MLB

"We allow and use select Service Providers and/or Other Companies that may act as third parties as defined under applicable data privacy laws, such as those who deliver advertisements, content, or social networking or which provide other services associated with the MLB Properties, to collect data and/or serve ads. We may also make available certain data you have given to us (e.g., IP address) or that we have collected through third parties or publicly available means to third parties engaged in targeting advertisements."

MLB allows third-party companies to directly collect data from users on MLB properties via cookies, web beacons, and similar technologies, and also proactively shares user data with advertising networks, social networks like Facebook and LinkedIn, and LiveRamp for cross-platform ad targeting.

"When you use the MLB Properties, we may disclose information that we may collect from you, such as your email (in hashed form), IP address or information about your browser or operating system, with our partner/service provider, LiveRamp Inc. LiveRamp may use MLB's first party cookie on your browser to match your disclosed information to LiveRamp's information in order to provide MLB with a pseudonymous identifier MLB uses in certain real time bidding digital advertising transactions. These Other Companies may in turn link further demographic or interest-based information to your browser."

MLB shares hashed emails and device data with LiveRamp, which matches users across websites and platforms to build unified advertising profiles and enable real-time bidding, constituting extensive cross-service tracking.

"If you enable location services for our Applications, we may collect location data (e.g., zip code) periodically as you use or leave open our Applications. We use such location information for internal purposes and to improve your MLB Property experience. Location data is shared with advertising vendors and advertisers as third parties."

MLB collects location data periodically while the app is in use or simply left open, and shares precise geolocation with advertising vendors, going beyond what's needed for core baseball content delivery.

"The personal information we collect may include, but is not limited to: Contacts (as stored in your wireless device), Device data, Voice recordings, Audiovisual recordings. When you use our Games, we may solicit your permission to access your contacts list (e.g., address book) so you can be matched with individuals from your contacts list who participate in our Games. The MLB Entities and/or their Service Provider(s) may perform a scan or collect imagery of your physical characteristics to create a unique identifier associated with you based on biometric identifiers."

MLB collects contacts from your device, unique device IDs, biometric identifiers, AR camera data, and audio/visual recordings — a broad scope of device data collection that extends well beyond core baseball functionality.

"If we make an important change to this Privacy Policy, we will post a notification and link within the MLB Properties so that you may review the updated Privacy Policy."

MLB can change its privacy policy at any time and merely posts a notification after the fact, with no requirement for user consent or meaningful advance notice before changes take effect.

"We retain your personal information for as long as reasonably necessary and proportionate to achieve the purposes and uses set out in this Privacy Policy, as authorized by law, and to meet legal, taxation, accounting, risk management or business requirements. These retention periods may be extended where circumstances so require or until a particular query, investigation or dispute is fully resolved."

MLB provides no specific retention timelines for any data category, using vague criteria like 'reasonably necessary' and reserving the right to extend retention indefinitely for investigations or disputes.

"If you want to review or revise other personal information you have provided to us, or to close your account(s) and have us delete the applicable account personal information (except what is needed for record-keeping purposes) call Customer Service at 866-244-2291 (within the United States) or 1-315-203-6761 (outside the United States). Requests to Delete Personal Information — Received: 368, Complied with (in whole or in part): 71, Denied: 297."

Account closure and deletion of non-registration data requires calling customer service rather than offering a self-service option. MLB's own metrics show they denied 81% of deletion requests, suggesting deletion is difficult to achieve in practice.