This provision states that X receives browser cookie IDs, device IDs, hashed email addresses, demographic data, and behavioral data from ad partners, and may collect similar data directly from advertiser websites and apps via integrated advertising technology; this data may be combined with user-provided and platform-collected data.
This analysis describes what X's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause establishes that X's data collection extends to off-platform behavioral data sourced from advertiser websites and apps, and that this data is combined with on-platform data to build user profiles for advertising purposes. The scope of this data combination is relevant to GDPR's transparency requirements and CCPA's disclosure obligations for data collected from third-party sources.
⚠ The terms permit X to combine off-platform ad partner data with user account data for advertising purposes as described unless the user adjusts advertising-related privacy settings
Cross-platform context
See how other platforms handle Ad Partner Data Combination and Off-Platform Tracking and similar clauses.
Compare across platforms →"Our ad and business partners share information with us such as browser cookie IDs, X-generated identifiers, mobile device IDs, hashed user information like email addresses, demographic or interest data, and content viewed or actions taken on a website or app. Some of our ad partners, particularly our advertisers, also enable us to collect similar information directly from their website or app by integrating our advertising technology. Information shared by ad partners and affiliates or collected by X from the websites and apps of ad partners and affiliates may be combined with the other information you share with X and that X receives, generates, or infers about you described elsewhere in this Privacy Policy.Excerpt from X's Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages GDPR's transparency, purpose limitation, and third-party data sourcing requirements, CCPA's right to know about sources of personal information, and FTC guidelines on online behavioral advertising and data broker practices.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This clause establishes that X's data collection extends to off-platform behavioral data sourced from advertiser websites and apps, and that this data is combined with on-platform data to build user profiles for advertising purposes. The scope of this data combination is relevant to GDPR's transparency requirements and CCPA's disclosure obligations for data collected from third-party sources.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by X.