Reverb
· Reverb Privacy Policy
The scope of seller data collection is broad and includes government-level identity information such as valid identification and taxpayer address, which carries significant privacy implications.
eBay
· eBay Privacy Notice
The scope of data collected from sellers is substantially broader and more sensitive than that collected from buyers, encompassing financial and government identity documents.
Reverb
· Reverb Privacy Policy
Seller Payment Information: Your bank country, bank account details, billing address and other payment information (e.g., credit or debit card details or PayPal credentials)
eBay
· eBay Privacy Notice
Biometric data is among the most sensitive categories of personal data; its processing for multiple purposes by eBay and potentially for third-party compliance frameworks carries significant privacy implications for sellers.
our payment services provider...need to collect information such as a valid ID as part of their Know Your Customer (KYC) requirements.
This clause establishes a legal basis for collecting biometric and other sensitive data in two distinct circumstances, including where law merely permits—not mandates—such collection.
Meta
· Meta Commercial Terms
The restriction extends beyond the named categories to any information deemed sensitive under applicable law, creating a dynamic prohibition that expands with evolving legal definitions.
T-Mobile collects highly sensitive categories of personal data whose exposure or misuse could enable identity theft or financial fraud.
Indeed
· Indeed Privacy Policy (Superseded Capture)
All sensitive data collected by Indeed is with your consent, or as permitted or required under applicable laws.
Faire
· Faire Privacy Policy
We may also collect your tax identification number (which may include your social security number), account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password...
American Airlines' consent obligation for sensitive data is conditional on two cumulative requirements — legal mandate and absence of any other lawful basis — meaning consent is not always sought before sensitive data is processed.
Processing of the most sensitive categories of personal data is conditioned on the purpose for which it was originally provided or on express consent, limiting Delta Airlines' authority to repurpose such data.
Sensitive personal information collection is legally mandated for certain services, meaning users cannot opt out of this data collection if they wish to use those services.
Target
· Target Privacy Policy
If required, consent will be obtained before collecting sensitive personal information (e.g., before the mobile application uses precise geolocation to enable features like drive-up services and in-store maps).
We collect the following categories of sensitive personal data...account log-in and password, biometric identifiers in the context of voice recognition programs, government ID in the context of a job application...
Indeed
· Indeed Privacy Policy
All sensitive data collected by Indeed is with your consent, or as permitted or required under applicable laws.
The qualifier 'intentionally' means that inadvertent collection of sensitive data is not excluded by this commitment, which limits the absolute scope of the protection.
Oura
· Oura Privacy Policy
some of the personal data we process, including any data concerning your health, is considered special or sensitive personal data. Under applicable law, such data is processed only if you have given your consent for processing.
Bumble
· Bumble Privacy Policy
This provision establishes a recommended practice regarding information disclosure rather than a binding restriction. It reflects the service's operational guidance on profile content management and risk mitigation for user-generated content visibility.
Where legally required, DoorDash will collect and process sensitive Personal Information only with consent.
TikTok
· TikTok Privacy Policy
The commitment to process sensitive personal information only in accordance with applicable law ties TikTok's obligations to the varying and evolving requirements of state privacy statutes rather than to a single uniform standard.
Hinge
· Hinge Privacy Policy
The consent mechanism is triggered by the act of providing the data rather than by a separate affirmative consent step, which determines how Hinge grounds its legal basis for processing highly sensitive information.
Tinder
· Tinder Privacy Policy
The act of providing sensitive data is itself treated as consent, meaning no separate consent mechanism is required beyond the user's voluntary submission.
Grindr
· Grindr Privacy Policy
You may share or not share health information like HIV and vaccination status, or sensitive data like racial or ethnic origin, or photos and videos.
Depending on how you use the Services, we collect information related to certain protected classifications such as gender or racial or ethnic origin.
You make it clear that you are responsible for all end user data privacy and protection requirements
Session replay recording of keystrokes and interactions can capture sensitive input—such as search terms or form entries—creating a granular reproduction of a user's in-session behavior shared with third parties.
Gemini
· Gemini Privacy Policy
Session replay technology can reconstruct a user's on-screen activity in detail; its explicit use signals that Gemini captures behavioral interaction data beyond standard analytics.
Acorns
· Acorns Privacy Policy
Detailed behavioral data including navigation patterns and mouse movements may be recorded by Acorns during platform interactions, though both the deployment and recording are qualified as non-certain.
Chegg
· Chegg Privacy Policy
Session replay technology captures detailed behavioral data about how a user navigates Chegg's interfaces, including inputs, which goes beyond standard analytics.