What you gave up

Home / Bolt.new / 13 MAY 2026

Incident #B2BB3A · 13 MAY 2026notable
Bolt.new / Privacy Policy Region n/s

Bolt.new rewrites privacy policy with AI file processing, retargeting, and EU/UK and US state rights

AI training: reworded✓ Machine-checked

The old 2017 StackBlitz policy is replaced by a full rewrite. It now describes sending attached files to third-party AI providers, using web beacons for retargeting on third-party platforms, and sharing limited identifiers with advertising partners. It also adds EU/UK and US state privacy rights, data retention terms, and GPC recognition.

Taken from you

  • Old promise not to share personal information with third parties for their marketing without consent or opt-in is gone
  • Files attached to AI prompts may be sent to third-party AI providers
  • Web beacons may support retargeting campaigns on third-party platforms
  • Limited identifiers or device info may be shared with advertising or analytics partners
  • Data kept as long as needed, possibly inaccessible while account not in good standing
  • Old commitment to seek consent before materially less restrictive policy changes is removed

Won back

  • Explicit EU/UK rights: access, correction, erasure, portability, withdraw consent, complaint
  • US state rights (CCPA/CPRA) including appeals and non-discrimination
  • Recognition of Global Privacy Control opt-out signals where required by law
  • Users may request deletion; stated limits on use of AI inputs by providers
  • Notice of material changes where required by law
  • Standard contractual clauses for international transfers where required
Evidence · 4 of 4 quotes matched in source
When you explicitly attach files to an AI prompt, relevant portions of those files may be transmitted to third-party AI service providers solely to generate responses.+ inserted · ✓ matched in source
However, we may use web beacons or similar technologies to support retargeting or promotional campaigns on third-party platforms.+ inserted · ✓ matched in source
However, we may share limited identifiers or device information with advertising or analytics partners to support marketing or promotional campaigns.+ inserted · ✓ matched in source
For revisions to this Privacy Policy that may be materially less restrictive on our use or disclosure of the personal information you have already provided to us, we will attempt to obtain your consent before implementing such revisions with respect to such information.− struck · ✓ matched in source
Archived version ↗ · 2,858 words changed
More on Bolt.new

Bolt.new: where you stand today

The full dossier on Bolt.new's current privacy policy and privacy terms, and every other change: Bolt.new terms of service and privacy policy. See also which services use your data to train AI.