PayPal

Wording we could quote

• Changed

  Unilateral changes with little or no notice

  Was

  “We may revise this Privacy Statement from time to time to reflect changes to our business, Services, or applicable laws. If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

  Now

  “We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

• Changed

  Tracking you across apps

  Was

  “We also disclose Personal Information to partners and Merchants to enable their use of our Services to facilitate your transactions... Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you'll like.”

  Now

  “If you want to know more about how we use cookies, please review our Statement on Cookies and Tracking Technologies... We do not respond to DNT settings.”

• Changed

  Location or sensitive-data over-collection

  Was

  “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you... We collect precise geolocation data from Users while they are logged into their financial account.”

  Now

  “Categories of Personal Information collected from you... Biometric data: Such as voice identification, photo identification, or face scans... Sensitive Personal Information: Such as Social Security and tax ID number, government-issued and other related identification... precise geolocation data...”

• Changed

  Indefinite retention

  Was

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end.”

  Now

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end...”

• Changed

  Difficult or incomplete deletion

  Was

  “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with laws and other legal or governmental processes; and Other exempt purposes under applicable law.”

  Now

  “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information as explained in How Long Do We Store Your Personal Information... so we can... comply with laws... Detect and prevent malicious, fraudulent, or illegal activity...”

• No longer quoted

  Data sold or shared with third parties

  “Unless we are required to obtain your consent, we share Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States. Personal Information we disclose includes, for example, products, sizes, preferences, sizes, and styles we think you’ll like.”

• Changed

  Terms follow you to parks, stores, and other products

  Was

  “Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC... Fastlane means the online tool whereby individuals can store their payment methods... at participating Partners and Merchants.”

  Now

  “Excluded Services, including Venmo and PayPal Honey... Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

• No longer quoted

  Cookie consent that favors Accept

  “Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.”

• No longer quoted

  Liability shifted onto the user

  “While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s)... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

• No longer quoted

  Children’s data

  “The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information, including Personal Information, from children under the age of 18... we will promptly delete it, unless we are legally obligated to retain such data.”

Wording we could quote

• Changed

  Unilateral changes with little or no notice

  Was

  “We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

  Now

  “We may revise this Privacy Statement from time to time to reflect changes to our business, Services, or applicable laws. If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

• Changed

  Tracking you across apps

  Was

  “We may use Personal Information... to provide you with information... market our Services... show ads or otherwise personalize your experience”

  Now

  “We also disclose Personal Information to partners and Merchants to enable their use of our Services to facilitate your transactions... Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you'll like.”

• Changed

  Location or sensitive-data over-collection

  Was

  “Biometric data: Such as voice identification, photo identification, or face scans... government-issued identification... precise geolocation data”

  Now

  “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you... We collect precise geolocation data from Users while they are logged into their financial account.”

• Changed

  Indefinite retention

  Was

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end”

  Now

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end.”

• Changed

  Difficult or incomplete deletion

  Was

  “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with our promises to you... detect and prevent malicious... activity”

  Now

  “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with laws and other legal or governmental processes; and Other exempt purposes under applicable law.”

• Changed

  Children’s data

  Was

  “The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information... from children under the age of 18”

  Now

  “The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information, including Personal Information, from children under the age of 18... we will promptly delete it, unless we are legally obligated to retain such data.”

• Changed

  Liability shifted onto the user

  Was

  “While we are dedicated to securing our systems... you are responsible for securing and maintaining the privacy of your password(s)... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection”

  Now

  “While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s)... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

• Changed

  Terms follow you to parks, stores, and other products

  Was

  “Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

  Now

  “Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC... Fastlane means the online tool whereby individuals can store their payment methods... at participating Partners and Merchants.”

• Appeared

  Data sold or shared with third parties

  “Unless we are required to obtain your consent, we share Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States. Personal Information we disclose includes, for example, products, sizes, preferences, sizes, and styles we think you’ll like.”

• Appeared

  Cookie consent that favors Accept

  “Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.”

Wording we could quote

• Changed

  Unilateral changes with little or no notice

  Was

  “We may revise this Privacy Statement from time to time to reflect changes to our business, Services, or applicable laws. If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

  Now

  “We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

• Changed

  Tracking you across apps

  Was

  “We use Cookies to collect your device information, internet activity information, and generate inferences as described above... These service providers may also collect information that helps them identify your device, such as IP-address or other unique device identifiers.”

  Now

  “We may use Personal Information... to provide you with information... market our Services... show ads or otherwise personalize your experience”

• Changed

  Location or sensitive-data over-collection

  Was

  “Biometric data: Such as voice identification, photo identification, or face scans... Sensitive Personal Information: Such as Social Security and tax ID number... precise geolocation data...”

  Now

  “Biometric data: Such as voice identification, photo identification, or face scans... government-issued identification... precise geolocation data”

• Changed

  Indefinite retention

  Was

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end... We retain biometric data for as long as needed or permitted... and no more than 3 years after your account closes, unless otherwise required by applicable law.”

  Now

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end”

• No longer quoted

  Data sold or shared with third parties

  “Unless we are required to obtain your consent, we share Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States. Personal Information we disclose includes, for example, products, preferences, sizes, and styles we think you’ll like.”

• No longer quoted

  Cookie consent that favors Accept

  “Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.”

• Appeared

  Difficult or incomplete deletion

  “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with our promises to you... detect and prevent malicious... activity”

• Appeared

  Children’s data

  “The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information... from children under the age of 18”

• Appeared

  Liability shifted onto the user

  “While we are dedicated to securing our systems... you are responsible for securing and maintaining the privacy of your password(s)... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection”

Wording we could quote

• Changed

  Tracking you across apps

  Was

  “We also disclose Personal Information to Partners and Merchants... to help ourselves and Partners and Merchants personalize services and offers so you can have a better and more relevant experience.”

  Now

  “We use Cookies to collect your device information, internet activity information, and generate inferences as described above... These service providers may also collect information that helps them identify your device, such as IP-address or other unique device identifiers.”

• Changed

  Indefinite retention

  Was

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law...”

  Now

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end... We retain biometric data for as long as needed or permitted... and no more than 3 years after your account closes, unless otherwise required by applicable law.”

• Changed

  Location or sensitive-data over-collection

  Was

  “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you...”

  Now

  “Biometric data: Such as voice identification, photo identification, or face scans... Sensitive Personal Information: Such as Social Security and tax ID number... precise geolocation data...”

• Changed

  Data sold or shared with third parties

  Was

  “Please note that certain jurisdictions require providing a lawful basis for processing Personal Information... Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024... for personalized shopping experiences in the United States.”

  Now

  “Unless we are required to obtain your consent, we share Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States. Personal Information we disclose includes, for example, products, preferences, sizes, and styles we think you’ll like.”

• Changed

  Unilateral changes with little or no notice

  Was

  “If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

  Now

  “We may revise this Privacy Statement from time to time to reflect changes to our business, Services, or applicable laws. If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

• No longer quoted

  Difficult or incomplete deletion

  “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... Complete a transaction... Detect and prevent malicious, fraudulent, or illegal activity... Comply with laws...”

Wording we could quote

• Changed

  Tracking you across apps

  Was

  “We may use Personal Information... to better understand and cater to your interests... We also use Personal Information to allow you to participate in certain features... such as... targeted advertising... We use Cookies to collect your device information, internet activity information, and generate inferences...”

  Now

  “We also disclose Personal Information to Partners and Merchants... to help ourselves and Partners and Merchants personalize services and offers so you can have a better and more relevant experience.”

• Changed

  Data sold or shared with third parties

  Was

  “Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024... for personalized shopping experiences in the United States... Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you’ll like.”

  Now

  “Please note that certain jurisdictions require providing a lawful basis for processing Personal Information... Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024... for personalized shopping experiences in the United States.”

• Changed

  Location or sensitive-data over-collection

  Was

  “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you... Sensitive Personal Information: Such as Social Security and tax ID number... bank account and routing numbers...”

  Now

  “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you...”

• Changed

  Indefinite retention

  Was

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years... In connection with litigation, investigations, audit and compliance practices, or to protect against legal claims.”

  Now

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law...”

• Changed

  Unilateral changes with little or no notice

  Was

  “We may revise this Privacy Statement from time to time... we will provide you with 30 days' prior notice by posting notice of the change on the Policy Updates... otherwise the revised Privacy Statement will be effective as of the published effective date.”

  Now

  “If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

• Changed

  Difficult or incomplete deletion

  Was

  “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with laws... detect and prevent malicious, fraudulent, or illegal activity... Manage our internal business processes...”

  Now

  “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... Complete a transaction... Detect and prevent malicious, fraudulent, or illegal activity... Comply with laws...”

• No longer quoted

  Liability shifted onto the user

  “We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

• Changed

  Terms follow you to parks, stores, and other products

  Was

  “Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC... Fastlane means the online tool whereby individuals can store their payment methods... at participating Partners and Merchants...”

  Now

  “Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

• Appeared

  Cookie consent that favors Accept

  “Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.”

Wording we could quote

• Changed

  Unilateral changes with little or no notice

  Was

  “If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice by posting notice of the change on the Policy Updates or 'Privacy Statement' page of our website, otherwise the revised Privacy Statement will be effective as of the published effective date.”

  Now

  “We may revise this Privacy Statement from time to time... we will provide you with 30 days' prior notice by posting notice of the change on the Policy Updates... otherwise the revised Privacy Statement will be effective as of the published effective date.”

• Changed

  Location or sensitive-data over-collection

  Was

  “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account...”

  Now

  “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you... Sensitive Personal Information: Such as Social Security and tax ID number... bank account and routing numbers...”

• Changed

  Tracking you across apps

  Was

  “The websites you visited before coming to the Sites, and other usage and browsing information collected through Cookies... We also use Personal Information... to better understand and cater to your interests.”

  Now

  “We may use Personal Information... to better understand and cater to your interests... We also use Personal Information to allow you to participate in certain features... such as... targeted advertising... We use Cookies to collect your device information, internet activity information, and generate inferences...”

• Changed

  Indefinite retention

  Was

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end...”

  Now

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years... In connection with litigation, investigations, audit and compliance practices, or to protect against legal claims.”

• Changed

  Data sold or shared with third parties

  Was

  “We may disclose Personal Information with other third parties... This further applies to parties we cooperate with for marketing purposes, in particular to show you ads and offers tailored to your interests.”

  Now

  “Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024... for personalized shopping experiences in the United States... Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you’ll like.”

• No longer quoted

  Children’s data

  “The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information... from children under the age of 18...”

• No longer quoted

  Cookie consent that favors Accept

  “Because many of our services won’t function without tracking data, we do not respond to DNT settings. Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies... your use of the Sites and Services may be limited or not possible.”

• Changed

  Terms follow you to parks, stores, and other products

  Was

  “Excluded Services. We may disclose Personal Information to the Excluded Services (as defined below), including Venmo to provide you with the Services...”

  Now

  “Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC... Fastlane means the online tool whereby individuals can store their payment methods... at participating Partners and Merchants...”

• Appeared

  Difficult or incomplete deletion

  “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with laws... detect and prevent malicious, fraudulent, or illegal activity... Manage our internal business processes...”

• Appeared

  Liability shifted onto the user

  “We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

Wording we could quote

• Changed

  Tracking you across apps

  Was

  “Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you’ll like.”

  Now

  “The websites you visited before coming to the Sites, and other usage and browsing information collected through Cookies... We also use Personal Information... to better understand and cater to your interests.”

• Changed

  Location or sensitive-data over-collection

  Was

  “Biometric data: Such as voice identification, photo identification, or face scans... government-issued identification... precise geolocation data”

  Now

  “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account...”

• Changed

  Indefinite retention

  Was

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law”

  Now

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end...”

• Changed

  Cookie consent that favors Accept

  Was

  “Because many of our services won’t function without tracking data, we do not respond to DNT settings.”

  Now

  “Because many of our services won’t function without tracking data, we do not respond to DNT settings. Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies... your use of the Sites and Services may be limited or not possible.”

• Changed

  Unilateral changes with little or no notice

  Was

  “We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

  Now

  “If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice by posting notice of the change on the Policy Updates or 'Privacy Statement' page of our website, otherwise the revised Privacy Statement will be effective as of the published effective date.”

• Appeared

  Data sold or shared with third parties

  “We may disclose Personal Information with other third parties... This further applies to parties we cooperate with for marketing purposes, in particular to show you ads and offers tailored to your interests.”

• Appeared

  Children’s data

  “The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information... from children under the age of 18...”

• Appeared

  Terms follow you to parks, stores, and other products

  “Excluded Services. We may disclose Personal Information to the Excluded Services (as defined below), including Venmo to provide you with the Services...”

Wording we could quote

• Changed

  Indefinite retention

  Was

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end”

  Now

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law”

• Changed

  Unilateral changes with little or no notice

  Was

  “If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice by posting notice of the change... otherwise the revised Privacy Statement will be effective as of the published effective date.”

  Now

  “We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

• Changed

  Location or sensitive-data over-collection

  Was

  “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account...”

  Now

  “Biometric data: Such as voice identification, photo identification, or face scans... government-issued identification... precise geolocation data”

• No longer quoted

  Data sold or shared with third parties

  “We also disclose your Sensitive Personal Information as appropriate to carry out legitimate business activities... Please also see 'Sale' and 'Sharing' of Personal Information for additional information for individuals in the United States.”

• No longer quoted

  Terms follow you to parks, stores, and other products

  “Excluded Services, including Venmo and PayPal Honey... Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

• No longer quoted

  Difficult or incomplete deletion

  “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with our promises... Detect and prevent malicious... activity; Comply with laws...”

• Changed

  Tracking you across apps

  Was

  “Inferred data: Such as gender, income, browsing and purchasing habits, creditworthiness, fraud and risk assessment... which we may infer based on your transactions and interactions with our Services.”

  Now

  “Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you’ll like.”

Wording we could quote

• Changed

  Tracking you across apps

  Was

  “We also use Personal Information to allow you to participate in certain features that may be of interest to you, such as ... targeted advertising”

  Now

  “Inferred data: Such as gender, income, browsing and purchasing habits, creditworthiness, fraud and risk assessment... which we may infer based on your transactions and interactions with our Services.”

• Changed

  Location or sensitive-data over-collection

  Was

  “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you”

  Now

  “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account...”

• Changed

  Data sold or shared with third parties

  Was

  “Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024 ... for personalized shopping experiences in the United States. To opt-out ... edit your preferences”

  Now

  “We also disclose your Sensitive Personal Information as appropriate to carry out legitimate business activities... Please also see 'Sale' and 'Sharing' of Personal Information for additional information for individuals in the United States.”

• Changed

  Terms follow you to parks, stores, and other products

  Was

  “Excluded Services includes Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

  Now

  “Excluded Services, including Venmo and PayPal Honey... Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

• Changed

  Unilateral changes with little or no notice

  Was

  “We may revise this Privacy Statement from time to time... If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

  Now

  “If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice by posting notice of the change... otherwise the revised Privacy Statement will be effective as of the published effective date.”

• Changed

  Indefinite retention

  Was

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years...”

  Now

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end”

• No longer quoted

  Liability shifted onto the user

  “While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s) and account or profile registration information”

• Changed

  Difficult or incomplete deletion

  Was

  “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information as explained... to complete a transaction... detect and prevent malicious... activity”

  Now

  “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information... to comply with our promises... Detect and prevent malicious... activity; Comply with laws...”

• Changed

  Cookie consent that favors Accept

  Was

  “Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies... your use of the Sites and Services may be limited or not possible.”

  Now

  “Because many of our services won’t function without tracking data, we do not respond to DNT settings.”

Wording we could quote

• Changed

  Unilateral changes with little or no notice

  Was

  “We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

  Now

  “We may revise this Privacy Statement from time to time... If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

• Changed

  Indefinite retention

  Was

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end...”

  Now

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years...”

• Changed

  Tracking you across apps

  Was

  “We may disclose Personal Information with Partners and Merchants to enable their use of our Services to facilitate your transactions... including, for example, products, sizes, preferences, and styles we think you'll like.”

  Now

  “We also use Personal Information to allow you to participate in certain features that may be of interest to you, such as ... targeted advertising”

• Changed

  Location or sensitive-data over-collection

  Was

  “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you...”

  Now

  “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you”

• Changed

  Difficult or incomplete deletion

  Was

  “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information as explained in How Long Do We Store Your Personal Information so we can... comply with laws...”

  Now

  “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information as explained... to complete a transaction... detect and prevent malicious... activity”

• Changed

  Data sold or shared with third parties

  Was

  “In the United States, we share Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States.”

  Now

  “Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024 ... for personalized shopping experiences in the United States. To opt-out ... edit your preferences”

• Changed

  Liability shifted onto the user

  Was

  “While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s)... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

  Now

  “While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s) and account or profile registration information”

• Changed

  Terms follow you to parks, stores, and other products

  Was

  “Excluded Services, including Venmo and PayPal Honey. ... Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... who process Personal Information in accordance with their own terms of service and separate privacy statements.”

  Now

  “Excluded Services includes Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

• Changed

  Cookie consent that favors Accept

  Was

  “Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.”

  Now

  “Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies... your use of the Sites and Services may be limited or not possible.”

• No longer quoted

  Children’s data

  “The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information... from children under the age of 18...”

Wording we could quote

• Changed

  Indefinite retention

  Was

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end, unless we need to keep it longer to the extent permitted by applicable law”

  Now

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end...”

• Changed

  Unilateral changes with little or no notice

  Was

  “We may revise this Privacy Statement from time to time... If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

  Now

  “We may revise this Privacy Statement from time to time... otherwise the revised Privacy Statement will be effective as of the published effective date.”

• Changed

  Tracking you across apps

  Was

  “We may disclose Personal Information... to Partners and Merchants to enable their use of our Services to facilitate your transactions... Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you'll like.”

  Now

  “We may disclose Personal Information with Partners and Merchants to enable their use of our Services to facilitate your transactions... including, for example, products, sizes, preferences, and styles we think you'll like.”

• Changed

  Location or sensitive-data over-collection

  Was

  “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account.”

  Now

  “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you...”

• Changed

  Data sold or shared with third parties

  Was

  “Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024... for personalized shopping experiences in the United States... To opt-out of disclosures of Personal Information to Partners and Merchants for personalized shopping experiences, log into your PayPal account and edit your preferences in the Data and Privacy setting.”

  Now

  “In the United States, we share Personal Information collected after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States.”

• Changed

  Liability shifted onto the user

  Was

  “While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s) and account or profile registration information... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

  Now

  “While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s)... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”

• Appeared

  Difficult or incomplete deletion

  “If you close your PayPal account(s) or profile, delete, or request that we delete Personal Information, we still need to keep some Personal Information as explained in How Long Do We Store Your Personal Information so we can... comply with laws...”

• Appeared

  Terms follow you to parks, stores, and other products

  “Excluded Services, including Venmo and PayPal Honey. ... Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... who process Personal Information in accordance with their own terms of service and separate privacy statements.”

• Appeared

  Children’s data

  “The Sites and Services are not directed to children under the age of 18. We do not knowingly collect information... from children under the age of 18...”

Wording we could quote

• Changed

  Unilateral changes with little or no notice

  Was

  “We may revise this Privacy Statement from time to time to reflect changes to our business, Services, or applicable laws... otherwise the revised Privacy Statement will be effective as of the published effective date.”

  Now

  “We may revise this Privacy Statement from time to time... If the revised version requires notice in accordance with applicable law, we will provide you with 30 days' prior notice... otherwise the revised Privacy Statement will be effective as of the published effective date.”

• Changed

  Tracking you across apps

  Was

  “When you use Services, as well as other third-party sites and services, we might use tracking technologies like cookies... to serve you interest-based advertising... They may also collect information that helps them identify your device, such as IP-address or other unique device identifiers.”

  Now

  “We may disclose Personal Information... to Partners and Merchants to enable their use of our Services to facilitate your transactions... Personal Information we disclose includes, for example, products, sizes, preferences, and styles we think you'll like.”

• Changed

  Location or sensitive-data over-collection

  Was

  “Biometric data: Such as voice identification, photo identification, or face scans... Sensitive Personal Information: Such as Social Security and tax ID number... precise geolocation data...”

  Now

  “Biometric data: Such as voice identification, photo identification, or face scans, which we may collect when you consent in the user experience to authenticate you for certain actions related to your account.”

• Changed

  Data sold or shared with third parties

  Was

  “Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024 (or from earlier if you consent) for personalized shopping experiences in the United States... To opt-out of disclosures of Personal Information to Partners and Merchants for personalized shopping experiences...”

  Now

  “Unless we are required by law to obtain your consent, we disclose Personal Information collected from you after November 27, 2024... for personalized shopping experiences in the United States... To opt-out of disclosures of Personal Information to Partners and Merchants for personalized shopping experiences, log into your PayPal account and edit your preferences in the Data and Privacy setting.”

• Changed

  Indefinite retention

  Was

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end...”

  Now

  “Personal Information used for the ongoing relationship between you and PayPal is stored for the duration of the relationship plus a period of 10 years or such period as mandated by any applicable local law once our relationship comes to an end, unless we need to keep it longer to the extent permitted by applicable law”

• No longer quoted

  Terms follow you to parks, stores, and other products

  “Excluded Services means companies or separate brands, affiliates, or subsidiaries of PayPal... Examples include Venmo, Honey Science LLC, Chargehound LLC, Paidy Inc., Swift Financial LLC, and Bill Me Later, Inc.”

• Appeared

  Cookie consent that favors Accept

  “Certain aspects and features of our Services and Sites are only available through the use of Cookies, so if you choose to disable or decline Cookies through your device or browser settings, your use of the Sites and Services may be limited or not possible.”

• Appeared

  Liability shifted onto the user

  “While we are dedicated to securing our systems and Services, you are responsible for securing and maintaining the privacy of your password(s) and account or profile registration information... We are not responsible for protecting any Personal Information that we share with a third-party based on a linked account connection that you have authorized.”