Provision Registry

12505 classified provisions across 299 platforms — browse, filter, and compare.

Every clause classified by type, severity, and platform. Updated as policies change.

Start Compliance free trial Track specific clauses across platforms with provision-level alerts.
medium Data collection
Webull · Webull Privacy Policy
This provision establishes the operational scope of data collection mechanisms deployed across Webull's digital properties and specifies the permissible uses of behavioral tracking data. The authorization extends to third-party partners, which structures the flow of user activity data beyond Webull's direct control.
CA-P-002741 First tracked Apr 18, 2026 Last seen Apr 18, 2026 Compare across platforms →
medium Privacy rights
Squarespace · Squarespace Privacy Policy
Automatic collection of IP address, browser, and behavioral data through third-party cookies enables cross-site tracking for advertising purposes, which may occur without active user awareness unless cookie preferences are adjusted.
CA-P-006877 First tracked May 8, 2026 Last seen May 22, 2026 Compare across platforms →
medium Privacy rights
Medium · Medium Privacy Policy
This provision establishes that third-party tracking for targeted advertising is permitted on Medium's platform, which engages GDPR consent requirements under the ePrivacy Directive and CCPA opt-out obligations for cross-context behavioral advertising under CPRA.
CA-P-012727 First tracked May 21, 2026 Last seen May 22, 2026 Compare across platforms →
medium Privacy rights
Udemy · Udemy Privacy Policy
This provision governs the technical mechanisms through which behavioral and device data is collected on the platform, including data flows to third-party advertising and analytics partners via tracking technologies, and establishes the cookie consent and management framework applicable to users.
CA-P-012905 First tracked May 21, 2026 Last seen May 22, 2026 Compare across platforms →
medium Privacy rights
Dropbox · Dropbox Privacy Policy
Tracking technologies allow Dropbox and its advertising partners to build a behavioral profile based on your usage, which is shared with third parties for marketing purposes and may persist across browsing sessions.
CA-P-008464 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
medium Privacy rights
Headspace · Headspace Privacy Policy
Advertising cookies can track your activity across the web, not just on Headspace, and in the context of a mental health platform, the data derived from your usage patterns may infer sensitive information about your mental health that is then shared with advertising networks.
CA-P-009702 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
medium Privacy rights
Notion · Notion Privacy Policy
The policy authorizes use of cookies and tracking pixels by both Notion and unnamed third-party partners; the HTML source of the privacy policy page itself loads tracking scripts from Facebook, Google Ads, LinkedIn, Twitter, and Marketo, indicating these third parties receive data about visitors to Notion's web properties.
CA-P-011197 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
medium Privacy rights
Canva · Canva Privacy Policy
The policy distinguishes between essential and optional cookies, and the availability of a cookie settings tool is relevant to GDPR and ePrivacy consent obligations for EU users. The practical adequacy of consent obtained through the cookie banner cannot be assessed from policy text alone.
CA-P-010802 First tracked May 11, 2026 Last seen May 22, 2026 Compare across platforms →
medium Privacy rights
Fiverr · Fiverr Privacy Policy
Persistent tracking cookies and pixels from third-party advertising partners extend Fiverr's ability to monitor your behavior beyond just the Fiverr website, potentially across many other sites you visit.
CA-P-000864 First tracked Apr 3, 2026 Last seen May 22, 2026 Compare across platforms →
medium Privacy rights
HubSpot · HubSpot Privacy Policy
This provision establishes HubSpot's use of persistent and session-based tracking mechanisms across its services, which engages consent requirements under GDPR and ePrivacy rules for EU users and disclosure obligations under CCPA for California users.
CA-P-002980 First tracked Apr 18, 2026 Last seen May 22, 2026 Compare across platforms →
medium Privacy rights
Shopify · Shopify Privacy Policy
The policy states that cookies and tracking technologies are used for preference retention, usage analytics, and advertising targeting, which involves persistent device-level data collection that may extend across sessions and third-party sites.
CA-P-002227 First tracked Apr 4, 2026 Last seen May 22, 2026 Compare across platforms →
SimpliSafe · SimpliSafe Privacy Policy
This provision establishes the operational basis for SimpliSafe's data collection infrastructure and the authorization for third-party advertising partner access to tracking data. The clause defines the technical mechanisms and stated purposes that govern how user interaction data flows through SimpliSafe's analytics and advertising systems.
CA-P-005030 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
Fireworks AI · Fireworks AI Privacy Policy
The clause establishes the operational parameters for cookie and tracking technology deployment, specifies user control mechanisms available through browser settings, and clarifies that certain browser-based privacy preferences will not be honored by the service.
CA-P-005150 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
medium Data collection
Progressive · Progressive Privacy Policy
This provision establishes the operational framework for Progressive's use of persistent and passive tracking mechanisms to generate behavioral and technical data sets. The authorization permits both first-party analytics collection and activity monitoring that supports targeted advertising functions.
CA-P-006671 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
DoorDash · DoorDash Privacy Policy
The policy discloses that pixels and SDKs, in addition to cookies, are used to collect data. Pixels and SDKs can transmit data to advertising and analytics partners and may operate independently of browser cookie controls.
CA-P-010991 First tracked May 12, 2026 Last seen May 22, 2026 Compare across platforms →
Netflix · Netflix Privacy Statement
The provision establishes Netflix's technical infrastructure for data collection across user interactions with the service and affiliated platforms. By cataloging these specific identifier types, the clause operationalizes Netflix's ability to track user activity, maintain session state, and link user behavior across devices and services for service functionality and analytics purposes.
CA-P-002187 First tracked Apr 4, 2026 Last seen Apr 9, 2026 Compare across platforms →
medium Data collection
Hugging Face · Hugging Face Privacy Policy
Cookie requirements are a standard operational mechanism for session management, authentication, and service delivery. This provision clarifies that cookie functionality is a prerequisite to service access rather than optional, establishing the technical conditions under which the platform operates.
CA-P-001645 First tracked Apr 3, 2026 Last seen Apr 10, 2026 Compare across platforms →
TransUnion · TransUnion Privacy Policy
Tracking technologies create a behavioral profile of your online activity that is shared with advertising and social media platforms, potentially linking your credit bureau profile with your browsing behavior across the web.
CA-P-009414 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
Equifax · Equifax Privacy Policy
This provision establishes the operational basis for continuous data collection across Equifax properties and authorizes the use of that data for behavioral targeting in advertising contexts. The authorization extends to third-party advertising partners, making this data collection a foundational operational practice for the service.
CA-P-006955 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
Coinbase · Coinbase Privacy Policy
The provision establishes the operational scope of data collection mechanisms across first-party and third-party sources, enabling behavioral tracking and advertising personalization across owned and external digital properties. This determines what data flows inform the company's advertising targeting infrastructure.
CA-P-000421 First tracked Apr 3, 2026 Last seen Apr 17, 2026 Compare across platforms →
Stripe · Stripe Privacy Policy
The definition establishes the scope of information the organization processes and governs under its data handling obligations, clarifying that Personal Data includes passive collection mechanisms (device identifiers, IP logs) alongside voluntary user submissions.
CA-P-005376 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →
Mercury · Mercury Privacy Policy
This provision establishes the technical and operational scope of data collection activities Mercury implements across its service platform. The authorization extends to multiple tracking mechanisms and encompasses both Mercury's direct collection and third-party partner participation in data gathering.
CA-P-006602 First tracked May 8, 2026 Last seen May 8, 2026 Compare across platforms →
Coinbase · Coinbase Privacy Policy
This provision establishes the operational scope of Coinbase's tracking practices across its platform. It defines the categories of information collection (interaction data, movement patterns, demographic data) and the permissible uses of that data (analytics, service management, advertising), which form the basis for Coinbase's data operations.
CA-P-007642 First tracked May 9, 2026 Last seen May 11, 2026 Compare across platforms →
Disney+ · Disney Privacy Policy
Third-party tracking technologies embedded in Disney's services can follow your behavior across the internet, enabling advertising that persists beyond the Disney platform you visited.
CA-P-009495 First tracked May 10, 2026 Last seen May 22, 2026 Compare across platforms →
medium Acceptable use
Amazon Associates · Amazon Associates Program Policies
This provision establishes a categorical prohibition on a specific technical method of affiliate attribution manipulation. Associates using third-party link management tools, browser extensions, or automated scripts that interact with cookie placement should verify those tools do not trigger this prohibition, as violation is stated as grounds for commission withholding and termination.
CA-P-012179 First tracked May 20, 2026 Last seen May 22, 2026 Compare across platforms →
medium Age restriction
Scale AI · Scale AI Terms of Service
This provision establishes Scale AI's operational compliance framework under the Children's Online Privacy Protection Act (COPPA). It defines the age threshold for data collection restrictions and specifies the deletion protocol upon discovery of underage user data.
CA-P-004329 First tracked Apr 30, 2026 Last seen Apr 30, 2026 Compare across platforms →
Steam · Steam Subscriber Agreement
The provision operationalizes Valve's compliance with the Children's Online Privacy Protection Act (COPPA) and similar age-based data protection regulations. It establishes the contractual mechanism by which Valve enforces the statutory minimum age threshold for service access.
CA-P-002926 First tracked Apr 18, 2026 Last seen Apr 18, 2026 Compare across platforms →
Peacock · Peacock Terms of Use
This provision implements compliance with the Children's Online Privacy Protection Act (COPPA) and establishes the minimum age and consent requirements under which Peacock operates the service. It defines the age-gated access framework and parental authorization mechanism that governs eligibility.
CA-P-003821 First tracked Apr 28, 2026 Last seen May 7, 2026 Compare across platforms →
Luma AI · Luma AI Terms of Service
This provision establishes COPPA compliance obligations and provides a reporting mechanism for parents who believe their child's data has been collected without authorization.
CA-P-010499 First tracked May 11, 2026 Last seen May 20, 2026 Compare across platforms →
GitHub · GitHub Privacy Statement
This provision operationalizes GitHub's compliance with the Children's Online Privacy Protection Act (COPPA), which establishes specific restrictions on the collection and use of personal information from children under 13. The clause establishes a procedural mechanism for deletion upon discovery and provides a reporting channel for suspected violations.
CA-P-005606 First tracked May 7, 2026 Last seen May 7, 2026 Compare across platforms →

Compliance Governance Intelligence

Monitor specific governance provisions across platforms.

Compliance includes provision-level monitoring, regulatory mapping, and audit-ready analysis.

Start free Start Compliance free trial