Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The policy authorizes sharing of personal information with service providers for operational purposes including payment processing, data analysis, hosting, and customer service, and also with analytics and advertising partners.
This analysis describes what Writer's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the categories of third parties with whom Writer shares personal information, which is relevant to GDPR sub-processor obligations, CCPA/CPRA sale or sharing determinations, and enterprise data processing agreement requirements.
The updated policy removes detailed disclosures that previously explained five cookie categories (strictly necessary, functional, performance, targeting), their purposes, and user controls. The revised policy retains only a brief statement that Writer uses cookies to enhance navigation, analyze usage, personalize experience, and assist in advertising, but no longer provides the granular categories, opt-out procedures, or explanation of what data each type collects. Users can no longer reference specific cookie management options, targeting cookie opt-out procedures, or detailed functional descriptions within the policy itself.
View change record →The removal of this explicit provision about third-party data sharing reduces transparency about which categories of vendors and partners receive user information.
View full change record →Removed specific mention of merger, acquisition, asset sale, legal process, and rights/safety protections; added analytics and advertising partners sharing.
View full change record →Under these terms, user personal information may be shared with third-party service providers performing operational functions and with analytics and advertising partners. California residents may opt out of sharing with advertising partners by contacting privacy@writer.com.
How other platforms handle this
We will also provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Monitoring
Writer has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"We may share your information with third-party vendors and service providers that perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance. We may also share your information with analytics and advertising partners.Excerpt from Writer's Privacy Policy
(1) REGULATORY LANDSCAPE: GDPR requires that sub-processors be identified in data processing agreements and that they provide equivalent data protection guarantees. CCPA/CPRA treats sharing of personal information with advertising partners for cross-context behavioral advertising as a regulated activity requiring opt-out mechanisms. FTC Act principles apply to representations about data sharing scope. (2) GOVERNANCE EXPOSURE: Medium. The policy identifies categories of sharing but does not enumerate specific third-party vendors or sub-processors, which may create a documentation gap for enterprise customers who must maintain sub-processor lists under GDPR. (3) JURISDICTION FLAGS: EU/EEA enterprise deployments require a documented sub-processor list and change notification process; California deployments require operational opt-out for advertising data sharing. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise procurement teams should request a current sub-processor list from Writer and confirm that the data processing agreement includes notification procedures for sub-processor changes, consistent with GDPR requirements. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should map downstream data flows to advertising and analytics partners and assess whether these sharing activities constitute a sale or share under applicable state privacy laws, triggering opt-out obligations.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes the categories of third parties with whom Writer shares personal information, which is relevant to GDPR sub-processor obligations, CCPA/CPRA sale or sharing determinations, and enterprise data processing agreement requirements.
Under these terms, user personal information may be shared with third-party service providers performing operational functions and with analytics and advertising partners. California residents may opt out of sharing with advertising partners by contacting privacy@writer.com.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Writer.