https://tos.linkflow.be/ Every material change to the European Union copy of the terms we watch.en Mon, 09 Nov 2026 07:52:12 +0000 https://tos.linkflow.be/changes/19ae71dec32a/https://tos.linkflow.be/changes/19ae71dec32a/ Mon, 09 Nov 2026 00:00:00 +0000notableAccounts Centre is being renamed Meta Account, with WhatsApp added only optionally. The policy now says that when you chat with businesses using Meta's business tools and/or add WhatsApp to Accounts Centre, Meta may receive limited information to reduce spam, help businesses send more relevant messages and improve Meta ads. The business-messaging feature is now described as optional only if WhatsApp is not added to Accounts Centre. Taken from you: Meta may receive limited information from business chats or Accounts Centre linking, used to improve Meta ads and make business messages more relevant https://tos.linkflow.be/changes/590903458832/https://tos.linkflow.be/changes/590903458832/ Sat, 07 Nov 2026 00:00:00 +0000minorAI trainingThe old text said My AI chat content was kept until you delete it or your account. The new text says My AI retains the content but only uses the previous 24 hours to power responses. Use of shared content and location to improve products and personalise ads continues, now phrased with 'also'. https://tos.linkflow.be/changes/bfb93c90ecd0/https://tos.linkflow.be/changes/bfb93c90ecd0/ Fri, 06 Nov 2026 00:00:00 +0000notableAI trainingThe biometric retention bullets no longer name Persona as the party deleting data; they now say the data is deleted within 30 days and destroyed after the retention period. Lines saying Roblox gets no copy of Biometric Data, cannot access face geometry, and may access stored ID photos and selfies for training and compliance were removed. The effective date moved to November 6, 2026. Taken from you: Deletion commitment no longer names the service provider Persona as responsible https://tos.linkflow.be/changes/2ed912d25bf6/https://tos.linkflow.be/changes/2ed912d25bf6/ Thu, 05 Nov 2026 00:00:00 +0000minorThe whole block of EU Standard Contractual Clauses (September 2021) for transferring personal data to third countries was removed from the privacy policy page, with nothing added in its place. The diff shows only the removal, so it does not show whether the clauses now live elsewhere or whether data transfer safeguards changed. Taken from you: Contract text of data-transfer safeguards no longer shown on the policy page; Easy in-page access to the clauses on redress, liability and supervision by the Dutch authority https://tos.linkflow.be/changes/2db26edb8cfc/https://tos.linkflow.be/changes/2db26edb8cfc/ Tue, 03 Nov 2026 00:00:00 +0000notableThe WhatsApp Business App privacy policy now says it collects information about users' interactions with businesses and advertisers, including ad views, taps and purchases. If ads are shown in the Business App, this data plus business account and usage/log data from both main app and business functions is used for the same purposes as in the Status and Channels policy. The scope also now covers main app functionality where it differs on the Business App, and mentions creating ads and messaging campaigns. Taken from you: More data collected: interactions with businesses, message/call volume and frequency, blocking/muting, browsing and purchase info; Ad interaction data (views, taps, orders, purchases) collected if ads are shown; Usage and log data from main app and business functions can be used for ads in the Business App https://tos.linkflow.be/changes/1b7e8ace8d43/https://tos.linkflow.be/changes/1b7e8ace8d43/ Mon, 02 Nov 2026 00:00:00 +0000majorAI trainingRoblox's EU privacy policy now says content you upload through camera or upload features may be kept for AI training and improving products, not just for the feature itself. It adds a section on researcher access to platform data, which in some cases may include Personal Information. It also names more legal orders that can lead to sharing (e.g. European Production Orders), and keeps a parent's email for 7 days instead of 24 hours if account linking isn't completed. It adds some parental-rights and Global Privacy Control wording as well. Taken from you: Uploaded camera/photo/video content may now be kept for AI training and product improvement, not just the feature's purpose; Parent emails are kept 7 days instead of 24 hours if linking is not completed; Personal Information may be shared with researchers where legally required; Legal-order sharing now names specific instruments, such as European Production/Preservation Orders and Brazilian Marco Civil orders. Sharing in response to court orders and legal process was already allowed.; Creators 'may' rather than 'will' access user data; contact importer wording no longer says 'consent' https://tos.linkflow.be/changes/bb11622f2723/https://tos.linkflow.be/changes/bb11622f2723/ Fri, 30 Oct 2026 00:00:00 +0000minorA notice says the Subscriptions article will be updated from 27 January 2027, requiring clear disclosure of eligibility criteria, verification and post-eligibility pricing for ongoing eligibility-based discounts such as student plans. The Families Self-Certified Ads SDK programme is reopened for applications. SDKs must now register on Play SDK Console and publish technical documentation, while the Expert Approved programme requirement for ad formats is removed. Taken from you: Ad SDKs must register on Play SDK Console and commit not to cause apps to violate Play Developer Policies; Ad SDKs must publish technical documentation for correct implementation to meet programme requirements; Developers offering eligibility-based discount subscriptions face new disclosure obligations from 27 January 2027 https://tos.linkflow.be/changes/cbcc0e6f023e/https://tos.linkflow.be/changes/cbcc0e6f023e/ Fri, 30 Oct 2026 00:00:00 +0000minorGoogle Play's developer-facing policy text now lists dated requirements: location button and a declaration for precise location, restricted contacts access, new declarations for manage-contacts and local network permissions, and a rule on AppFunctions not deceiving AI agents. Storage and accessibility API wording was rewritten, with an explicit ban on using the Accessibility API to bypass security, record call audio or power autonomous agents. Attempts to mislead Play reviewers are now expressly prohibited. https://tos.linkflow.be/changes/556a5280a32f/https://tos.linkflow.be/changes/556a5280a32f/ Fri, 30 Oct 2026 00:00:00 +0000notableThe page now covers www.xnxx.gold, operated by Bridgemaze Partners, LLC, instead of www.xnxx.com run by NKL Associates. This looks like a different, paid service. The new text adds a Premium Content clause requiring an account and a fee, and the opening plain-language summary is gone. The diff cuts off partway through section 6, so it cannot show whether the EU Digital Services Act, arbitration and liability sections were kept or dropped. Taken from you: Legal counterparty changed from NKL Associates to Bridgemaze Partners, LLC; Premium Content now requires an account and a fee; Your liability for unauthorized account use now ends once you notify the operator by email; the old text set no end point.; Separate privacy notice for users without an account is no longer referenced https://tos.linkflow.be/changes/935857706066/https://tos.linkflow.be/changes/935857706066/ Thu, 29 Oct 2026 00:00:00 +0000minorThe old EU Privacy Policy page included the full text of the EU Standard Contractual Clauses for transferring personal data to third countries, covering instructions, security, onward transfers, sub-processors, data subject rights, liability and governing law. The new version removes all of this text and adds nothing in its place. The diff does not show whether the clauses now live elsewhere or whether the actual transfer safeguards changed. Taken from you: Directly visible text of the data-transfer safeguards (SCCs) in the policy page; Readily readable commitments on liability, onward transfers and data-subject compensation in this document https://tos.linkflow.be/changes/76fc2a356ac8/https://tos.linkflow.be/changes/76fc2a356ac8/ Fri, 23 Oct 2026 00:00:00 +0000notableAI trainingThe privacy policy now says you may let services like Search or Gemini Apps access data from other Google services such as Photos, Gmail and Drive to personalize your experience. The promise not to show personalized ads based on Drive, Gmail or Photos content now has an exception if you make that data available to other Google services that support personalized ads. Ads may also be based on personalized content from Google services. Taken from you: Unconditional promise of no personalized ads based on Drive, Gmail or Photos content now applies only unless you share that data with other Google services; Personalized ads can now draw on personalized content from Google services, not just interests and activity https://tos.linkflow.be/changes/58f7056fded9/https://tos.linkflow.be/changes/58f7056fded9/ Sat, 17 Oct 2026 00:00:00 +0000notableAI trainingThe policy now says you may choose to let services like Search or Gemini Apps access data from other Google services such as Photos, Gmail and Drive for personalization. The earlier flat statement that personalized ads are not based on Drive, Gmail or Photos content now carries an exception: it applies unless you make that data available to other Google services that support personalized ads. A new section describes Personal Intelligence, with an example of Search using hotel booking details from an email. Taken from you: Absolute promise that Drive, Gmail and Photos content is not used for personalized ads now has an opt-in exception; Search or Gemini Apps can now also use data from Photos, Gmail and Drive to personalize your experience, including ads, if you allow it. https://tos.linkflow.be/changes/02c28e6cf15e/https://tos.linkflow.be/changes/02c28e6cf15e/ Fri, 16 Oct 2026 00:00:00 +0000notableThe terms add a new Prompt-to-Voice feature for creating synthetic voices from text prompts. Customers must not clone anyone's voice without consent, must disclose speech is AI-generated, and must not remove OpenAI's AI-origin indicators. OpenAI's indemnification does not cover Prompt-to-Voice or its output. Taken from you: No OpenAI indemnification for Prompt-to-Voice or its output; Must disclose generated speech as AI-generated and keep OpenAI's AI-origin indicators; Must require End Users to follow these Prompt-to-Voice requirements; Cannot reproduce anyone's voice without express consent and necessary rights https://tos.linkflow.be/changes/977078cef234/https://tos.linkflow.be/changes/977078cef234/ Mon, 12 Oct 2026 00:00:00 +0000notableThe signed-out data section now says preferences and ads may be based on your activity 'across devices', and adds a sentence that Google also collects and uses data not associated with your account. The legal-basis table adds wording on disclosing limited data to law enforcement to prevent, detect or investigate crimes, and on disclosing data to law enforcement to prevent an imminent threat to life. Regulator/researcher sharing and age verification were already in the old text, so those parts are not new. Taken from you: Signed-out ad and search personalization may now draw on your activity across devices, not just one browser or device; The legal-basis table now explicitly mentions disclosing limited data to law enforcement to prevent, detect or investigate crimes, and disclosing data to law enforcement to prevent an imminent threat to life. https://tos.linkflow.be/changes/519b0088eb08/https://tos.linkflow.be/changes/519b0088eb08/ Mon, 12 Oct 2026 00:00:00 +0000minorThe EU-copy privacy policy now includes an 'Additional Information for Brazilian Users' section naming Reddit, Inc. as controller and listing LGPD rights, international transfer safeguards and a DPO contact. A CCPA metrics disclosure link, a Brazilian contact address and a clause allowing email notice of material policy changes were also added. No existing user rights appear to be removed. Taken from you: Brazilian users' policy conflicts are resolved by this section, which prevails over the general policy; Personal data of Brazilian users is stated to be transferred to and stored in other countries, including the US https://tos.linkflow.be/changes/8e963f76b1d6/https://tos.linkflow.be/changes/8e963f76b1d6/ Mon, 12 Oct 2026 00:00:00 +0000notableRoblox renames content maturity 'labels' to 'ratings' and adds two tiers: 'Content May Vary' and '16+ Content'. Creators who have no age-restricted content can publish to age-checked 16+ users by answering only the first questionnaire question. Games with free-form user creation are now limited to age-checked users 16+. Social hangouts without private spaces move from the 18+ Restricted tier to the 16+ tier, which is a loosening. Inaccurate maturity information now exposes a game and account to moderation without the old 'repeatedly' qualifier. Taken from you: Games with free-form user creation are now limited to age-checked users 16+ https://tos.linkflow.be/changes/048137b68d05/https://tos.linkflow.be/changes/048137b68d05/ Mon, 12 Oct 2026 00:00:00 +0000notableThe EU legal-bases table now names law-enforcement disclosure under three grounds: crime prevention as a legitimate interest, an imminent threat to life as a vital interest, and government legal requests as a legal obligation. The table's sentence that Google's legal team reviews every request and pushes back on overly broad ones was replaced by a link to data disclosure policies; the key-terms section still carries that statement. The signed-out personalisation sentence now says it can draw on activity across devices. Taken from you: The legal-bases table no longer says the legal team reviews every government request and pushes back on overly broad ones; it now links to data disclosure policies. The same statement still appears in the key-terms section.; Explicit permission for disclosing data to law enforcement for crime prevention and investigation; Signed-out preferences and ad personalisation now stated to draw on activity across devices https://tos.linkflow.be/changes/0e2fd4920faf/https://tos.linkflow.be/changes/0e2fd4920faf/ Fri, 02 Oct 2026 00:00:00 +0000notableThe advertising controls section now says that removing or disabling cookies in your browser does not stop Google from using cookie-based information or other advertising technologies to personalize ads, unless you turn off personalized ads in ad settings. The retargeting explanation also now says Google may use other identifiers, such as your IP address or information you previously shared with a website, not just cookies. Taken from you: Clearing or blocking cookies no longer stops personalized ads; only the ads setting does; Retargeting ads may now use identifiers beyond cookies, such as IP address or info shared with a website https://tos.linkflow.be/changes/a38dbcf5563e/https://tos.linkflow.be/changes/a38dbcf5563e/ Fri, 02 Oct 2026 00:00:00 +0000minorThe changelog at the top of the policy now says Roblox added language on regional variation in access to certain features and information about data collection from researchers. The effective date moved to November 1, 2026, and the earlier note about personalized ads was removed. The diff shows only the summary notes, not the underlying policy text. Taken from you: Roblox now collects data from researchers, according to the update note, though details are not shown https://tos.linkflow.be/changes/f62b65f5a4a4/https://tos.linkflow.be/changes/f62b65f5a4a4/ Thu, 01 Oct 2026 00:00:00 +0000notableThe summary of changes now says Roblox acts as principal distributor and merchant of record, so purchases are from Roblox and not directly between Users and Creators. It also adds a right of withdrawal for consumers in the EEA. The old summary of changes (AI tools, ads, moderation, APIs) was replaced; the diff shows only the summary, not the underlying clauses. Taken from you: Direct transactions between Users and Creators are stated not to exist; purchases are treated as obtained from Roblox https://tos.linkflow.be/changes/3fd3141c3934/https://tos.linkflow.be/changes/3fd3141c3934/ Tue, 29 Sep 2026 00:00:00 +0000notableNew sections make users responsible for actions, shared content and transactions carried out by 'dots' and other agentic features on their behalf, including oversight and monitoring duties for purchases. A separate section adds Sign in with ChatGPT, where users agree to share authentication details and, where relevant, usage with third-party services. Taken from you: Responsibility for actions taken and content shared by dots/agentic features on your behalf; Duty to oversee tasks, set limits, and review actions and communications; Responsibility for transactions made on your behalf, including monitoring accounts and raising errors with your bank or payment provider; Agreement to share name, email, profile photo and relevant ChatGPT usage with services you connect via Sign in with ChatGPT; Shared information becomes subject to the third-party service's terms and policies https://tos.linkflow.be/changes/be5200362419/https://tos.linkflow.be/changes/be5200362419/ Wed, 23 Sep 2026 00:00:00 +0000minorThe detailed import fee rules (VAT-inclusive pricing, possible deposit at checkout, refund of any difference once carrier invoices arrive) were replaced by a short statement that import charges are shown at checkout and no extra payment is required afterwards. The no-extra-charge promise is kept, but the explicit deposit and refund mechanics and the EU threshold wording are gone. Taken from you: Explicit statement that prices in the EU are inclusive of VAT, duties, taxes and fees; Written refund commitment, with e-mail confirmation, if actual import fees are lower than the deposit; Detailed description of the import fee deposit and estimation process; Mention of the EU threshold value above which import fees apply https://tos.linkflow.be/changes/05523d23b2fc/https://tos.linkflow.be/changes/05523d23b2fc/ Mon, 21 Sep 2026 00:00:00 +0000minorA new sentence in the GPTs section says use of credit score services (connecting to and accessing credit scores, reports, monitoring and personalized insights) is also subject to separate Credit Score Terms. The diff does not show the content of those terms. Taken from you: Credit score features are governed by an additional, separate set of terms whose content is not shown https://tos.linkflow.be/changes/4cade9863fd0/https://tos.linkflow.be/changes/4cade9863fd0/ Thu, 10 Sep 2026 00:00:00 +0000minorA new section says OpenAI's financial plugins and ChatGPT for Financial Services, and their output, are informational only and not financial or investment advice. Data may be inaccurate, delayed or outdated, and users stay responsible for their decisions. Use is also subject to separate Financial Services Terms, including data partner terms and limits on redistribution. Taken from you: Users bear responsibility for decisions made using Financial Services output; Use of Financial Services is bound by separate Financial Services Terms and data partner restrictions on use and redistribution; Users must accept that data and output may be inaccurate, delayed or outdated https://tos.linkflow.be/changes/254880ed95fd/https://tos.linkflow.be/changes/254880ed95fd/ Thu, 10 Sep 2026 00:00:00 +0000majorFor users outside the EU, EFTA and UK, the terms add a binding arbitration fallback (AAA) if the Texas court clause fails, plus a jury trial waiver. Texas courts, Texas law and the class action waiver were already in the old version. Affiliates SpaceXAI, Cursor and SpaceX are now named in the dispute clauses, and users are responsible for autonomous actions taken on their behalf. EU/EFTA/UK users keep Irish courts and law, now with an explicit note that mandatory protections of their home country still apply. Taken from you: Users outside the EU/EFTA/UK can be forced into binding arbitration (American Arbitration Association) if the Texas court clause fails, with no injunctive relief and confidential proceedings; Right to a jury trial waived where law permits (the class action waiver already existed); The existing class action waiver against affiliates now explicitly names SpaceXAI, Cursor and SpaceX entities; Each party bears own arbitration costs, with fee-shifting for frivolous claims; State law claim deadline changes from two years to two years and one day (slightly longer); the one-year federal deadline is unchanged; Responsibility for features that perform autonomous actions on your behalf; SpaceXAI, Cursor and SpaceX entities are now expressly named among the affiliates who benefit from the dispute clauses https://tos.linkflow.be/changes/1c47dc0f8888/https://tos.linkflow.be/changes/1c47dc0f8888/ Thu, 03 Sep 2026 00:00:00 +0000minorShein now says it may collect a yes/no indicator of whether biometric authentication (fingerprint or face recognition) is enabled on your device, to detect fraud. It states it does not collect fingerprints, face images or other biometric data. It also expands an example of why data may be transferred outside the EEA. Taken from you: Shein may now collect whether biometric authentication is enabled on your device; This device security data is kept while your account is active plus a reasonable period afterwards https://tos.linkflow.be/changes/b7e7f33ad185/https://tos.linkflow.be/changes/b7e7f33ad185/ Wed, 26 Aug 2026 00:00:00 +0000majorFor users contracting with the Singapore entity, disputes must now go through a formal informal-resolution process before HKIAC arbitration, replacing a simple 30-day consultation. The notice requires documentary evidence and a sworn personal declaration, with a 60-day negotiation period and extra timelines for mass claims. A class action waiver, small-claims exception, severability clauses and a statutory-rights reservation are also added. Taken from you: Right to go to arbitration after a simple 30-day consultation; now need a detailed notice with order export and sworn declaration; Ability to bring class, collective or representative claims (class action waiver); Faster access to arbitration: 14-day review, up to 30 days to cure, 60-day negotiation before arbitration; Ability to use claim assignment or funding arrangements without disclosure; must declare them under oath; Coordinated mass claims (25+ via same firm) face extra delays and individual-review requirements; Class waiver survives even if the arbitration clause is found unenforceable https://tos.linkflow.be/changes/e2fb0e938c44/https://tos.linkflow.be/changes/e2fb0e938c44/ Tue, 25 Aug 2026 00:00:00 +0000notableAI trainingThe EU policy now covers ads on ChatGPT for Free and Go users. This includes collecting ad history and interests, using past chats and current chat context to personalise ads (with consent), and receiving data from advertisers. It adds legal-basis rows for personalised ads, generic ads and advertiser reporting, plus advertising controls in account settings. The existing table, the training purposes and the browser-data clause were already there. Taken from you: Free and Go users' ad views/engagement and interests are now collected; Past chats and current chat context may be used to select and personalise ads; Purchase and other data from advertisers and data partners may be received and used https://tos.linkflow.be/changes/5e804bcc1a7e/https://tos.linkflow.be/changes/5e804bcc1a7e/ Sun, 23 Aug 2026 00:00:00 +0000notableAI trainingThe updated notice states that Amazon uses machine learning and AI to enhance its services, including using data to develop or deploy its generative AI models, and points to a new Generative AI Development Disclosure. It also adds items on linking Amazon accounts to third-party businesses via Login with Amazon, ad interaction data from third-party sites and apps, and content received from third parties for advertising-related purposes. Taken from you: Data may be used to develop or deploy Amazon's generative AI models and services; Amazon collects information on how you interact with Amazon ads on third-party websites and apps; Amazon receives advertising-related information and identifiers from third parties to develop and improve its services; Using Login with Amazon or linking your account to a third-party business is now listed among the actions through which you give Amazon information https://tos.linkflow.be/changes/1340a29e7061/https://tos.linkflow.be/changes/1340a29e7061/ Sat, 22 Aug 2026 00:00:00 +0000minorAI trainingThe Facebook EU policy now lists in more detail what is collected from interactions with Meta's generative AI features: prompts, responses, feedback, data from connected third-party apps, and information used to personalize them. Much of this was already covered in general terms, such as content and messages exchanged with AI features and connected third-party apps. The transfers section also adds a statement that Meta Platforms, Inc. is certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks and relies on them for transfers to the U.S. Taken from you: The policy now also lists feedback you give to AI features, and the responses to that feedback, as information collected. https://tos.linkflow.be/changes/8c2e7fb44eaf/https://tos.linkflow.be/changes/8c2e7fb44eaf/ Fri, 21 Aug 2026 00:00:00 +0000notableEffective August 21, 2026, LinkedIn lists more data collected for identity verification (government ID details, redacted ID copy, phone number, alternative names) and for two-factor authentication. It adds a legitimate-interest basis to enforce a minimum age and protect under-16s, collecting an age-of-majority attestation and, for minors, date of birth. ID verification providers are added to the list of third-party service providers. Taken from you: More personal data collected for verification: year of birth, location, ID type, redacted ID copy with name and face portrait; Phone number and alternative names used for identity verification; Age-of-majority attestation, and date of birth if under the age of majority, collected for age enforcement; Data may be shared with newly listed ID verification providers https://tos.linkflow.be/changes/30743390d7ac/https://tos.linkflow.be/changes/30743390d7ac/ Fri, 21 Aug 2026 00:00:00 +0000majorThe terms now state that users agree to receive marketing emails, special offers and newsletters. Users also acknowledge that emails contain tracking pixels recording when opened, the device used and approximate location. A clause making users liable for a charge plus a $100 administrative fee for bad-faith reports was removed. Taken from you: Agreement to receive marketing communications, offers and newsletters; Consent to email open-tracking pixels recording open time, device and approximate location, used to measure engagement and personalize content https://tos.linkflow.be/changes/92d865f729e5/https://tos.linkflow.be/changes/92d865f729e5/ Sat, 15 Aug 2026 00:00:00 +0000majorDisputes about using Amazon services or products bought through Amazon must now go to binding arbitration (JAMS) instead of King County courts, with a jury trial waiver and class action waiver. Users must first complete a 60-day pre-arbitration dispute process, and mass arbitration filings are batched under special rules. Small claims court and some injunctive relief remain available. Taken from you: Right to sue in court for most disputes (the old terms already waived jury trials); Right to bring or join class or representative actions; Right to seek public injunctive relief in arbitration; Freedom to file immediately: must first complete a 60-day pre-arbitration dispute procedure; Ability to have courts decide whether the arbitration clause is enforceable (delegated to the arbitrator); Mass filings are batched and subject to funder disclosure requirements https://tos.linkflow.be/changes/b7bd42f5017d/https://tos.linkflow.be/changes/b7bd42f5017d/ Tue, 28 Jul 2026 00:00:00 +0000minorThe legal-disputes row now cites legal obligations plus legitimate interest as its basis and adds a retention rule: data is kept until the dispute and any appeals or reviews end. A new row says Shein uses the location of your IP address to direct you to the right local site and language and to estimate delivery time. Taken from you: IP-address location is now used to localise the site and estimate delivery; Data tied to legal disputes may be kept until all appeals and reviews conclude https://tos.linkflow.be/changes/fa5f12326965/https://tos.linkflow.be/changes/fa5f12326965/ Thu, 23 Jul 2026 00:00:00 +0000minorA new table row says the app set ID may be used for essential functions such as analytics and fraud prevention. It says not to use it for personalised ads or ad measurement. This reads as a restriction on how that identifier is used. https://tos.linkflow.be/changes/96cfc75ffc3c/https://tos.linkflow.be/changes/96cfc75ffc3c/ Thu, 22 Jan 2026 00:00:00 +0000minorThe old policy listed sharing your personal data with a buyer if PayPal sells business or assets. That bullet has been removed in the new version, and nothing was added in its place. The diff does not show whether such sharing is now prohibited or covered elsewhere.