Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that StockX does not knowingly collect personal information from users under age 16 and commits to deleting any such data if inadvertently collected.
This analysis describes what StockX's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a minimum age threshold of 16, which exceeds the COPPA threshold of 13, and commits to deletion of data collected from users under 16. The reliance on a 'knowingly' standard means the protection depends on self-reporting and detection rather than active age verification mechanisms.
The updated policy authorizes StockX to share and sell personal information to a broader range of recipients than previously disclosed. Specifically, the policy now explicitly permits sharing or selling personal data, including identifiers, transaction data, and browsing behavior, to Live Sellers on the Live Shopping Platform, Sellers on the Listings Marketplace, and third-party data brokers. The prior version limited disclosures to 'sharing' with 'StockX Verified Sellers' without explicit reference to data sales or data brokers. Under the revised terms, data sale and sharing is now standard practice for analytics, advertising, and marketplace partners. The policy does not describe a consumer opt-out mechanism for this data sharing or selling.
View change record →The agreement states that users under 16 are not permitted to use the Services and that personal data collected from users under 16 will be deleted upon discovery. The policy does not describe the age verification mechanism used to enforce this restriction.
Cross-platform context
See how other platforms handle Children Under 16 Data Prohibition and similar clauses.
Compare across platforms →Monitoring
StockX has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We do not knowingly collect or solicit Personal Information from children under 16; if you are a child under 16, please do not attempt to register on or otherwise use the Services or send us any Personal Information. If we learn we have collected Personal Information from a child under 16, we will delete that information as quickly as possible. If you believe that a child under 16 may have provided us with their Personal Information, please contact us as indicated in the 'Contact us' section below.Excerpt from StockX's Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages the Children's Online Privacy Protection Act (COPPA), which applies to children under 13, and GDPR Article 8 and UK GDPR provisions governing children's consent to data processing. The policy's threshold of 16 aligns with GDPR's default age of digital consent in many EU member states. The FTC has primary enforcement authority over COPPA. State Attorneys General may also enforce analogous state children's privacy statutes. 2) GOVERNANCE EXPOSURE: Low. The 16-year threshold exceeds COPPA's 13-year minimum and aligns with GDPR's default digital consent age. The 'knowingly' standard is consistent with COPPA's language, though compliance teams may wish to evaluate whether any active age assurance mechanism is in place. 3) JURISDICTION FLAGS: EU member states vary in their GDPR Article 8 age of consent thresholds, with some setting 13 and others 16. The policy's blanket 16-year threshold provides a consistent standard across jurisdictions. California's Age-Appropriate Design Code Act may impose additional obligations beyond those described in this provision. 4) CONTRACT AND VENDOR IMPLICATIONS: Service providers and advertising partners receiving data from StockX should be contractually restricted from using that data for targeting of users under 16 consistent with this policy commitment. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should evaluate whether the platform's registration flow includes any age assurance mechanism beyond self-declaration, and whether advertising targeting controls prevent delivery of targeted advertising to users identified as potentially under 16.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes a minimum age threshold of 16, which exceeds the COPPA threshold of 13, and commits to deletion of data collected from users under 16. The reliance on a 'knowingly' standard means the protection depends on self-reporting and detection rather than active age verification mechanisms.
The agreement states that users under 16 are not permitted to use the Services and that personal data collected from users under 16 will be deleted upon discovery. The policy does not describe the age verification mechanism used to enforce this restriction.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by StockX.