If you like this, see what else we're creating.

Privacy policy

PayPal

PayPal Privacy Statement

F

Risk score

76of 100

In short

  • You are agreeing to a comprehensive privacy policy that allows PayPal to collect extensive personal, financial, and sensitive data to operate your account.
  • The document permits sharing this information with merchants for personalized shopping experiences, tracking your activity across sites, and retaining your data indefinitely for legal and business reasons.
  • You also consent to unilateral changes to these terms without requiring your active acceptance of every update.

What you accept

If you use this site

Everyday words for the material promises and rights you give up. Each line includes a quote from the document.

Fineprint cannot see whether you agreed. This page is posted on their site. Open the original if you need to know how they say it applies.

  1. 01

    You are agreeing to let PayPal track your location, device details, and browsing habits using cookies and similar technologies to show you targeted ads.

    This product

    “We may use Cookies to collect your device information, internet activity information, and generate inferences as described above.”
  2. 02

    You are agreeing to share your personal information with Partners and Merchants so they can personalize content and offers for your shopping experience.

    Other companies

    “We disclose Personal Information with these parties involved in a transaction... to help ourselves and Partners and Merchants personalize services and offers so you can have a better and more relevant experience.”
  3. 03

    You are agreeing to accept any future revisions of the Privacy Statement once it is posted online, without needing to actively click 'I Agree' again.

    This product

    “otherwise the revised Privacy Statement will be effective as of the published effective date.”

What it can cost you

Downsides we could quote

Quoted clauses that can affect your privacy, money, or right to go to court — including terms that follow you to other products.

Highest-cost clauses first

High cost

Tracking you across apps

You are agreeing to allow PayPal to track your behavior across sites and ignore your browser's Do Not Track preferences.

“If you want to know more about how we use cookies, please review our Statement on Cookies and Tracking Technologies... We do not respond to DNT settings.”

What that means: Your movements and interests online are tracked and used to target you with ads even if you try to block it via browser settings.

PayPal uses cookies and trackers to monitor users across different websites and apps to build detailed profiles for advertising. They explicitly state they ignore browser-level 'Do Not Track' signals, meaning users cannot easily opt out of this cross-site tracking.

High cost

Indefinite retention

You are agreeing to let PayPal keep your personal information for up to 10 years after your account is closed.

“Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end...”

What that means: Your private financial history and personal details are kept for at least a decade after you stop using the service.

PayPal keeps your personal data for the life of your account and then for another 10 years after you close it. This retention period applies even if the data is no longer necessary for the service you used, prioritizing legal and audit requirements over deletion.

High cost

Location or sensitive-data over-collection

You are agreeing to provide biometric scans and precise location data to verify your identity and enhance security.

“Categories of Personal Information collected from you... Biometric data: Such as voice identification, photo identification, or face scans... Sensitive Personal Information: Such as Social Security and tax ID number, government-issued and other related identification... precise geolocation data...”

What that means: Your unique biological traits and real-time location are collected and stored by PayPal.

The document confirms that PayPal collects highly sensitive biometric data (face scans, voice) and precise GPS location information. This data goes beyond basic identity verification into areas that uniquely identify you and track your physical movements.

High cost

Terms follow you to parks, stores, and other products

You are agreeing to engage with a ecosystem that includes numerous separate branded platforms like Venmo and Honey.

“Excluded Services, including Venmo and PayPal Honey... Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

What that means: Your data handling is complicated by the involvement of many separate branded entities associated with PayPal.

While this document covers core PayPal services, it explicitly names affiliated brands like Venmo and Honey as 'Excluded Services.' This indicates that using PayPal may involve transactions with sister brands that operate under their own distinct legal frameworks, creating a complex web of data handling across multiple properties.

Medium cost

Unilateral changes with little or no notice

You are agreeing to accept updated privacy policies that become valid as soon as they are published online.

“We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

What that means: The rules governing your data can change without you directly consenting to the new terms each time.

PayPal can change its privacy rules whenever it wants. While they promise 30 days' notice if the law requires it, they reserve the right to make other changes effective immediately upon posting, without getting fresh permission from you.

Medium cost

Difficult or incomplete deletion

You are agreeing that deleting your account will not result in the complete removal of all your personal data.

“If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information as explained in How Long Do We Store Your Personal Information... so we can... comply with laws... Detect and prevent malicious, fraudulent, or illegal activity...”

What that means: Deleting your account does not erase your history; significant amounts of your data remain stored with PayPal.

Even if you ask to delete your data or close your account, PayPal will retain copies of your information. They cite legal obligations, fraud prevention, and internal business processes as reasons for keeping this data despite deletion requests.

If these terms already apply to you

Keep this list. Fineprint cannot undo or cancel something you already agreed to at the company.

We cannot see Agree on their site. With Premium, tap “I accepted these terms” if you already agreed to what PayPal asks.