How Reddit collects, uses, and shares your information
Overall Score
Risk by Category
Reddit's Privacy Policy outlines extensive data collection practices including personal information, content, usage data, device information, and inferred data. Data is shared with affiliates, service providers, advertisers, and for legal purposes. Users have rights to access, correct, delete data subject to limitations. Retention is indefinite unless requested otherwise. High transparency but significant third-party sharing and tracking.
Collects account data, posts, comments, IP addresses, device info, location, and inferred interests.
Shares with affiliates, vendors, advertisers, and via pixels/cookies for targeting.
Keeps data as long as account exists or needed for business/legal purposes.
Provides access, correction, deletion, and opt-out options for ads.
Clear sections on collection, use, sharing, and cookies.
Uses encryption and standard security practices.
Spotify collects the following categories of personal data. High Risk categories are used for advertising profiling or involve sensitive personal information.
Username, email, posts, comments, votes.
IP, browser, device, location.
Interests from activity.
Your data serves the following purposes. Mandatory purposes cannot be disabled without canceling the service. Opt-out available purposes allow some user control.
Uses data to recommend content and personalize experience.
Targets ads based on activity and inferences.
Aggregates data for platform improvement.
Spotify shares data with several categories of third parties. Sharing with advertising partners is extensive and represents the primary commercial use of your behavioral data.
Shares with vendors for hosting, analytics.
Pixel sharing for ad targeting.
Reddit Inc. entities.
The following rights may be available to you depending on your region. EU/EEA users have the broadest protections under GDPR. Non-EU users have more limited guarantees.
Users can download data and request corrections.
Account deletion removes most data, but some retained for legal reasons.
Do Not Track and personalized ad opt-outs available.
Data is retained for different periods depending on category, and security disclosures vary in depth. The policy highlights the following retention and transparency points.
Retention Periods
Data kept as long as account exists.
Most data deleted within 30-90 days, exceptions for legal.
Retained indefinitely for analytics.
Security & Transparency
Uses HTTPS and encrypts data in transit.
Notifies users of breaches as required by law.
Regular audits and incident response.
Source Text
We collect information you provide and automatically collected data.
Interpretation
Very broad collection scope increases privacy risks.
Source Text
Share with service providers, advertisers, affiliates.
Interpretation
Extensive sharing exposes data to many parties.
Source Text
Requests honored subject to legal exceptions.
Interpretation
Rights provided but with limitations.
Source Text
As needed for purposes, indefinite for accounts.
Interpretation
Lack of specific periods is concerning.
Account info, content, usage, device, location data.