Fineprint

If you like this, see what else we're creating.

Payments

PayPal

paypal.com

F
Open the original (new tab)PayPal Privacy Statement
F

Risk score

83of 100

Read Oct 19, 2026

In short

  • Fineprint found 6 quoted privacy clauses that match the consumer rubric.
  • This is a reading aid, not legal advice.

What you accept

If you use this site

Everyday words for the material promises and rights you give up. Each line includes a quote from the document.

Fineprint cannot see whether you agreed. This page is posted on their site. Open the original if you need to know how they say it applies.

  1. 01

    You are agreeing that the company may sell or share your personal data with third parties.

    Other companies

    “- Third parties, including service providers, Partners and Merchants, payment partners, such as payment networks and processors, credit reporting agencies and public and private credit databases ("**CRAs**"), government entities, data brokers, and financial institutions.”
  2. 02

    You are agreeing that these rules can follow you to other products, venues, or affiliates of the company.

    Other products, stores, or brands

    “Because many of our services won’t function without tracking data, we do not respond to DNT settings.”
  3. 03

    You are agreeing that the company may keep your data for an open-ended period.

    This product

    “## How Long We Store Your Personal Information We retain Personal Information for as long as needed or is permitted in context of the purpose for which it was collected and consistent with applicable law.”
  4. 04

    You are agreeing to cross-service tracking or profiling of your activity.

    This product

    “- **Cookies** means tracking technologies such as cookies, pixel tags, web beacons, and widgets.”
  5. 05

    You are agreeing that the company may collect location or other sensitive data.

    This product

    “Even if you don't allow us to track your precise location, we may still use your address to send you location-based options recommended by businesses that are near your address.”
  6. 06

    You are agreeing that the company may collect or share health or fitness data.

    This product

    “Vermont: If your PayPal, Xoom account or Fastlane profile has a Vermont mailing address, we will not disclose information about your creditworthiness to our affiliates and will not disclose your Personal Information, financial information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law, unless you authorize us to make th”

What it can cost you

Downsides we could quote

Quoted clauses that can affect your privacy, money, or right to go to court — including terms that follow you to other products.

Highest-cost clauses first

High cost

Data sold or shared with third parties

You are agreeing that the company may sell or share your personal data with third parties.

“- Third parties, including service providers, Partners and Merchants, payment partners, such as payment networks and processors, credit reporting agencies and public and private credit databases ("**CRAs**"), government entities, data brokers, and financial institutions.”

What that means: Your activity and identifiers can be used by companies you did not choose.

The document describes selling or commercially sharing personal data with third parties.

High cost

Terms follow you to parks, stores, and other products

You are agreeing that these rules can follow you to other products, venues, or affiliates of the company.

“Because many of our services won’t function without tracking data, we do not respond to DNT settings.”

What that means: A click in one product can later be used to block a lawsuit about a park, store, or different service.

Accepting this document can bind you beyond this app — including physical venues or sister brands.

High cost

Tracking you across apps

You are agreeing to cross-service tracking or profiling of your activity.

“- **Cookies** means tracking technologies such as cookies, pixel tags, web beacons, and widgets.”

What that means: Your browsing and device signals can be stitched into a longer profile.

The document allows tracking or profiling beyond a single site session.

High cost

Location or sensitive-data over-collection

You are agreeing that the company may collect location or other sensitive data.

“Even if you don't allow us to track your precise location, we may still use your address to send you location-based options recommended by businesses that are near your address.”

What that means: Higher-risk details about you can be stored and shared under the same broad terms.

The company collects location or other sensitive categories of data.

High cost

Health or fitness data used beyond care

You are agreeing that the company may collect or share health or fitness data.

“Vermont: If your PayPal, Xoom account or Fastlane profile has a Vermont mailing address, we will not disclose information about your creditworthiness to our affiliates and will not disclose your Personal Information, financial information, credit report, or health information to nonaffiliated third parties to market to you, other than as permitted by Vermont law, unless you authorize us to make th”

What that means: Wellness details can be stored or shared with partners you did not choose.

The document describes collecting or sharing health or fitness data beyond running the core service.

Medium cost

Indefinite retention

You are agreeing that the company may keep your data for an open-ended period.

“## How Long We Store Your Personal Information We retain Personal Information for as long as needed or is permitted in context of the purpose for which it was collected and consistent with applicable law.”

What that means: Old account data can linger long after you expected it to be gone.

Retention is open-ended or justified with vague business interests.

If these terms already apply to you

Keep this list. Fineprint cannot undo or cancel something you already agreed to at the company.

We cannot see Agree on their site. With Premium, tap “I accepted these terms” if you already agreed to what PayPal asks.

News for this company

First readings and wording changes we could quote — the same items that appear on News.

All News

  1. Updated · Privacy policy

    PayPal privacy policy changed

    We quoted 10 wording changes below. The current grade is F.

    Wording we could quote

    • Changed

      Unilateral changes with little or no notice

      Was

      “We may revise this Privacy Statement from time to time to reflect changes to our business, Services, or applicable laws. If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

      Now

      “We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

    • Changed

      Tracking you across apps

      Was

      “We also disclose Personal Information to partners and Merchants to enable their use of our Services to facilitate your transactions... Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you'll like.”

      Now

      “If you want to know more about how we use cookies, please review our Statement on Cookies and Tracking Technologies... We do not respond to DNT settings.”

    • Changed

      Location or sensitive-data over-collection

      Was

      “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you... We collect precise geolocation data from Users while they are logged into their financial account.”

      Now

      “Categories of Personal Information collected from you... Biometric data: Such as voice identification, photo identification, or face scans... Sensitive Personal Information: Such as Social Security and tax ID number, government-issued and other related identification... precise geolocation data...”

    • Changed

      Indefinite retention

      Was

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end.”

      Now

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end...”

    • Changed

      Difficult or incomplete deletion

      Was

      “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with laws and other legal or governmental processes; and Other exempt purposes under applicable law.”

      Now

      “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information as explained in How Long Do We Store Your Personal Information... so we can... comply with laws... Detect and prevent malicious, fraudulent, or illegal activity...”

    • No longer quoted

      Data sold or shared with third parties

      “Unless we are required to obtain your consent, we share Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States. Personal Information we disclose includes, for example, products, sizes, preferences, sizes, and styles we think you’ll like.”

    • Changed

      Terms follow you to parks, stores, and other products

      Was

      “Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC... Fastlane means the online tool whereby individuals can store their payment methods... at participating Partners and Merchants.”

      Now

      “Excluded Services, including Venmo and PayPal Honey... Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

    • No longer quoted

      Cookie consent that favors Accept

      “Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.”

    • No longer quoted

      Liability shifted onto the user

      “While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s)... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

    • No longer quoted

      Children’s data

      “The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information, including Personal Information, from children under the age of 18... we will promptly delete it, unless we are legally obligated to retain such data.”

    Oct 13, 2026 · F

    Company pageSee what changed

  2. Updated · Privacy policy

    PayPal privacy policy changed

    We quoted 10 wording changes below. The current grade is F.

    Wording we could quote

    • Changed

      Unilateral changes with little or no notice

      Was

      “We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

      Now

      “We may revise this Privacy Statement from time to time to reflect changes to our business, Services, or applicable laws. If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

    • Changed

      Tracking you across apps

      Was

      “We may use Personal Information... to provide you with information... market our Services... show ads or otherwise personalize your experience”

      Now

      “We also disclose Personal Information to partners and Merchants to enable their use of our Services to facilitate your transactions... Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you'll like.”

    • Changed

      Location or sensitive-data over-collection

      Was

      “Biometric data: Such as voice identification, photo identification, or face scans... government-issued identification... precise geolocation data”

      Now

      “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you... We collect precise geolocation data from Users while they are logged into their financial account.”

    • Changed

      Indefinite retention

      Was

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end”

      Now

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end.”

    • Changed

      Difficult or incomplete deletion

      Was

      “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with our promises to you... detect and prevent malicious... activity”

      Now

      “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with laws and other legal or governmental processes; and Other exempt purposes under applicable law.”

    • Changed

      Children’s data

      Was

      “The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information... from children under the age of 18”

      Now

      “The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information, including Personal Information, from children under the age of 18... we will promptly delete it, unless we are legally obligated to retain such data.”

    • Changed

      Liability shifted onto the user

      Was

      “While we are dedicated to securing our systems... you are responsible for securing and maintaining the privacy of your password(s)... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection”

      Now

      “While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s)... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

    • Changed

      Terms follow you to parks, stores, and other products

      Was

      “Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

      Now

      “Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC... Fastlane means the online tool whereby individuals can store their payment methods... at participating Partners and Merchants.”

    • Appeared

      Data sold or shared with third parties

      “Unless we are required to obtain your consent, we share Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States. Personal Information we disclose includes, for example, products, sizes, preferences, sizes, and styles we think you’ll like.”

    • Appeared

      Cookie consent that favors Accept

      “Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.”

    Oct 13, 2026 · F

    Company pageSee what changed

  3. Updated · Privacy policy

    PayPal privacy policy changed

    We quoted 9 wording changes below. The current grade is F.

    Wording we could quote

    • Changed

      Unilateral changes with little or no notice

      Was

      “We may revise this Privacy Statement from time to time to reflect changes to our business, Services, or applicable laws. If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

      Now

      “We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

    • Changed

      Tracking you across apps

      Was

      “We use Cookies to collect your device information, internet activity information, and generate inferences as described above... These service providers may also collect information that helps them identify your device, such as IP-address or other unique device identifiers.”

      Now

      “We may use Personal Information... to provide you with information... market our Services... show ads or otherwise personalize your experience”

    • Changed

      Location or sensitive-data over-collection

      Was

      “Biometric data: Such as voice identification, photo identification, or face scans... Sensitive Personal Information: Such as Social Security and tax ID number... precise geolocation data...”

      Now

      “Biometric data: Such as voice identification, photo identification, or face scans... government-issued identification... precise geolocation data”

    • Changed

      Indefinite retention

      Was

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end... We retain biometric data for as long as needed or permitted... and no more than 3 years after your account closes, unless otherwise required by applicable law.”

      Now

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end”

    • No longer quoted

      Data sold or shared with third parties

      “Unless we are required to obtain your consent, we share Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States. Personal Information we disclose includes, for example, products, preferences, sizes, and styles we think you’ll like.”

    • No longer quoted

      Cookie consent that favors Accept

      “Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.”

    • Appeared

      Difficult or incomplete deletion

      “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with our promises to you... detect and prevent malicious... activity”

    • Appeared

      Children’s data

      “The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information... from children under the age of 18”

    • Appeared

      Liability shifted onto the user

      “While we are dedicated to securing our systems... you are responsible for securing and maintaining the privacy of your password(s)... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection”

    Oct 13, 2026 · F

    Company pageSee what changed

  4. Updated · Privacy policy

    PayPal privacy policy changed

    We quoted 6 wording changes below. The current grade is F.

    Wording we could quote

    • Changed

      Tracking you across apps

      Was

      “We also disclose Personal Information to Partners and Merchants... to help ourselves and Partners and Merchants personalize services and offers so you can have a better and more relevant experience.”

      Now

      “We use Cookies to collect your device information, internet activity information, and generate inferences as described above... These service providers may also collect information that helps them identify your device, such as IP-address or other unique device identifiers.”

    • Changed

      Indefinite retention

      Was

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law...”

      Now

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end... We retain biometric data for as long as needed or permitted... and no more than 3 years after your account closes, unless otherwise required by applicable law.”

    • Changed

      Location or sensitive-data over-collection

      Was

      “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you...”

      Now

      “Biometric data: Such as voice identification, photo identification, or face scans... Sensitive Personal Information: Such as Social Security and tax ID number... precise geolocation data...”

    • Changed

      Data sold or shared with third parties

      Was

      “Please note that certain jurisdictions require providing a lawful basis for processing Personal Information... Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024... for personalized shopping experiences in the United States.”

      Now

      “Unless we are required to obtain your consent, we share Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States. Personal Information we disclose includes, for example, products, preferences, sizes, and styles we think you’ll like.”

    • Changed

      Unilateral changes with little or no notice

      Was

      “If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

      Now

      “We may revise this Privacy Statement from time to time to reflect changes to our business, Services, or applicable laws. If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

    • No longer quoted

      Difficult or incomplete deletion

      “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... Complete a transaction... Detect and prevent malicious, fraudulent, or illegal activity... Comply with laws...”

    Oct 13, 2026 · F

    Company pageSee what changed

  5. Updated · Privacy policy

    PayPal privacy policy changed

    We quoted 9 wording changes below. The current grade is F.

    Wording we could quote

    • Changed

      Tracking you across apps

      Was

      “We may use Personal Information... to better understand and cater to your interests... We also use Personal Information to allow you to participate in certain features... such as... targeted advertising... We use Cookies to collect your device information, internet activity information, and generate inferences...”

      Now

      “We also disclose Personal Information to Partners and Merchants... to help ourselves and Partners and Merchants personalize services and offers so you can have a better and more relevant experience.”

    • Changed

      Data sold or shared with third parties

      Was

      “Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024... for personalized shopping experiences in the United States... Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you’ll like.”

      Now

      “Please note that certain jurisdictions require providing a lawful basis for processing Personal Information... Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024... for personalized shopping experiences in the United States.”

    • Changed

      Location or sensitive-data over-collection

      Was

      “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you... Sensitive Personal Information: Such as Social Security and tax ID number... bank account and routing numbers...”

      Now

      “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you...”

    • Changed

      Indefinite retention

      Was

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years... In connection with litigation, investigations, audit and compliance practices, or to protect against legal claims.”

      Now

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law...”

    • Changed

      Unilateral changes with little or no notice

      Was

      “We may revise this Privacy Statement from time to time... we will provide you with 30 days' prior notice by posting notice of the change on the Policy Updates... otherwise the revised Privacy Statement will be effective as of the published effective date.”

      Now

      “If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

    • Changed

      Difficult or incomplete deletion

      Was

      “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with laws... detect and prevent malicious, fraudulent, or illegal activity... Manage our internal business processes...”

      Now

      “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... Complete a transaction... Detect and prevent malicious, fraudulent, or illegal activity... Comply with laws...”

    • No longer quoted

      Liability shifted onto the user

      “We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

    • Changed

      Terms follow you to parks, stores, and other products

      Was

      “Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC... Fastlane means the online tool whereby individuals can store their payment methods... at participating Partners and Merchants...”

      Now

      “Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

    • Appeared

      Cookie consent that favors Accept

      “Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.”

    Oct 13, 2026 · F

    Company pageSee what changed

  6. Updated · Privacy policy

    PayPal privacy policy changed

    We quoted 10 wording changes below. The current grade is F.

    Wording we could quote

    • Changed

      Unilateral changes with little or no notice

      Was

      “If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice by posting notice of the change on the Policy Updates or 'Privacy Statement' page of our website, otherwise the revised Privacy Statement will be effective as of the published effective date.”

      Now

      “We may revise this Privacy Statement from time to time... we will provide you with 30 days' prior notice by posting notice of the change on the Policy Updates... otherwise the revised Privacy Statement will be effective as of the published effective date.”

    • Changed

      Location or sensitive-data over-collection

      Was

      “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account...”

      Now

      “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you... Sensitive Personal Information: Such as Social Security and tax ID number... bank account and routing numbers...”

    • Changed

      Tracking you across apps

      Was

      “The websites you visited before coming to the Sites, and other usage and browsing information collected through Cookies... We also use Personal Information... to better understand and cater to your interests.”

      Now

      “We may use Personal Information... to better understand and cater to your interests... We also use Personal Information to allow you to participate in certain features... such as... targeted advertising... We use Cookies to collect your device information, internet activity information, and generate inferences...”

    • Changed

      Indefinite retention

      Was

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end...”

      Now

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years... In connection with litigation, investigations, audit and compliance practices, or to protect against legal claims.”

    • Changed

      Data sold or shared with third parties

      Was

      “We may disclose Personal Information with other third parties... This further applies to parties we cooperate with for marketing purposes, in particular to show you ads and offers tailored to your interests.”

      Now

      “Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024... for personalized shopping experiences in the United States... Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you’ll like.”

    • No longer quoted

      Children’s data

      “The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information... from children under the age of 18...”

    • No longer quoted

      Cookie consent that favors Accept

      “Because many of our services won’t function without tracking data, we do not respond to DNT settings. Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies... your use of the Sites and Services may be limited or not possible.”

    • Changed

      Terms follow you to parks, stores, and other products

      Was

      “Excluded Services. We may disclose Personal Information to the Excluded Services (as defined below), including Venmo to provide you with the Services...”

      Now

      “Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC... Fastlane means the online tool whereby individuals can store their payment methods... at participating Partners and Merchants...”

    • Appeared

      Difficult or incomplete deletion

      “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with laws... detect and prevent malicious, fraudulent, or illegal activity... Manage our internal business processes...”

    • Appeared

      Liability shifted onto the user

      “We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

    Oct 13, 2026 · F

    Company pageSee what changed

  7. Updated · Privacy policy

    PayPal privacy policy changed

    We quoted 8 wording changes below. The grade moved from D to F.

    Wording we could quote

    • Changed

      Tracking you across apps

      Was

      “Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you’ll like.”

      Now

      “The websites you visited before coming to the Sites, and other usage and browsing information collected through Cookies... We also use Personal Information... to better understand and cater to your interests.”

    • Changed

      Location or sensitive-data over-collection

      Was

      “Biometric data: Such as voice identification, photo identification, or face scans... government-issued identification... precise geolocation data”

      Now

      “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account...”

    • Changed

      Indefinite retention

      Was

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law”

      Now

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end...”

    • Changed

      Cookie consent that favors Accept

      Was

      “Because many of our services won’t function without tracking data, we do not respond to DNT settings.”

      Now

      “Because many of our services won’t function without tracking data, we do not respond to DNT settings. Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies... your use of the Sites and Services may be limited or not possible.”

    • Changed

      Unilateral changes with little or no notice

      Was

      “We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

      Now

      “If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice by posting notice of the change on the Policy Updates or 'Privacy Statement' page of our website, otherwise the revised Privacy Statement will be effective as of the published effective date.”

    • Appeared

      Data sold or shared with third parties

      “We may disclose Personal Information with other third parties... This further applies to parties we cooperate with for marketing purposes, in particular to show you ads and offers tailored to your interests.”

    • Appeared

      Children’s data

      “The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information... from children under the age of 18...”

    • Appeared

      Terms follow you to parks, stores, and other products

      “Excluded Services. We may disclose Personal Information to the Excluded Services (as defined below), including Venmo to provide you with the Services...”

    Oct 13, 2026 · F

    Company pageSee what changed

  8. Updated · Privacy policy

    PayPal privacy policy changed

    We quoted 7 wording changes below. The grade moved from F to D.

    Wording we could quote

    • Changed

      Indefinite retention

      Was

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end”

      Now

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law”

    • Changed

      Unilateral changes with little or no notice

      Was

      “If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice by posting notice of the change... otherwise the revised Privacy Statement will be effective as of the published effective date.”

      Now

      “We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

    • Changed

      Location or sensitive-data over-collection

      Was

      “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account...”

      Now

      “Biometric data: Such as voice identification, photo identification, or face scans... government-issued identification... precise geolocation data”

    • No longer quoted

      Data sold or shared with third parties

      “We also disclose your Sensitive Personal Information as appropriate to carry out legitimate business activities... Please also see 'Sale' and 'Sharing' of Personal Information for additional information for individuals in the United States.”

    • No longer quoted

      Terms follow you to parks, stores, and other products

      “Excluded Services, including Venmo and PayPal Honey... Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

    • No longer quoted

      Difficult or incomplete deletion

      “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with our promises... Detect and prevent malicious... activity; Comply with laws...”

    • Changed

      Tracking you across apps

      Was

      “Inferred data: Such as gender, income, browsing and purchasing habits, creditworthiness, fraud and risk assessment... which we may infer based on your transactions and interactions with our Services.”

      Now

      “Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you’ll like.”

    Oct 12, 2026 · D

    Company pageSee what changed

  9. Updated · Privacy policy

    PayPal privacy policy changed

    We quoted 9 wording changes below. The current grade is F.

    Wording we could quote

    • Changed

      Tracking you across apps

      Was

      “We also use Personal Information to allow you to participate in certain features that may be of interest to you, such as ... targeted advertising”

      Now

      “Inferred data: Such as gender, income, browsing and purchasing habits, creditworthiness, fraud and risk assessment... which we may infer based on your transactions and interactions with our Services.”

    • Changed

      Location or sensitive-data over-collection

      Was

      “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you”

      Now

      “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account...”

    • Changed

      Data sold or shared with third parties

      Was

      “Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024 ... for personalized shopping experiences in the United States. To opt-out ... edit your preferences”

      Now

      “We also disclose your Sensitive Personal Information as appropriate to carry out legitimate business activities... Please also see 'Sale' and 'Sharing' of Personal Information for additional information for individuals in the United States.”

    • Changed

      Terms follow you to parks, stores, and other products

      Was

      “Excluded Services includes Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

      Now

      “Excluded Services, including Venmo and PayPal Honey... Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

    • Changed

      Unilateral changes with little or no notice

      Was

      “We may revise this Privacy Statement from time to time... If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

      Now

      “If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice by posting notice of the change... otherwise the revised Privacy Statement will be effective as of the published effective date.”

    • Changed

      Indefinite retention

      Was

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years...”

      Now

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end”

    • No longer quoted

      Liability shifted onto the user

      “While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s) and account or profile registration information”

    • Changed

      Difficult or incomplete deletion

      Was

      “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information as explained... to complete a transaction... detect and prevent malicious... activity”

      Now

      “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with our promises... Detect and prevent malicious... activity; Comply with laws...”

    • Changed

      Cookie consent that favors Accept

      Was

      “Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies... your use of the Sites and Services may be limited or not possible.”

      Now

      “Because many of our services won’t function without tracking data, we do not respond to DNT settings.”

    Oct 12, 2026 · F

    Company pageSee what changed

  10. Updated · Privacy policy

    PayPal privacy policy changed

    We quoted 10 wording changes below. The current grade is F.

    Wording we could quote

    • Changed

      Unilateral changes with little or no notice

      Was

      “We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

      Now

      “We may revise this Privacy Statement from time to time... If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

    • Changed

      Indefinite retention

      Was

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end...”

      Now

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years...”

    • Changed

      Tracking you across apps

      Was

      “We may disclose Personal Information with Partners and Merchants to enable their use of our Services to facilitate your transactions... including, for example, products, sizes, preferences, and styles we think you'll like.”

      Now

      “We also use Personal Information to allow you to participate in certain features that may be of interest to you, such as ... targeted advertising”

    • Changed

      Location or sensitive-data over-collection

      Was

      “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you...”

      Now

      “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you”

    • Changed

      Difficult or incomplete deletion

      Was

      “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information as explained in How Long Do We Store Your Personal Information so we can... comply with laws...”

      Now

      “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information as explained... to complete a transaction... detect and prevent malicious... activity”

    • Changed

      Data sold or shared with third parties

      Was

      “In the United States, we share Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States.”

      Now

      “Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024 ... for personalized shopping experiences in the United States. To opt-out ... edit your preferences”

    • Changed

      Liability shifted onto the user

      Was

      “While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s)... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

      Now

      “While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s) and account or profile registration information”

    • Changed

      Terms follow you to parks, stores, and other products

      Was

      “Excluded Services, including Venmo and PayPal Honey. ... Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... who process Personal Information in accordance with their own terms of service and separate privacy statements.”

      Now

      “Excluded Services includes Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

    • Changed

      Cookie consent that favors Accept

      Was

      “Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.”

      Now

      “Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies... your use of the Sites and Services may be limited or not possible.”

    • No longer quoted

      Children’s data

      “The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information... from children under the age of 18...”

    Oct 12, 2026 · F

    Company pageSee what changed

  11. Updated · Privacy policy

    PayPal privacy policy changed

    We quoted 9 wording changes below. The current grade is F.

    Wording we could quote

    • Changed

      Indefinite retention

      Was

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end, unless we need to keep it longer to the extent permitted by applicable law”

      Now

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end...”

    • Changed

      Unilateral changes with little or no notice

      Was

      “We may revise this Privacy Statement from time to time... If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

      Now

      “We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

    • Changed

      Tracking you across apps

      Was

      “We may disclose Personal Information... to Partners and Merchants to enable their use of our Services to facilitate your transactions... Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you'll like.”

      Now

      “We may disclose Personal Information with Partners and Merchants to enable their use of our Services to facilitate your transactions... including, for example, products, sizes, preferences, and styles we think you'll like.”

    • Changed

      Location or sensitive-data over-collection

      Was

      “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account.”

      Now

      “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you...”

    • Changed

      Data sold or shared with third parties

      Was

      “Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024... for personalized shopping experiences in the United States... To opt-out of disclosures of Personal Information to Partners and Merchants for personalized shopping experiences, log into your PayPal account and edit your preferences in the Data and Privacy setting.”

      Now

      “In the United States, we share Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States.”

    • Changed

      Liability shifted onto the user

      Was

      “While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s) and account or profile registration information... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

      Now

      “While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s)... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

    • Appeared

      Difficult or incomplete deletion

      “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information as explained in How Long Do We Store Your Personal Information so we can... comply with laws...”

    • Appeared

      Terms follow you to parks, stores, and other products

      “Excluded Services, including Venmo and PayPal Honey. ... Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... who process Personal Information in accordance with their own terms of service and separate privacy statements.”

    • Appeared

      Children’s data

      “The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information... from children under the age of 18...”

    Oct 12, 2026 · F

    Company pageSee what changed

  12. Updated · Privacy policy

    PayPal privacy policy changed

    We quoted 8 wording changes below. The current grade is F.

    Wording we could quote

    • Changed

      Unilateral changes with little or no notice

      Was

      “We may revise this Privacy Statement from time to time to reflect changes to our business, Services, or applicable laws... otherwise the revised Privacy Statement will be effective as of the published effective date.”

      Now

      “We may revise this Privacy Statement from time to time... If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

    • Changed

      Tracking you across apps

      Was

      “When you use Services, as well as other third-party sites and services, we might use tracking technologies like cookies... to serve you interest-based advertising... They may also collect information that helps them identify your device, such as IP-address or other unique device identifiers.”

      Now

      “We may disclose Personal Information... to Partners and Merchants to enable their use of our Services to facilitate your transactions... Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you'll like.”

    • Changed

      Location or sensitive-data over-collection

      Was

      “Biometric data: Such as voice identification, photo identification, or face scans... Sensitive Personal Information: Such as Social Security and tax ID number... precise geolocation data...”

      Now

      “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account.”

    • Changed

      Data sold or shared with third parties

      Was

      “Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States... To opt-out of disclosures of Personal Information to Partners and Merchants for personalized shopping experiences...”

      Now

      “Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024... for personalized shopping experiences in the United States... To opt-out of disclosures of Personal Information to Partners and Merchants for personalized shopping experiences, log into your PayPal account and edit your preferences in the Data and Privacy setting.”

    • Changed

      Indefinite retention

      Was

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end...”

      Now

      “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end, unless we need to keep it longer to the extent permitted by applicable law”

    • No longer quoted

      Terms follow you to parks, stores, and other products

      “Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

    • Appeared

      Cookie consent that favors Accept

      “Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.”

    • Appeared

      Liability shifted onto the user

      “While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s) and account or profile registration information... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

    Oct 12, 2026 · F

    Company pageSee what changed