This provision states that X may retain the email address, phone number, or other account creation identifiers of users whose accounts are suspended for policy violations for an indefinite period.
This analysis describes what X's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause authorizes indefinite retention of personal identifiers following account suspension, which may require evaluation under GDPR's data minimization and storage limitation principles and CCPA's retention disclosure requirements. The provision does not define a maximum retention period or a process for challenging or limiting this retention.
⚠ The terms authorize X to retain the suspended user's email address and phone number indefinitely as described if no challenge or deletion request is submitted
Cross-platform context
See how other platforms handle Data Retention: Suspended Account Identifiers and similar clauses.
Compare across platforms →"Where you violate our Rules and your account is suspended, we may keep the identifiers you used to create the account (such as your email address or phone number) indefinitely to prevent repeat policy offenders from creating new accounts.Excerpt from X's Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages GDPR's storage limitation principle, which generally requires that personal data be kept no longer than necessary for the stated purpose.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This clause authorizes indefinite retention of personal identifiers following account suspension, which may require evaluation under GDPR's data minimization and storage limitation principles and CCPA's retention disclosure requirements. The provision does not define a maximum retention period or a process for challenging or limiting this retention.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by X.