What is the severity of this clause?

ConductAtlas classifies this Device Sensor & Geolocation Monitoring (pumbaa-rule) clause as high severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

Device Sensor & Geolocation Monitoring (pumbaa-rule) — TikTok

Share 𝕏 Share in Share 🔒 PDF

Watch TikTok Get alerts when this provision or policy changes.

Watch — $9.99/mo

Why it matters (compliance & risk perspective)

Geolocation is among the most sensitive personal data categories; monitoring its API access without a prominent disclosure on this specific page may violate GDPR transparency and ePrivacy consent requirements.

Consumer impact (what this means for users)

TikTok's platform policy pages embed JavaScript instrumentation that actively monitors device sensors including clipboard content, geolocation, accelerometer, gyroscope, and battery status, meaning data collection occurs even when users are simply reading policy documents. This broad sensor monitoring, combined with TikTok's known data-sharing practices and ByteDance's ownership structure, creates meaningful privacy risk for all users including those in jurisdictions with strong data protection laws. You can limit TikTok's data access by revoking clipboard, location, and microphone permissions for the TikTok app in your device's settings.

How other platforms handle this

Wealthfront Medium

Your browsing activity may be tracked across different websites and different devices or apps. For example, we may attempt to match your browsing activity on your mobile device with your browsing activity on your computer. To do this, we may analyze your browsing patterns, geo-location and device id...

Netflix Medium

cookie data, resettable device identifiers, advertising identifiers and other unique identifiers (described below in the section 'Cookies and other Technologies').

Pinterest Medium

Children under 13 are not allowed to use Pinterest. If you are based in a state or country with an older age requirement, you may only use the Services if you are at or over the age at which you can provide consent to data processing.

See all platforms with this clause type →

This clause could change without notice.

Get alerted when TikTok updates this policy — with plain-language summaries and severity ratings.

Watch TikTok Need compliance memos? Professional →

View original clause language

"apiName":"getCurrentPosition","apiObj":"navigator.geolocation","apiType":"method","block":false,"freqSampleRate":1,"paramCondition":{},"sampleRate":1,"stackRate":1,"withRawArguments":[false,false,true],"withStack":false},{"apiName":"watchPosition","apiObj":"navigator.geolocation","apiType":"method","block":false,"freqSampleRate":1,"paramCondition":{},"sampleRate":1,"stackRate":1,"withRawArguments":[false,false,true],"withStack":false}

Applicable regulations

United States Federal

CAN-SPAM

United States Federal

DMA

European Union

FCRA

United States Federal

GDPR

European Union

GLBA

United States Federal

HIPAA

United States Federal

TCPA

United States Federal

UK GDPR

United Kingdom

Provision details

Document information

Document

TikTok Community Guidelines

Entity

TikTok

Document last updated

April 29, 2026

Tracking information

First tracked

April 3, 2026

Last verified

April 9, 2026

Record ID

CA-P-002317

Document ID

CA-D-00034

Evidence Provenance

Source URL

https://www.tiktok.com/community-guidelines/en/

Wayback Machine

View archived versions →

SHA-256

b284b4e910ea0436fae2982f81c60e65a11a5de7c9ed3db97b9131d136636bfb

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: TikTok | Document: TikTok Community Guidelines | Record: CA-P-002317
Captured: 2026-04-03 08:45:47 UTC | SHA-256: b284b4e910ea0436…
URL: https://conductatlas.com/platform/tiktok/tiktok-community-guidelines/device-sensor-geolocation-monitoring-pumbaa-rule/
Accessed: May 4, 2026

Classification

Severity

High

Device Sensor & Geolocation Monitoring (pumbaa-rule)

Why it matters (compliance & risk perspective)

Consumer impact (what this means for users)

Applicable regulations

Provision details

Other risks in this policy

Related Analysis

Frequently Asked Questions