-
Google Maps
· Google Maps Platform Terms of Service
Google can suspend or terminate your access to Maps APIs immediately if it believes you have violated the terms, with limited notice or opportunity to cure....
Why it matters: Immediate suspension without a defined cure period creates significant operational risk for businesses that rely on Maps APIs in live production applications....
-
eBay
· eBay Privacy Notice
If you sell on eBay, the platform requires you to submit government-issued identification documents, your social security number, selfie photos, bank account details, and tax identification numbers as part of the seller verification and payment process....
Why it matters: Sellers are required to submit highly sensitive identity data including government IDs, social security numbers, and selfie photos, which represents a significant privacy commitment and creates elevated risk if this data were ever compromised or misused....
-
eBay
· eBay Privacy Notice
eBay collects your credit card numbers, bank account details, and full transaction history as part of operating its marketplace and payment services....
Why it matters: The collection and retention of credit card numbers and bank account details by eBay and its payment affiliates creates significant financial data security obligations and exposure risk for users if security controls fail....
-
Gusto
· Gusto Privacy Policy
Gusto collects highly sensitive personal data including your Social Security number, bank account numbers, and health insurance information as part of delivering payroll and HR services....
Why it matters: This data is among the most sensitive a company can hold; unauthorized exposure could enable identity theft, financial fraud, or discrimination....
-
Gusto
· Gusto Privacy Policy
Gusto collects your health insurance enrollment details and other medical benefit information when you use its platform to manage employee benefits....
Why it matters: Health and benefits data is among the most sensitive personal information category, and its collection by a payroll platform creates potential obligations under HIPAA and heightened risks if exposed....
-
Monitoring
These provisions have changed before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
-
Snapchat
· Snapchat Terms of Service
If you have a dispute with Snapchat, you agree to resolve it through private arbitration rather than going to court, and you give up the right to join a class action lawsuit against Snap....
Why it matters: This provision removes your ability to sue Snap in court or participate in group lawsuits, which can significantly reduce the practical leverage consumers have in disputes with a large company....
-
GitHub
· GitHub Privacy Statement
GitHub may share your personal data with Microsoft and its subsidiaries for service, security, and product improvement purposes, and Microsoft may use that data under Microsoft's own privacy policy....
Why it matters: The policy authorizes transfer of personal data to Microsoft's broader corporate family, meaning data collected by GitHub may be processed under Microsoft's separate privacy terms and for Microsoft's own operational purposes, not solely for GitHub service delivery....
-
GitHub
· GitHub Privacy Statement
GitHub states it may use your usage data and content interactions to improve AI products including GitHub Copilot, and directs users to product-specific terms for full details on how AI features process data....
Why it matters: The policy authorizes use of user data for AI product development, which may include training or improving machine learning models; the full scope of this use is not entirely defined within this document and requires review of separate product terms....
-
GitHub
· GitHub Privacy Statement
GitHub transfers personal data internationally, including to the US, and relies on Standard Contractual Clauses to make EU, UK, and Swiss data transfers lawful under data protection law....
Why it matters: The policy states GitHub relies on Standard Contractual Clauses for international transfers, which is the standard legal mechanism post-Schrems II; however, adequacy of these transfers depends on supplementary technical and organizational measures that are not detailed in the policy itself....
-
Twilio
· Twilio Privacy Notice
Twilio uses cookies and tracking pixels from companies including Google, Adobe, and Segment to track your browsing behavior across the web and deliver targeted advertisements....
Why it matters: The notice authorizes cross-site behavioral tracking by multiple third-party vendors, meaning your activity on Twilio's website may be used to serve you ads on other websites and applications....
-
Ford
· Ford Privacy Policy
Ford collects detailed data from your connected vehicle including where it is, how fast you drive, how hard you brake, and the status of vehicle systems, in addition to standard vehicle identification details....
Why it matters: This type of data goes well beyond what most people expect from a car company's privacy policy; your driving habits and vehicle status are collected continuously through connected vehicle systems and may be shared with third parties including dealers and marketing partners....
-
Ford
· Ford Privacy Policy
Ford may collect sensitive categories of personal data including your precise GPS location, biometric identifiers, and financial account information through vehicle systems, apps, and dealer interactions....
Why it matters: Sensitive personal information including precise geolocation and biometrics carries heightened privacy risks and is subject to special protections under California law; consumers have the right to limit how Ford uses this data category....
-
Google Gemini
· Gemini Apps Privacy Notice
Google employees and contractors may read and annotate the conversations you have with Gemini, even though Google states steps are taken to disconnect conversations from your account before review....
Why it matters: The notice explicitly authorizes human access to conversation content, and the policy advises users not to submit anything they would not want reviewed, signaling that conversation content is not treated as fully private....
-
Okta
· Okta Privacy Policy
This privacy policy only covers data Okta collects on its own website and marketing activities. If you use Okta to log into your employer's systems, your employer's privacy policy governs that data, not this one....
Why it matters: Most people encounter Okta through workplace login, but this policy explicitly does not cover that context, meaning employees have no direct privacy rights against Okta for their authentication data under this document....
-
Epic Games
· Epic Games Terms of Service
If you have a dispute with Epic, you generally must resolve it through private arbitration rather than in court, and you cannot join a class action lawsuit with other users who have similar complaints....
Why it matters: This clause significantly limits your ability to sue Epic in court or participate in collective legal action, which can reduce your practical leverage and the cost-effectiveness of pursuing smaller individual claims....
-
Epic Games
· Epic Games Terms of Service
When you pay for skins, emotes, V-Bucks, or other in-game items in Fortnite or other Epic games, you are buying a revocable license to use them, not permanent ownership, so Epic can remove your access to those items....
Why it matters: This clause means that money spent on in-game content does not translate to durable ownership rights; Epic retains the legal right to revoke access to items users have paid for, particularly in the event of account suspension or termination....
-
Epic Games
· Epic Games Terms of Service
If you accept these Terms for a child's account, you as a parent or guardian are personally responsible for all purchases and activities that happen on that account, including any purchases the child makes themselves....
Why it matters: Parents who set up or accept the Terms for a child's Epic Games Account take on full financial responsibility for all transactions, including unauthorized or unexpected purchases made by the child, which can create significant financial exposure in games with in-app purchase mechanics....
-
Epic Games
· Epic Games Terms of Service
Epic can suspend or permanently close your account and cut off access to all your games and purchased content for a range of reasons, including inactivity for a long time or because Epic decides to stop offering a product....
Why it matters: Account termination results in loss of access to all Licensed Products and In-Game Content associated with the account, including purchased items, and the revocable license model means there is no guaranteed right to a refund of amounts spent....
-
Threads
· Threads Privacy Policy
You can pause your Threads account, but to fully and permanently delete your Threads data, you must delete your entire Instagram account as well....
Why it matters: This limits your ability to leave Threads while keeping Instagram, and means deleting Threads data has significant collateral consequences for a separate service you may want to keep....
-
Mistral AI
· Mistral AI Usage Policy
Generating or attempting to generate child sexual abuse material is completely banned, and if Mistral AI suspects any such activity, it will report you to law enforcement and permanently delete your account with no exceptions....
Why it matters: This is the most absolute provision in the policy, combining mandatory law enforcement referral with automatic account termination, distinguishing it from other violations where enforcement is discretionary....
-
Paramount+
· Paramount+ Terms of Use
If you have a dispute with Paramount+, you must resolve it through private arbitration rather than suing in court, except for certain intellectual property claims....
Why it matters: Arbitration is a private process that typically favors companies over individual consumers, and it removes your ability to have a judge or jury decide your case in a public courtroom....
-
Paramount+
· Paramount+ Terms of Use
You cannot join or start a class action lawsuit or representative action against Paramount+; any legal claim must be filed individually....
Why it matters: Class actions allow many people harmed by the same practice to pool resources and bring a case together; waiving this right means each user must pursue claims alone, which is often economically impractical for small individual disputes....
-
Paramount+
· Paramount+ Terms of Use
Paramount's total financial responsibility to you is capped at whichever is greater: $100 or what you paid in the last 12 months, and the company is not liable for lost data, lost profits, or other indirect harms....
Why it matters: This cap means that even if Paramount+ causes you significant harm (such as a data breach exposing personal information), the most you could recover in arbitration is a relatively small dollar amount....
-
Intuit
· Intuit Privacy Statement
Intuit collects highly sensitive data including your Social Security number, bank account details, and full tax return information when you use products like TurboTax or QuickBooks....
Why it matters: This category of data represents among the most sensitive personal information a consumer can share, and its collection by a company that also engages in advertising and analytics partnerships warrants careful attention to how it is segregated and protected....
-
Intuit
· Intuit Privacy Statement
Intuit may share your personal information, including data derived from your financial activity, with advertising networks and analytics companies who may use it for their own purposes....
Why it matters: Sharing financial and behavioral data with third-party advertising networks goes beyond what most consumers expect when filing taxes or managing their business accounts, and the acknowledgment that partners may use data for their own purposes limits Intuit's control over downstream use....
-
ADP
· ADP Privacy Statement
When your employer uses ADP for payroll or HR, ADP follows your employer's instructions for handling your data, and your employer is legally responsible for most data decisions. If you want to know how your data is used or want to change it, you generally need to ask your employer, not ADP....
Why it matters: This provision determines who you can hold accountable for your data. For most employees, ADP is not the primary point of contact for data rights, which can make exercising those rights slower or more complex....
-
ADP
· ADP Privacy Statement
ADP may collect and process highly sensitive personal information including health data, biometric identifiers, racial or ethnic origin, and union membership when required to deliver services, when you have consented, or for legal purposes....
Why it matters: These are among the most sensitive categories of personal information recognized under privacy law globally. Payroll and HR platforms often require some of this data, but its collection by a single provider at scale creates elevated risk if data is breached or misused....
-
Udemy
· Udemy Terms of Use
If you have a legal dispute with Udemy, this clause requires you to resolve it through private arbitration rather than a public court, and you cannot join other users in a class action lawsuit....
Why it matters: This clause removes your right to sue Udemy in court or participate in group lawsuits, which can significantly limit your practical ability to seek compensation for smaller individual harms....
-
Coinbase
· Coinbase Fee Schedule
The fee shown to you before you click confirm is an estimate, not a guaranteed final amount. Coinbase states the actual fee charged may be different from what you see on the pre-confirmation screen....
Why it matters: The document's characterization of the pre-confirmation fee as an estimate, rather than a binding quoted amount, means the final charge may exceed what was displayed at the time of user consent. This provision may warrant evaluation under applicable consumer protection standards requiring that disclosed fees be accurate and not misleading....
-
Stripe
· Stripe Privacy Policy
Depending on what you are doing with Stripe, Stripe may be responsible for your data as the primary decision-maker (controller) or as a company processing data on behalf of the business you bought from (processor). This distinction affects whether you can ask Stripe directly to access or delete your data....
Why it matters: When Stripe acts as a processor on behalf of a Business User, your privacy rights requests may need to go to the merchant, not Stripe. This can make exercising rights more complex for consumers who interact with Stripe only through third-party checkouts....
-
Stripe
· Stripe Privacy Policy
If you are an End Customer who interacted with Stripe through a merchant's checkout, your privacy rights may need to be exercised through that merchant rather than directly through Stripe, because Stripe processes your data as a service provider for the merchant....
Why it matters: Many consumers who encounter Stripe only through third-party merchant checkouts may not realize that their direct rights against Stripe are limited in that context, and that they must contact the merchant to exercise certain privacy rights....
-
Binance.US
· Binance.US Privacy Policy
Binance.US collects biometric data from users as part of its identity verification process, which is required to open and maintain an account on the platform....
Why it matters: Biometric data such as facial recognition scans or fingerprints is among the most sensitive categories of personal information and is subject to strict state-level legal protections in Illinois, Texas, and Washington, among others. The policy discloses this collection but does not specify the retention schedule, the third-party processors involved, or the precise consent mechanism employed....
-
Binance.US
· Binance.US Privacy Policy
Binance.US requires users to provide government-issued identification and Social Security numbers as part of the account opening and identity verification process, consistent with federal KYC and AML requirements applicable to money services businesses....
Why it matters: The collection of Social Security numbers and government-issued IDs represents a high-risk data category because these identifiers, if exposed in a breach, can enable identity theft and fraud. Users should understand that this data is mandatory for account creation due to federal regulatory requirements and is retained by the platform....
-
Binance.US
· Binance.US Privacy Policy
Binance.US collects bank account numbers, cryptocurrency wallet addresses, transaction records, and payment information from users in connection with account funding, trading, and withdrawal activities....
Why it matters: Financial account data and transaction records are highly sensitive and subject to specific regulatory protections. This data is retained by Binance.US for regulatory compliance purposes and may be shared with financial partners, regulators, and law enforcement....
-
Riot Games
· Riot Games Privacy Notice
Riot can record and store what you say and type in in-game voice and chat channels, and use that content to enforce rules and investigate misconduct....
Why it matters: Most players assume in-game voice chat is ephemeral; this clause establishes that communications content may be retained and reviewed, which has legal implications in jurisdictions requiring all-party consent to recording....
-
Riot Games
· Riot Games Privacy Notice
Riot's Vanguard anti-cheat software installs at the deepest level of your computer's operating system and may collect data about your hardware and other software running on your PC, including when you are not playing....
Why it matters: Kernel-level software has privileged access to your entire system. The fact that it may run and collect data even when the game is not active means your device is being monitored outside of gameplay sessions, which is a meaningful expansion of the typical software data collection scope....
-
Riot Games
· Riot Games Privacy Notice
Riot's services are not intended for users under 16 (or 13 in the US), and if Riot discovers it has collected data from a child below the threshold without parental consent, it says it will delete that data....
Why it matters: Riot's games are widely played by players under 16, and the age-based data practices and parental consent requirements are legally significant. The policy's reliance on users self-reporting their age, without verified age-gating mechanisms, may create practical compliance gaps....
-
Wise
· Wise Terms of Use
Wise can freeze, restrict, or close your account if it believes you have violated the terms, if a law requires it, or if Wise decides it needs to protect itself or other customers, and this can happen with limited advance notice....
Why it matters: Account suspension can cut off your access to funds you hold with Wise, and because Wise is not a bank, your normal consumer banking protections around account access may differ from what you expect....
-
Wise
· Wise Terms of Use
Wise can block, freeze, or reverse a money transfer or other transaction without telling you first if it thinks the transaction might break a law or its own rules, or if it considers the transaction suspicious....
Why it matters: A transaction you initiate may not go through, and your funds could be held, without you receiving advance warning, which could disrupt time-sensitive payments....
-
Wise
· Wise Terms of Use
Legal disputes with Wise are governed by New York law and, if they cannot be resolved informally, must be settled through binding arbitration rather than a lawsuit in court....
Why it matters: Mandatory arbitration means you generally cannot sue Wise in court or join a class action lawsuit, and disputes are resolved through a private arbitration process that has different procedural rules than court proceedings....
-
AWS Bedrock
· AWS Service Terms
When you use an AI model from a company other than Amazon through Bedrock, your data may be sent to that company and governed by their separate rules, not just AWS's rules....
Why it matters: This provision creates a meaningful data governance gap: customers who believe they are operating entirely within the AWS compliance framework may unknowingly subject their data to third-party providers with different, potentially less protective terms....
-
AWS Bedrock
· AWS Service Terms
AWS places responsibility on you as the customer to ensure that whatever the AI generates for you is used legally and in compliance with AWS's policies, not on AWS itself....
Why it matters: This provision means that if an AI-generated output is used in a way that violates a law, infringes on intellectual property, or causes harm, the customer bears legal and contractual responsibility, not AWS....
-
AWS Bedrock
· AWS Service Terms
AWS provides no warranties about the accuracy, reliability, or fitness of AI-generated outputs from Bedrock; if an AI output is wrong, harmful, or unsuitable, AWS is not legally responsible under this disclaimer....
Why it matters: This disclaimer means customers cannot rely on AWS to compensate them if an AI output is incorrect, biased, or causes downstream harm; all risk of relying on AI outputs rests with the customer....
-
OpenSea
· OpenSea Privacy Policy
Because NFT transactions are recorded on a public blockchain, OpenSea cannot delete your wallet address or transaction history from the blockchain even if you request account deletion....
Why it matters: This provision directly limits the practical scope of your privacy rights. Even if you exercise your legal right to erasure, the most sensitive financial activity data remains permanently public....
-
GOAT
· GOAT Privacy Policy
GOAT can share your personal data with business partners who may use it for their own marketing, meaning companies outside GOAT could receive your information and use it to target you with their own ads or promotions....
Why it matters: This clause means your GOAT shopping data may end up with third-party companies for purposes unrelated to your GOAT transactions, potentially affecting the ads and offers you see across other platforms....
-
Ticketmaster
· Ticketmaster Terms of Use
If you have a dispute with Ticketmaster, you cannot sue them in regular court or join a class action lawsuit. Instead, you must resolve the dispute one-on-one through a private arbitration process....
Why it matters: This clause removes your ability to join with other affected consumers in a class action, which is often the only economically viable way to challenge small-dollar wrongs like unexpected fees or order errors at scale....
-
Ticketmaster
· Ticketmaster Terms of Use
When you buy tickets on Ticketmaster, the service fee and order processing fee added to your purchase are never refunded, even if your event is cancelled or your order has an issue....
Why it matters: Service fees on Ticketmaster can represent a significant percentage of the ticket face value. If these fees are non-refundable in all circumstances, consumers may lose meaningful amounts of money on events that are cancelled or significantly changed....
-
Airbnb
· Airbnb Terms of Service
If you have a legal dispute with Airbnb, you must resolve it through individual arbitration rather than suing in court, and you cannot join a class action lawsuit against the company....
Why it matters: This clause removes access to the court system for most disputes and prevents users from joining together in class actions, which are often the only practical way to pursue small individual claims against a large company....
-
Cash App
· Cash App Terms of Service
The agreement requires most disputes between you and Cash App to be resolved through individual arbitration rather than through a court. This means you generally give up the right to have a judge or jury decide your case....
Why it matters: The mandatory arbitration clause directs legal disputes away from courts and into private arbitration proceedings, which operate under different procedural rules and with limited appeal rights. The terms also include a class action waiver, which further limits users' ability to join collective legal actions....
-
Cash App
· Cash App Terms of Service
The agreement includes a waiver of your right to participate in a class action lawsuit against Cash App, meaning you cannot join with other users to bring a collective legal claim....
Why it matters: The class action waiver in Section XXIII.20 prevents users from pooling claims against Block, Inc., which is particularly relevant for small-value disputes where individual arbitration may not be economically practical....