Cookie notice
X Privacy Policy
Risk score
84of 100
In short
What you accept
Everyday words for the material promises and rights you give up. Each line includes a quote from the document.
Fineprint cannot see whether you agreed. This page is posted on their site. Open the original if you need to know how they say it applies.
You are agreeing to let X share your information with third-party business partners who may use it for their own independent purposes, such as training artificial intelligence models.
Other companies
“If you do not opt out... the recipients of the information may use it for their own independent purposes in addition to those stated in X’s Privacy Policy, including, for example, to train their artificial intelligence models”
You are agreeing to give X permission to use your data and publicly available information to train its machine learning or artificial intelligence models.
This product
“We may use the information we collect and publicly available information to help train our machine learning or artificial intelligence models for the purposes outlined in this policy.”
You are agreeing to let X keep certain identifiers, like your email or phone number, indefinitely if your account is suspended for violating rules.
This product
“Where you violate our Rules and your account is suspended, we may keep the identifiers you used to create the account (such as your email address or phone number) indefinitely to prevent repeat policy offenders from creating new accounts.”
What it can cost you
Quoted clauses that can affect your privacy, money, or right to go to court — including terms that follow you to other products.
Highest-cost clauses first
You are agreeing to let X track your device usage on other sites to serve you relevant advertisements.
“We also use this information to measure the effectiveness of ads and to help recognize your devices to serve you ads on and off of X.”
What that means: Your browsing activity outside of X can be linked back to your X account for ad targeting.
X tracks your device identity to show advertisements across both their platform and external websites or apps.
You are agreeing to indefinite data retention if X determines it is needed for safety, security, or legal compliance.
“We may need to keep certain information longer than our policies specify in order to comply with legal requirements and for safety and security reasons. For example: To maintain the safety and security of our products and services... including where it is necessary to store your information longer in order to investigate and fight abuse on our products and services.”
What that means: Your data may never be fully deleted if X decides it needs it for future investigations or legal defenses.
Data retention is not strictly limited; X can keep information indefinitely if they deem it necessary for safety, security, or legal defense.
You are agreeing to the potential sale or transfer of your personal data if X is acquired or undergoes a major business restructuring.
“We may share, sell, or transfer information about you in connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy.”
What that means: A future buyer of X could acquire your personal history and profile information.
In the event of a business transaction change, your personal data can be sold or transferred to a new entity.
You are agreeing to let X track your interactions with advertisements across the entire web.
“When you view or interact with ads we serve on or off X, we may collect information about those views or interactions...”
What that means: X builds a profile of your interests based on how you interact with ads everywhere on the internet.
X collects detailed engagement data not just on their site, but for ads displayed on external platforms.
You are agreeing to allow X to collect biometric information from you if you provide consent.
“Biometric information. Based on your consent, we may collect and use your biometric information for safety, security, and identification purposes.”
What that means: You permit the collection of physical traits like fingerprints or face ID data if you enable the feature.
The policy explicitly lists biometric data as a category collected based on user consent for security functions.
You are agreeing to a 30-day delay in the final removal of your account data after deactivation.
“For up to 30 days after deactivation it is still possible to restore your X account if it was accidentally or wrongfully deactivated.”
What that means: Your request to leave is not immediate; your data remains active for a month after you try to delete your account.
While deletion is possible, there is a 30-day window where the account and data remain accessible or recoverable by the system.
You are agreeing to have your interaction logs and cookie data kept for up to 13 months.
“We keep cookies and information collected using cookies for up to 13 months. We keep information about your views or interactions with ads on or off X... for up to 12 months.”
What that means: Your past advertising clicks and site visits are stored for long periods, building a durable history of your behavior.
Specific log data and cookie identifiers are retained for over a year, which is a significant period for tracking history.
Keep this list. Fineprint cannot undo or cancel something you already agreed to at the company.
We cannot see Agree on their site. With Premium, tap “I accepted these terms” if you already agreed to what X asks.
