Whatnot · Whatnot Privacy Policy · View original document ↗

Opt-Out of Sale or Sharing of Personal Data (CCPA/CPRA)

High severity Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Whatnot recorded 6 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Whatnot Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what Whatnot's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The clause operationalizes CCPA/CPRA compliance requirements by creating a documented mechanism for California residents to control data sale and sharing practices. It establishes a specific processing timeline and creates a special protection category for minors under 16.

Recent Activity

This document changed recently

High May 30, 2026

The updated terms require all disputes arising from the Strategic Seller Agreement or a seller's relationship with Whatnot to be resolved through arbitration as defined in the main Terms of Service, rather than through litigation in California courts. Previously, sellers could bring claims in federal or state courts located in Los Angeles; under the revised language, this option is eliminated except where the Terms of Service arbitration section expressly permits court proceedings. The change applies to the relationship between individual sellers and Whatnot, affecting how contract disputes, payment disagreements, or other claims are processed and adjudicated.

View change record →
Medium May 14, 2026

The updated terms establish a new Creator Program for UK users that allows them to submit content (videos, shopping hauls, seller spotlights) and potentially receive program benefits including cash payments, shopping credit, or promotional support. The terms grant Whatnot a one-year non-exclusive license to use submitted content across all marketing channels worldwide for promotion, advertising, and derivative works without additional compensation beyond the stated program benefit. Creators must be at least 18 years old, maintain a valid Whatnot account, and complete identity verification and tax documentation before receiving any payment. The terms state explicitly that submission does not guarantee content will be selected, used, featured, or rewarded, and Whatnot retains discretion to reject, remove, or stop using content at any time.

View change record →

Consumer impact (what this means for users)

California residents operating under these terms may exercise opt-out rights through two specified channels and receive processing confirmation within 15 business days. Consumers under 16 receive heightened protection requiring affirmative authorization before any sale or sharing of their personal information.

How other platforms handle this

Ledger Medium

At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.

Strava Medium

We use information to enhance the quality, reliability, and/or accuracy of our AI Features by creating, developing, training, testing, improving, and maintaining AI and ML models run by Strava or our service providers. We use aggregated, de-identified data for this purpose. We also use personal info...

Garmin Medium

If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...

See all platforms with this clause type →

Monitoring

Whatnot has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
If you are a California resident, you have the right to opt-out of the sale or sharing of your personal information. You can exercise this right by clicking the 'Do Not Sell or Share My Personal Information' link available on our website, or by submitting a request through our privacy portal. We will process your request within 15 business days. We do not sell the personal information of consumers we know to be under 16 years of age without affirmative authorization.

— Excerpt from Whatnot's Whatnot Privacy Policy

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Whatnot Privacy Policy
Entity
Whatnot
Document last updated
May 5, 2026
Tracking information
First tracked
May 20, 2026
Last verified
May 20, 2026
Record ID
CA-P-007066
Document ID
CA-D-00732
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
edfabe18c30c0c9dfe08867c3872885e0d963241db8222ec0afffc7bd4e70e0c
Analysis generated
May 20, 2026 21:58 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Whatnot
Document: Whatnot Privacy Policy
Record ID: CA-P-007066
Captured: 2026-05-20 21:58:33 UTC
SHA-256: edfabe18c30c0c9d…
URL: https://conductatlas.com/platform/whatnot/whatnot-privacy-policy/opt-out-of-sale-or-sharing-of-personal-data-ccpacpra/
Accessed: June 10, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Whatnot's Opt-Out of Sale or Sharing of Personal Data (CCPA/CPRA) clause do?

The clause operationalizes CCPA/CPRA compliance requirements by creating a documented mechanism for California residents to control data sale and sharing practices. It establishes a specific processing timeline and creates a special protection category for minors under 16.

How does this clause affect you?

California residents operating under these terms may exercise opt-out rights through two specified channels and receive processing confirmation within 15 business days. Consumers under 16 receive heightened protection requiring affirmative authorization before any sale or sharing of their personal information.

Is ConductAtlas affiliated with Whatnot?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Whatnot.