Incident #19DBFA · 30 APR 2026minor
Outbrain replaces its Privacy Center hub page with a full User Privacy Policy
The old page was a landing hub pointing to separate policies for users, business partners and site visitors. The new version contains the full User Privacy Policy text inline: data collected, legal bases, sharing, retention (90 days), opt-outs, EU/UK and US rights. The diff does not show prior policy text, so many of these details may have existed on linked pages rather than being newly introduced.
Taken from you
- Single hub page linking all Outbrain policies (business partner, site visitor, DSP) is removed from this document
- Bid stream data from ad auctions is now stated as added to user profiles
- Opt-outs are stated as cookie-based and device/browser-specific, and may be undone by browser cookie clearing
- DPF arbitration is limited to non-monetary relief and requires prior steps
Won back
- Detailed disclosure of data collected, legal bases, sharing recipients and retention (profile kept no more than 90 days)
- Statement that only non-generative machine learning is used on user data
- Stated ban on targeting children and transmitting sensitive categories
- Detailed EU/UK and US state rights, DPF complaint routes and GPC honouring
Evidence · 4 of 4 quotes matched in source
Outbrain uses non-generative machine learning techniques to process Users’ Personal Data and to analyze trends and popular recommendations to predict what you will be interested in+ inserted · ✓ matched in source
This bid stream data is added to your Outbrain user profile to help us further understand your interests and browsing patterns+ inserted · ✓ matched in source
Any information associated with a user who has an active and continuing profile is retained in the User Profile for no more than 90 days from the date of last interaction.+ inserted · ✓ matched in source
Archived version ↗ · 7,235 words changed