Provisions Index

If you live in California, you have specific legal rights to see, delete, correct, and limit the use of your personal information, and Coinbase is required to honor these rights without penalizing you....

Why it matters: California's CPRA grants some of the strongest consumer privacy rights in the US, including the right to limit how companies use sensitive data like your government ID and financial information, but you must proactively exercise these rights....

Coinbase keeps your personal data — including your identity documents, transaction records, and financial information — for years after you close your account, because financial regulations require it....

Why it matters: Even if you close your Coinbase account and request data deletion, your identity and transaction records will be retained for years due to AML and financial reporting obligations, meaning exercising privacy rights will have limited effect on your historical data....

Coinbase automatically tracks your device, browser, IP address, and how you navigate and interact with the platform every time you use it....

Why it matters: Combined with your identity and financial data, behavioral tracking data creates a comprehensive profile that can reveal your trading strategies, financial risk tolerance, and investment patterns....

Depending on where you live, you have rights to see, correct, or delete the personal data Uber holds about you, and you can submit these requests through Uber's online privacy portal....

Why it matters: Exercising your data rights is one of the most important tools you have to understand and control what Uber knows about you, but the effectiveness of these rights depends on Uber responding correctly and within required legal timeframes....

Uber runs background checks on drivers using third-party companies, collecting your criminal history and driving record, and uses this to decide whether you can use the platform....

Why it matters: Background check data is highly sensitive and its use to make eligibility determinations triggers specific legal protections under the Fair Credit Reporting Act, including the right to receive a copy of the report and to dispute inaccurate information before adverse action is taken....

TikTok reserves the right to remove content and suspend or terminate accounts that violate its Community Guidelines, with moderation decisions made at TikTok's discretion....

Why it matters: Account suspension without adequate notice, appeal rights, or transparency about decision-making criteria can deprive users — including creators who earn income on the platform — of access to their content, followers, and revenue....

TikTok monitors calls to your browser's battery status API, which can reveal your device's battery level and charging status — a signal commonly used in device fingerprinting....

Why it matters: Battery status information, while seemingly innocuous, has been identified by privacy researchers and regulators as a device fingerprinting vector that can be used to track users across websites even when cookies are blocked....

TikTok publishes transparency reports and maintains internal telemetry reporting systems that send user activity data to its servers at regular intervals — every 3 seconds with batches of up to 15 events....

Why it matters: Frequent telemetry reporting means TikTok collects near-real-time behavioral data from users, and the transparency of this collection depends entirely on whether it is adequately disclosed in TikTok's privacy policy....

Data collected about your behaviour on Audible's site is sent to Amazon's servers at unagi.amazon.com and fls-na.amazon.com via tracking beacons. This happens automatically as you browse....

Why it matters: Your browsing activity on Audible is transmitted to Amazon's centralised analytics infrastructure, meaning your audiobook interests and listening habits are aggregated into Amazon's broader consumer profile....

Audible sets a 'csm-hit' cookie and uses localStorage to track your session activity, linking your browsing behaviour to a persistent session and device identifier. This cookie persists for 7 days....

Why it matters: A persistent 7-day tracking cookie tied to a session ID means Audible can recognise and profile your device across multiple visits within that period, even if you do not log in....

When you submit any content to Headspace — such as reviews, comments, or other materials — you grant Headspace a broad, royalty-free, worldwide license to use, reproduce, modify, and distribute that content....

Why it matters: This means Headspace can use content you post on the platform for its own purposes without paying you, and without requiring your additional permission for each use....

Headspace states that its meditation and mindfulness content is not a substitute for professional medical advice, and users assume risk for how they use the service, including any mental health impacts....

Why it matters: For a platform that also provides actual therapy and psychiatry services, this broad risk assumption clause may obscure to users where general wellness content ends and regulated clinical services begin....

Headspace requires users to be at least 16 years old to use the service. Users under 16 are not permitted to create accounts....

Why it matters: Setting the minimum age at 16 rather than 13 means Headspace goes beyond COPPA's requirements but must still ensure effective age verification, particularly given the sensitive mental health data the platform collects....

Headspace provides its services 'as is' with no guarantees that they will work perfectly, be available at all times, or meet your specific needs....

Why it matters: This means Headspace accepts no legal responsibility if its app goes down, content is inaccurate, or the service fails to deliver the mental health benefits it advertises....

These Terms are governed by California law, and any disputes not subject to arbitration must be resolved in California courts....

Why it matters: This means users outside California who want to take Headspace to court — if the arbitration clause is unenforceable — may need to litigate in California, which can be costly and impractical for users in other states or countries....

TikTok's web platform code includes calls to the navigator.getBattery API, which retrieves the device's battery charge level and charging status. While this data seems innocuous, battery status information has been used as a fingerprinting vector to track users across sessions....

Why it matters: Battery status data has been specifically identified by European privacy regulators as a browser fingerprinting vector that can be used to re-identify users even after they clear cookies, effectively bypassing consent mechanisms....

When you cancel your Hulu subscription, you do not receive a refund for any days remaining in your billing period — your access continues until the period ends but no money is returned for unused time....

Why it matters: If you cancel your subscription mid-month, Hulu keeps the full monthly fee with no prorated refund, meaning subscribers who forget to cancel on time or who cancel after being dissatisfied with service lose money they have already paid....

Hulu is authorized to obtain your updated credit card details — including new card number, expiration date, and CVV — directly from your payment provider without asking you again, and to continue charging your updated card....

Why it matters: This means Hulu can keep charging you even after your card expires or is replaced, without requiring you to take any action or provide explicit re-authorization, reducing your ability to passively cancel by simply not updating payment details....

You are prohibited from using any Hulu, Disney+, or ESPN content in connection with the development, training, testing, or benchmarking of any artificial intelligence or machine learning system....

Why it matters: This is an unusually explicit prohibition that goes beyond standard copyright restrictions and specifically targets AI use cases — violating it could result in account termination and potential legal action for breach of contract and copyright infringement....

Unless your subscription plan specifically allows it, you cannot share your Hulu account with people who do not live in your primary household, and Hulu monitors account usage to detect and enforce this restriction....

Why it matters: Hulu reserves the right to unilaterally determine whether your account is being used outside your household based on its own analysis of usage patterns, and can limit or terminate your access without warning if it concludes you are in violation....

Hulu can suspend or terminate your account at its discretion if it believes you have violated the Agreement, and may do so without prior notice or refund for any remaining subscription period....

Why it matters: Hulu's termination rights are broad and discretionary, meaning your account — and any content you can access — can be removed without warning, and you may not receive a refund for the subscription period you have already paid for....

Hulu can change any part of this Agreement by giving you 30 days' notice by email or by posting changes on the service — if you keep using the service after the 30 days, you are deemed to have accepted all the changes....

Why it matters: Hulu retains the right to materially alter the terms of your subscription — including pricing, cancellation rights, and data practices — with only 30 days' notice, and your continued use of the service constitutes acceptance even if you were unaware of the changes....

Taskrabbit can change these Terms at any time, and if you continue using the platform after changes are posted, you are legally deemed to have accepted the new terms — even if you never read them....

Why it matters: You could lose important rights (like the ability to opt out of arbitration) or have new obligations imposed on you without ever actively agreeing, simply by continuing to use the app....

All communications between Clients and Taskers about a task — including scoping, pricing, and payments — must remain on Taskrabbit's platform before, during, and after the task. Off-platform arrangements are prohibited....

Why it matters: This rule prevents Clients and Taskers from arranging tasks directly to avoid platform fees, but it also means Taskrabbit can monitor, access, and retain all your task-related communications....

Taskrabbit can suspend or permanently terminate your account at any time for any reason it deems appropriate, including violations of the Acceptable Use Policy or if it determines your presence threatens platform safety or integrity....

Why it matters: For Taskers, account termination means immediate loss of income without appeal rights clearly specified in these Terms, and for Clients it means loss of access to booked or ongoing services....

By posting reviews, photos, or other content on Taskrabbit's platform, you grant Taskrabbit a broad, royalty-free, worldwide license to use, reproduce, modify, and distribute that content for any purpose, including commercial use....

Why it matters: Any review you write, photo you upload, or content you post on Taskrabbit can be used by the company for marketing, advertising, or other commercial purposes without paying you or seeking further permission....

All payments for tasks must be made through Taskrabbit's designated third-party payment service provider (PSP). Paying or accepting payment for tasks outside the platform is a violation of these Terms....

Why it matters: You cannot legally pay a Tasker directly in cash or by bank transfer — all transactions must route through Taskrabbit's payment system, which means Taskrabbit controls the financial relationship and collects fees on every transaction....

Any feedback, suggestions, or ideas you submit to Redfin become Redfin's permanent property — Redfin owns them completely and can use them however it wants, forever, for free. You also give up any moral rights or credit for those ideas....

Why it matters: This is an unusually aggressive provision: most platforms take a license to use feedback, but Redfin takes full legal ownership and requires you to waive your moral rights, meaning you can never reclaim or be credited for your ideas....

When you upload photos, property information, listings, or other content to Redfin, you give Redfin a worldwide, permanent, royalty-free license to use, copy, modify, distribute, and publicly display that content — including sharing it with affiliates and subcontractors....

Why it matters: Redfin can use your photos and listing content for purposes beyond just displaying your listing — including sharing with third parties and using for marketing — without paying you or asking permission each time....

You are not allowed to use bots, crawlers, scrapers, or any automated tools to collect information from Redfin's platform unless Redfin gives you written permission first....

Why it matters: This clause is strictly enforced in real estate data contexts and could expose researchers, developers, or competitors to legal claims under the Computer Fraud and Abuse Act if they access Redfin data programmatically without permission....

Redfin can cancel or block your access to the platform at any time, for any reason, at their sole discretion — and if you violate the Terms, your access is automatically revoked immediately....

Why it matters: Redfin can shut down your account without notice or explanation, which could disrupt an active home search or real estate transaction at a critical moment....

Children under 13 years old are not permitted to use Redfin's website or app. Users must be at least 18 years old (or the age of majority in their location) to access and use the Services....

Why it matters: This provision directly triggers COPPA compliance obligations, meaning Redfin must have technical and policy measures in place to prevent children under 13 from accessing the platform and creating accounts....

Headspace states its platform is not directed at children under 13 (or under 16 in some jurisdictions) and does not knowingly collect personal information from children below these age thresholds. If such data is inadvertently collected, Headspace will delete it upon discovery....

Why it matters: Given that Headspace's platform deals with mental health content that minors may seek out, and that parental oversight of mental health app usage is limited, clear age restrictions and enforcement mechanisms are critical....

Headspace uses cookies, web beacons, pixels, SDKs, and other tracking technologies on its websites and apps to collect usage data, personalise content, and deliver targeted advertising through third-party partners....

Why it matters: Tracking technologies can collect detailed behavioral data about your mental health app usage and share it with advertising networks, going beyond what users might expect for a sensitive health platform....

Headspace retains personal information for as long as necessary to provide its services, comply with legal obligations, resolve disputes, and enforce its agreements — the policy does not specify fixed retention periods for most data categories....

Why it matters: The absence of specific retention periods for sensitive mental health and therapy data means Headspace may retain your most private information indefinitely unless you actively request deletion....

Headspace transfers personal information internationally, including from the EU and UK to the United States, and relies on data transfer mechanisms such as Standard Contractual Clauses to legitimise those transfers....

Why it matters: International transfers of sensitive mental health data to the US mean your information may be subject to US government access or different privacy standards than your home jurisdiction provides....

Headspace reserves the right to update this Privacy Policy at any time and will notify users of material changes, typically by posting the updated policy online and updating the effective date....

Why it matters: If Headspace changes how it uses your sensitive mental health data, notification by simply updating a webpage may not provide adequate notice — you may miss important changes unless you proactively check....

Reddit can suspend or permanently ban your account at any time, for any reason, with or without notice, and is not obligated to restore access or preserve your content....

Why it matters: Reddit has broad, essentially unreviewable discretion to remove your access to the platform and all content associated with your account, with no guaranteed appeal process or compensation....

You agree to defend Reddit and pay for any legal costs or damages Reddit faces as a result of your use of the platform, your content, or your violation of these Terms or any third-party rights....

Why it matters: If your activity on Reddit leads to a lawsuit against Reddit — including for copyright infringement, defamation, or violation of someone else's rights — you could be personally liable for Reddit's legal fees and any damages awarded against them....

These Terms are governed by California law, and any disputes must be resolved in the courts of San Francisco County, California, unless subject to the arbitration clause....

Why it matters: If you live outside California and have a dispute with Reddit that is not subject to arbitration, you may be required to litigate in California courts, which is practically inaccessible and prohibitively expensive for most users....

Poshmark collects information about you not just from your own activity on the app, but also from third-party data providers, social media platforms you connect to, and advertising partners — even when you are not using Poshmark....

Why it matters: This means Poshmark's profile of you extends beyond what you directly provide, incorporating external data sources that you may not be aware of, potentially including your activity on other websites....

If Poshmark is acquired, merges with another company, or sells its assets, your personal data may be transferred to the new owner as part of that transaction — even if that company has different privacy practices....

Why it matters: Your personal data could end up with a company you have never interacted with and whose privacy practices you have not agreed to, potentially resulting in materially different data use than what Poshmark disclosed to you....

California residents have specific rights under state law to know what personal data Poshmark collects, to delete their data, to correct inaccurate data, to opt out of data sale/sharing, and to limit the use of sensitive personal information....

Why it matters: These are legally enforceable rights — Poshmark cannot discriminate against you for exercising them — and they give California users more control over their personal data than users in most other U.S. states....

Microsoft shares personal data across its family of products and subsidiaries, meaning data collected from Xbox may be combined with data from Windows, Bing, LinkedIn, or other Microsoft services....

Why it matters: Data you generate on Xbox may be linked to your identity across Microsoft's entire ecosystem — including search history, professional profile, and productivity data — creating a far more comprehensive profile than users may expect from a gaming platform....

Microsoft uses personal data including browsing activity, purchase history, and inferences about your interests to serve you personalized advertisements across Microsoft products and partner sites, and provides an opt-out option....

Why it matters: Personalized advertising based on your gaming, browsing, and purchase history means Microsoft is monetizing your behavioral profile — but you can opt out of interest-based ads through your privacy settings....

Microsoft retains personal data for as long as necessary to provide its services, comply with legal obligations, resolve disputes, and enforce its agreements — meaning data may be kept indefinitely in some cases....

Why it matters: Open-ended data retention tied to business purposes rather than specific collection purposes means your gaming history, voice data, and behavioral profiles may be stored for years beyond your active use of Xbox services....

Microsoft states that users can access, correct, delete, and export their personal data through the Microsoft Privacy Dashboard, and that these rights may vary depending on where you live....

Why it matters: Your ability to control your personal data — including data generated from Xbox gaming — depends on which country you live in, and the mechanisms to exercise these rights require navigating Microsoft's online dashboard....

Microsoft collects location data from your devices, including precise GPS location when you grant permission, and uses this data to provide location-based services and improve its products....

Why it matters: Precise location data is among the most sensitive categories of personal information, and its collection — even with permission — creates risks if retained long-term or combined with other data to infer sensitive information such as health conditions or religious practices....

When you link your Epic account to third-party platforms like PlayStation, Xbox, Facebook, or Steam, Epic receives personal data from those platforms including your display name, user ID, device information, and in some cases your name and email address....

Why it matters: Linking accounts triggers automatic data sharing from third-party platforms to Epic that many users may not anticipate, and the combined data profile this creates is significantly richer than what users provide directly to Epic....

When you use AI-powered features like the Epic Developer Assistant, Epic collects your inputs — which may include information that identifies you — and uses them to generate outputs....

Why it matters: User inputs to AI features may contain sensitive personal information, and the policy does not specify how long input data is retained, whether it is used to train AI models, or whether it is shared with third-party AI providers....