Provision Registry

968 classified provisions across 299 platforms — browse, filter, and compare.

Every clause classified by type, severity, and platform. Updated as policies change.

Start Compliance free trial Track specific clauses across platforms with provision-level alerts.
Filtering: Data collection × Clear all
high Data collection
Duolingo · Duolingo Privacy Policy
This clause establishes the operational basis for behavioral tracking and ad targeting infrastructure. It specifies the mechanisms through which usage data collection occurs and identifies the channels through which users may exercise preference controls.
CA-P-002769 First tracked Apr 18, 2026 Last seen Apr 18, 2026 Compare across platforms →
Ancestry · Ancestry Privacy Statement
The provision establishes the operational framework for first-party and third-party data collection mechanisms. It defines the authorized purposes for tracking data and establishes that users may manage cookie preferences through a consent tool, creating a structured approach to tracking technology deployment across the Ancestry platform and partner networks.
CA-P-006461 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
high Data collection
Intuit · Intuit Privacy Statement
The provision establishes the operational scope of data collection infrastructure supporting Intuit's service delivery and analytics operations. This authorization applies to both first-party and third-party tracking implementations across the service environment.
CA-P-005476 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
high Data collection
TurboTax · TurboTax Privacy Statement
This provision establishes the operational scope of data collection mechanisms used across the TurboTax service ecosystem. It defines the categories of tracking technologies deployed and specifies authorized purposes including personalization and advertising delivery, while creating a mechanism for users to exercise control over cookie settings.
CA-P-006818 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
high Data collection
Ticketmaster · Ticketmaster Privacy Policy
The provision establishes the operational scope of data collection mechanisms Ticketmaster implements to generate user activity records, behavioral signals, and location data. This collected information enables analytics, service delivery, and other business functions dependent on behavioral tracking.
CA-P-001490 First tracked Apr 3, 2026 Last seen May 8, 2026 Compare across platforms →
Poshmark · Poshmark Privacy Policy
The provision establishes the operational scope of data collection and third-party sharing practices that support Poshmark's advertising and analytics infrastructure, defining which parties may access user activity information.
CA-P-001664 First tracked Apr 3, 2026 Last seen Apr 10, 2026 Compare across platforms →
Amazon Marketplace · Amazon Privacy Notice
The provision establishes the operational basis for Amazon's use of persistent tracking across multiple domains and devices, enabling both essential service functions (authentication, shopping cart persistence) and commercial functions (interest-based advertising, performance reporting).
CA-P-002544 First tracked Apr 9, 2026 Last seen Apr 10, 2026 Compare across platforms →
high Data collection
Roblox · Roblox Privacy and Cookie Policy
This provision establishes the data collection framework for child users under COPPA requirements, specifying which information categories are mandatory versus optional and defining the operational purpose for each data element collected during account creation.
CA-P-000598 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Plaid · Plaid Terms of Use
This clause authorizes Plaid to hold your actual bank login credentials and transaction history, not just a token, which creates ongoing data exposure beyond any single session.
CA-P-007157 First tracked May 9, 2026 Last seen May 20, 2026 Compare across platforms →
McDonald's · McDonald's Privacy Policy
The provision establishes a cross-device tracking infrastructure that enables continuous behavioral profiling across multiple platforms and time periods. This operational framework allows McDonald's to consolidate user activity data for advertising targeting purposes regardless of where a user accesses services.
CA-P-006215 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
X · X Privacy Policy
The clause establishes X's data collection scope across third-party digital properties through embedded technical infrastructure, enabling tracking of user activity outside X's controlled platform based on widget and pixel integration.
CA-P-006636 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
Mixpanel · Mixpanel Privacy Statement
The clause allocates data compliance obligations to Mixpanel's direct customers rather than to Mixpanel itself. This establishes the contractual framework under which Mixpanel operates as a data processor dependent on its customers' upstream compliance activities.
CA-P-006897 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
Lyft · Lyft Terms of Service
The provision creates the operational basis for data collection and establishes that data handling practices are documented separately in the Privacy Policy rather than within the Terms of Service itself, requiring users to reference multiple documents.
CA-P-003420 First tracked Apr 27, 2026 Last seen Apr 27, 2026 Compare across platforms →
high Data collection
Peloton · Peloton Terms of Service
The provision establishes that privacy practices are documented in a separate policy rather than in the terms themselves, requiring users to review multiple documents to understand the full scope of data practices. This structure means material information about data handling is located outside the primary terms document.
CA-P-001172 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Google Maps · Google Maps Platform Terms of Service
This provision establishes the data collection and usage framework that enables the Google Maps Platform service delivery model. By defining the scope of permissible data collection and retention, the clause clarifies the operational basis for service provision and product improvement activities across Google's product ecosystem.
CA-P-001604 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
high Data collection
Duo Security · Duo Terms of Service
The clause establishes the scope of data collection activities and clarifies Duo's role in the data processing relationship. This designation as data processor rather than controller determines the legal framework and responsibility allocation for how collected data is handled and protected.
CA-P-004876 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
Square · Square Terms of Service
This provision operationalizes Square's data governance framework by incorporating the Privacy Notice as the governing document for all personal data handling. The clause establishes acknowledgment of data practices as a condition of service use, creating the contractual basis for Square's data collection and processing activities.
CA-P-001730 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
high Data collection
RunPod · RunPod Privacy Policy
The clause defines the scope of direct data collection practices for the service, specifying that workload-related technical data and usage metrics constitute collectible information within the terms of service operation.
CA-P-005941 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
high Data collection
Messenger Kids · Messenger Kids Terms of Service
This provision is operationally significant because it establishes the legal and procedural basis for data handling in a service designed for users under 13, where parental authorization is required. The provision structures compliance with children's privacy regulations, including requirements around parental notification, data minimization, and restricted use of collected information.
CA-P-000581 First tracked Apr 3, 2026 Last seen Apr 10, 2026 Compare across platforms →
high Data collection
Pinterest · Pinterest Privacy Policy
This provision establishes Pinterest's data collection scope beyond registered users, enabling the platform to build profiles and behavioral records on non-account holders for purposes including analytics, advertising targeting, and service optimization across its network.
CA-P-000689 First tracked Apr 3, 2026 Last seen Apr 10, 2026 Compare across platforms →
Whatnot · Whatnot Privacy Policy
The clause establishes the scope of data collection activities across both user-initiated submissions and automatic collection mechanisms. This operational scope determines what categories of personal, financial, and behavioral data the service captures throughout the user engagement lifecycle, from account setup through service use and customer interactions.
CA-P-007063 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
high Data collection
Google Gemini · Gemini Apps Privacy Notice
This provision defines the scope of data collection that Google performs during service operation, establishing which categories of information the company gathers as a standard part of providing and maintaining Gemini Apps. The scope encompasses both content-level data and technical metadata necessary for service delivery and analytics.
CA-P-003716 First tracked Apr 28, 2026 Last seen Apr 28, 2026 Compare across platforms →
high Data collection
AT&T · AT&T Terms of Service
This clause establishes the scope of data collection practices tied to account creation and identifies the Privacy Policy as the governing document for how collected information is processed and disclosed. The provision creates a contractual basis for data practices that would otherwise require separate authorization.
CA-P-003079 First tracked Apr 18, 2026 Last seen Apr 18, 2026 Compare across platforms →
Meta · Llama API Terms of Service
This provision allocates primary legal and regulatory compliance responsibility to developers rather than to Meta, requiring developers to independently satisfy all applicable notice, consent, and data protection obligations under local law without reliance on Meta's own compliance infrastructure.
CA-P-012625 First tracked May 20, 2026 Last seen May 22, 2026 Compare across platforms →
TikTok Ads · TikTok Privacy Policy
The collection of keystroke pattern data alongside device identifiers and cross-device tracking enables behavioral profiling and device linkage at a technical level. This data collection mechanism supports the operational infrastructure for targeted advertising and user activity attribution across the TikTok platform.
CA-P-006243 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
high Data collection
Spotify · Spotify Privacy Policy
The collection of application installation data and device identifiers enables Spotify's technical infrastructure to identify compatible devices and applications, support cross-platform functionality, and maintain an updated inventory of the user's connected ecosystem.
CA-P-002174 First tracked Apr 4, 2026 Last seen Apr 9, 2026 Compare across platforms →
EA · EA Privacy and Cookie Policy
Device fingerprinting and anti-cheat monitoring establish technical surveillance infrastructure that collects persistent identifiers and behavioral data beyond typical usage analytics, enabling EA to maintain service integrity and enforce compliance with acceptable use policies across its gaming platforms.
CA-P-001543 First tracked Apr 3, 2026 Last seen Apr 10, 2026 Compare across platforms →
TikTok · TikTok Community Guidelines
The provision establishes technical mechanisms for accessing device movement and spatial orientation data, which enables motion-based features, gesture recognition, or device state analysis. The sampling rates specified determine the frequency and granularity of sensor data collection during user sessions.
CA-P-002320 First tracked Apr 9, 2026 Last seen Apr 9, 2026 Compare across platforms →
TikTok · TikTok Community Guidelines
These API permissions enable the collection of motion, positioning, input, and device status data that can be used for content personalization, analytics, and feature functionality. The operational scope of data collection depends on the specific technical implementations enabled by these permissions.
CA-P-002017 First tracked Apr 4, 2026 Last seen Apr 9, 2026 Compare across platforms →
TikTok · TikTok Community Guidelines
Sensor and clipboard access enables the platform to gather technical device state information and detect copied content, which supports content recommendation, user behavior analysis, and platform functionality. This authorization establishes the operational scope of data TikTok may collect beyond traditional usage metrics.
CA-P-001851 First tracked Apr 3, 2026 Last seen Apr 3, 2026 Compare across platforms →

Compliance Governance Intelligence

Monitor specific governance provisions across platforms.

Compliance includes provision-level monitoring, regulatory mapping, and audit-ready analysis.

Start free Start Compliance free trial