Disney+

"Location information, including precise or approximate location information provided by a mobile or other device interacting with one of our sites, applications, or physical properties (including through beacon technologies), or associated with your IP address or other online or device identifier, where we are permitted by law to process this information."

Disney collects both precise and approximate location data through multiple methods including GPS, IP address, device identifiers, and physical beacon technologies at their properties.

"Other members of The Walt Disney Family of Companies may access your information where they perform services on behalf of the data controllers (as data processors) and, unless prohibited under applicable law, for use on their own behalf (as data controllers) for the purposes described in this policy. When you use the Hulu service, Hulu may share information with its business partners that help offer the Hulu service, including for example, its content programmers, distributors and device partners, and corporate owners."

Data is shared across dozens of Disney subsidiary brands (each acting as independent data controllers) and with Hulu's business partners, content programmers, distributors, and device partners — a very broad sharing network.

"We collect information through a variety of technologies, such as cookies, Flash cookies, pixels, tags, software development kits, application program interfaces, and Web beacons, including when you visit our sites and applications or use our applications on third-party sites or platforms using one or more devices, whether or not you are logged in or registered."

Disney tracks users across its own sites, third-party platforms, and multiple devices using a wide array of tracking technologies, regardless of login status — enabling comprehensive cross-service profiling.

"Usage, viewing, technical, and device data when you visit our sites, use our applications on third-party sites or platforms, or open emails we send, or connect with our wireless Internet access services and other similar technologies, including your browser or device type, unique device identifier, and IP address."

Disney collects extensive device-level data including unique device identifiers, browser fingerprinting data, and tracks email opens and WiFi connections — going beyond what's needed for core service delivery.

"We will retain your personal information for the length of time needed to fulfill the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law."

The retention policy provides no concrete deletion timeline and allows indefinite retention as long as Disney deems it necessary for its broad stated purposes or as 'permitted by law.'

"From time to time, we may change this privacy policy to accommodate new technologies, industry practices, regulatory requirements or for other purposes. We will provide notice to you if these changes are material and, where required by applicable law, we will obtain your consent. Notice may be by email to you at the last email address you provided us, by posting notice of such changes on our sites and applications, or by other means, consistent with applicable law."

Disney reserves the right to change its privacy policy unilaterally, only obtaining consent 'where required by applicable law' — meaning in most jurisdictions, simply posting a notice on their website is sufficient.