet or electronic usage data to our advertising and analytics partners and/or data brokers.Excerpt from StockX's Privacy Policy
1) REGULATORY LANDSCAPE: This provision directly engages CCPA, which requires businesses to disclose data sales and provide a 'Do Not Sell or Share My Personal Information' mechanism. The FTC Act is implicated by the sharing of personal data with data brokers. State data broker registration laws, including those in California and Vermont, may apply to downstream recipients. Applicable enforcement authorities include the California Privacy Protection Agency (CPPA) and FTC. 2) GOVERNANCE EXPOSURE: High. The disclosure that transaction and commercial data, personal identifiers, and internet usage data have been sold to data brokers creates significant compliance exposure, particularly under CCPA's sensitive personal information provisions and opt-out usability requirements. The breadth of data categories transferred to data brokers exceeds commonly observed disclosures limited to identifiers and usage data alone. 3) JURISDICTION FLAGS: California residents have the most direct regulatory protections under CCPA. EEA and UK residents are subject to GDPR's lawful basis requirements for data sales, which may require evaluation of whether consent or legitimate interests applies. The provision's global application creates heightened exposure in jurisdictions with data broker-specific regulations. 4) CONTRACT AND VENDOR IMPLICATIONS: Procurement teams should assess whether data processing agreements with advertising partners and data brokers include adequate data use limitations, deletion obligations, and audit rights. The policy does not describe contractual restrictions placed on data brokers' downstream use of transferred data, which may represent a due diligence gap. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the dual opt-out mechanism (cookie portal plus account settings) satisfies CCPA opt-out usability standards and that the GPC signal recognition described elsewhere in the policy applies consistently to this provision. Data mapping exercises should confirm that all data broker relationships are inventoried and that annual CCPA disclosure tables remain current.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision discloses that personal data including identifiers and transaction histories has been transferred to data brokers, a category of recipient that may independently aggregate, re-sell, or further process that data outside StockX's direct control. Under CCPA, this disclosure triggers specific consumer opt-out rights and data broker registration obligations that compliance teams should evaluate.
The agreement states that personal identifiers, transaction data, and internet usage data have been sold or shared with data brokers and advertising partners. Under these terms, consumers wishing to restrict this practice must opt out through both the 'Your Privacy Choices' cookie management portal and the account-level Data Sharing Preferences settings.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by StockX.