MLB

"We allow and use select Service Providers and/or Other Companies that may act as third parties as defined under applicable data privacy laws, such as those who deliver advertisements, content, or social networking or which provide other services associated with the MLB Properties, to collect data and/or serve ads. We may also make available certain data you have given to us (e.g., IP address) or that we have collected through third parties or publicly available means to third parties engaged in targeting advertisements."

MLB shares user data broadly with network advertisers, social networks, LiveRamp, Google Analytics, and numerous other third parties who can collect data directly from users via cookies, web beacons, and similar technologies embedded in MLB properties.

"If you enable location services for our Applications, we may collect location data (e.g., zip code) periodically as you use or leave open our Applications. We use such location information for internal purposes and to improve your MLB Property experience. Location data is sold or shared with advertising vendors and advertisers."

MLB collects location data periodically while apps are in use or simply left open, and this location data — including precise geolocation — is shared with advertising vendors and advertisers for ad targeting.

"The personal information we collect may include, but is not limited to: Contacts (as stored in your wireless device), Device data, Usage data, Voice recordings, Audiovisual recordings. When you use certain MLB Properties, we or our Service Provider may collect your unique Device ID. If you elect to participate in certain programs, the MLB Entities may perform a scan or collect imagery of your physical characteristics to create a unique identifier associated with you based on biometric identifiers."

MLB accesses contacts stored on devices, collects unique device IDs, biometric information, and audiovisual recordings — going well beyond what a baseball entertainment app would typically require.

"When you use the MLB Properties, we may disclose information that we may collect from you, such as your email (in hashed form), IP address or information about your browser or operating system, with our partner/service provider, LiveRamp Inc. LiveRamp may use MLB's first party cookie on your browser to match your disclosed information to LiveRamp's information in order to provide MLB with a pseudonymous identifier MLB uses in certain real time bidding digital advertising transactions. These Other Companies may in turn link further demographic or interest-based information to your browser."

MLB partners with LiveRamp to match user data across contexts using hashed emails and device identifiers, enabling cross-service tracking and real-time bidding that links user activity across the web.

"We retain your personal information for as long as reasonably necessary and proportionate to achieve the purposes and uses set out in this Privacy Policy, as authorized by law, and to meet legal, taxation, accounting, risk management or business requirements. These retention periods may be extended where circumstances so require or until a particular query, investigation or dispute is fully resolved."

MLB provides no specific retention timelines and reserves the right to extend retention periods indefinitely based on vague criteria like 'risk management or business requirements.'

"If we make an important change to this Privacy Policy, we will post a notification and link within the MLB Properties so that you may review the updated Privacy Policy."

MLB can change the privacy policy at any time and only commits to posting a notification on their properties — there's no requirement for direct notice to users or consent to material changes.

"If you want to review or revise other personal information you have provided to us, or to close your account(s) and have us delete the applicable account personal information (except what is needed for record-keeping purposes) call Customer Service at 866-244-2291 (within the United States) or 1-315-203-6761 (outside the United States). Requests to Delete Personal Information — Received: 368, Complied with (in whole or in part): 71, Denied: 297."

Account closure and deletion of non-registration data requires a phone call rather than self-service, and MLB's own metrics show they denied 81% of deletion requests — complying with only 71 out of 368.