This analysis describes what StockX's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Biometric data is among the most sensitive personal data a company can collect; knowing it flows to a named third-party vendor clarifies who handles it.
The updated policy authorizes StockX to share and sell personal information to a broader range of recipients than previously disclosed. Specifically, the policy now explicitly permits sharing or selling personal data, including identifiers, transaction data, and browsing behavior, to Live Sellers on the Live Shopping Platform, Sellers on the Listings Marketplace, and third-party data brokers. The prior version limited disclosures to 'sharing' with 'StockX Verified Sellers' without explicit reference to data sales or data brokers. Under the revised terms, data sale and sharing is now standard practice for analytics, advertising, and marketplace partners. The policy does not describe a consumer opt-out mechanism for this data sharing or selling.
View change record →A third party, Persona, not StockX directly, captures and processes your facial image and ID photo as part of identity verification.
How other platforms handle this
telemetry information collected includes: (i) microservice settings, (ii) usage data and (iii) hardware environment.
Partners who have implemented or integrated certain Instacart services on their websites or applications may also let us collect information about your use of their sites or applications or share such information with us.
If you are an individual user, we collect, use, transfer, disclose and store any personal Data you provide to us in accordance with our privacy policy, (available on our website), and Applicable Privacy Laws.
Monitoring
StockX has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We collect this Biometric Data through our third-party service provider of identity verification services, Persona. Persona captures a photo of your ID and your face and compares the facial geometry...— Excerpt from StockX's StockX Privacy Policy
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Biometric data is among the most sensitive personal data a company can collect; knowing it flows to a named third-party vendor clarifies who handles it.
A third party, Persona, not StockX directly, captures and processes your facial image and ID photo as part of identity verification.
ConductAtlas has identified this type of provision across 298 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by StockX.