PayPal

You are agreeing to accept immediate updates to the Privacy Statement without direct notice.

“If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice by posting notice of the change on the Policy Updates or 'Privacy Statement' page of our website, otherwise the revised Privacy Statement will be effective as of the published effective date.”

What that means: You lose control over privacy rules because changes take effect instantly without active notification if not legally mandated.

PayPal changes terms at will. If the law does not force them to give you 30 days' warning, the new rule starts the moment they publish it, with no further action needed from them to notify you directly.

You are agreeing to let them collect and process your face scans and voice identification for account access.

“Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account...”

What that means: Your unique biological traits are stored by PayPal for routine authentication, increasing risk if data is breached.

They collect high-sensitivity biometric data like face scans and voice ID just to verify identity or allow transfers, going far beyond standard login security.

You are agreeing to be tracked across other websites and apps using cookies and device identifiers.

“The websites you visited before coming to the Sites, and other usage and browsing information collected through Cookies... We also use Personal Information... to better understand and cater to your interests.”

What that means: Companies build a detailed profile of your life and habits based on sites you visit outside of PayPal.

They track your entire browsing history across the web via cookies and trackers, not just activity within PayPal services.

You are agreeing to have your personal and transaction history retained for up to ten years after account closure.

“Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end...”

What that means: Your historical data remains on their servers for a decade after closing your account.

They keep your data for at least 10 years after you leave, regardless of whether you still need those services active.

You are agreeing that your data may flow to sister brands like Venmo and Honey.

“Excluded Services. We may disclose Personal Information to the Excluded Services (as defined below), including Venmo to provide you with the Services...”

What that means: Sharing data here automatically puts your info into the hands of Venmo and Honey ecosystems.

Using one part of the ecosystem exposes you to other distinct brands like Venmo and Honey, which operate under separate terms.

You are agreeing to share personal data with third-party ad platforms for targeted advertising.

“We may disclose Personal Information with other third parties... This further applies to parties we cooperate with for marketing purposes, in particular to show you ads and offers tailored to your interests.”

What that means: Your personal data is handed to advertisers to customize the ads you see everywhere else.

While they claim not to 'sell' data in the California sense, they share broad personal details with ad partners to tailor ads, effectively commodifying user attention.

You are agreeing to adhere to the 18+ age restriction for using PayPal services.

“The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information... from children under the age of 18...”

What that means: Anyone under 18 is barred from using the service, limiting access for younger users.

The barrier to entry is set at 18, which is higher than the federal COPPA standard of 13, restricting youth usage significantly.

You are agreeing to allow tracking technologies to function fully to access all site features.

“Because many of our services won’t function without tracking data, we do not respond to DNT settings. Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies... your use of the Sites and Services may be limited or not possible.”

What that means: You cannot easily block tracking because doing so disables essential parts of the payment tool.

Opting out of tracking or cookies breaks core features, forcing a choice between privacy and functionality.