The policy states that personal information may be transferred to and processed in the United States, where privacy protections may differ from those in the user's home jurisdiction, and that EU/EEA users' data is transferred to the US.
This analysis describes what Writer's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses cross-border data transfers to the United States but does not specify which transfer mechanism (such as standard contractual clauses or the EU-U.S. Data Privacy Framework) applies, which may require evaluation under current GDPR transfer adequacy requirements.
Interpretive note: The policy does not specify the legal transfer mechanism used for EU/EEA or UK personal data, creating uncertainty about the specific compliance basis for international transfers.
The updated policy removes detailed disclosures that previously explained five cookie categories (strictly necessary, functional, performance, targeting), their purposes, and user controls. The revised policy retains only a brief statement that Writer uses cookies to enhance navigation, analyze usage, personalize experience, and assist in advertising, but no longer provides the granular categories, opt-out procedures, or explanation of what data each type collects. Users can no longer reference specific cookie management options, targeting cookie opt-out procedures, or detailed functional descriptions within the policy itself.
View change record →Under these terms, personal information provided by users outside the United States, including EU/EEA users, is transferred to and processed in the United States. The specific legal mechanism used to authorize this transfer is not identified in the policy text reviewed.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the information, including personal information, to the United States and process it there.Excerpt from Writer's Privacy Policy
(1) REGULATORY LANDSCAPE: GDPR Chapter V governs transfers of personal data outside the EU/EEA and requires either an adequacy decision, standard contractual clauses, binding corporate rules, or another approved transfer mechanism.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision discloses cross-border data transfers to the United States but does not specify which transfer mechanism (such as standard contractual clauses or the EU-U.S. Data Privacy Framework) applies, which may require evaluation under current GDPR transfer adequacy requirements.
Under these terms, personal information provided by users outside the United States, including EU/EEA users, is transferred to and processed in the United States. The specific legal mechanism used to authorize this transfer is not identified in the policy text reviewed.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Writer.