Incident #361627 · 06 MAR 2026notable
Tinder's EU privacy policy adds inferred profiles, more device data, and a Facebook joint-controller disclosure
The new policy lists "insights and inferences" about your preferences, characteristics, predispositions and attitudes as a data category used across purposes and shared with partners. It also collects more device data, such as movement and sensor data, and search queries, and adds Meta joint-controller wording and a Share My Date sharing feature. Retention gains a 90-day data restore for returning users and a 30-day deletion rule for Face Data, and transfer wording is expanded.
Taken from you
- Insights and inferences about your preferences, predispositions and attitudes are now generated and used for ads, pricing and safety
- Device movement, sensor and network data now collected
- Search queries now count as collected content
- Data shared with Facebook tools, with Tinder and Meta Ireland as joint controllers
- Offering discounts and customizing prices now rests on legitimate interest rather than only contract
- Data shared with partners such as companies facing similar threats for safety purposes
- Profile snapshots may be included in emails or notifications to potential matches
- Match Group affiliates may share data to develop recommendation systems
- Machine learning explicitly named for use of de-identified retained data
- Safety processing now also relies on substantial public interest
Won back
- Face Data is deleted within 30 days unless legally or safety-necessary retention applies
- Transfer wording now lists adequacy decisions and standard contractual clauses as separate mechanisms, and says the US has no adequacy decision.
- Clear opt-out of targeted advertising for US users, including through authorized agents
- Account restoration of some data if you rejoin within 90 days
- Explicit statement of the suspension data handling and the option to request deletion during suspension
- Complaint option added to the contact section
Evidence · 4 of 4 quotes matched in source
| Insights and Inferences | Using the service involves the generation of insights and inferences, drawn from your interactions and the information and content you provide, reflecting, e.g., your preferences, characteristics, predispositions, behavior, and attitudes. |+ inserted · ✓ matched in source
When using these tools we are considered “Joint Data Controllers” with Meta Ireland.+ inserted · ✓ matched in source
* To suggest to you relevant and meaningful connections, by developing or improving Match Group Brands’ core recommendation systems.+ inserted · ✓ matched in source
* Face Data is deleted within 30 days, unless continued retention is necessary to comply with an applicable legal obligation or to ensure the safety and security of our service and members, to the extent permitted by applicable law.+ inserted · ✓ matched in source
Archived version ↗ · 5,547 words changed