What does this privacy policy actually let them do?

Not whether it is good or bad — what concretely happens to your data, in plain terms.

What it looks for

• What is collected beyond the obvious
• Sharing and selling to third parties
• Advertising, profiling and tracking across other sites
• How long data is kept
• Transfers to other countries
• Whether deleting your account actually deletes your data
• What you can require them to erase

A privacy policy is a description of permissions, written by the party receiving them. The useful question is not whether it sounds reassuring — they all do — but what it permits on the days when the company would prefer to do more.

The most consequential lines are usually about third parties. "We may share information with partners" covers an enormous range, and the policy rarely names them. Combined with a broad definition of what counts as collected data, that clause can permit far more than a reader assumes.

Retention is the second thing worth finding. Many policies do not commit to deleting anything, and some state explicitly that data survives account deletion — backups, legal holds, aggregated analytics. If you closed your account expecting that to be the end of it, that is often not what happened.

This tool will tell you what the policy permits. It will not tell you whether the company is trustworthy, because no document can answer that.

Related questions

• Does deleting my account delete my data?
• What does "share with partners" mean in a privacy policy?
• How long do companies keep your data?
• Can they sell my personal information?

Signing something else?

• What am I signing in this employment contract?
• What am I signing in this rental agreement?
• What am I agreeing to in these terms of service?
• What am I signing in this freelance contract?
• What am I signing in this loan or credit agreement?
• A crypto transaction

This is a reading aid, not legal advice. For anything that decides the next few years of your life, talk to someone qualified.