Grubhub: Food Delivery

"We may collect internet usage information through a variety of tracking technologies, including cookies, web beacons (also known as pixels), embedded scripts, mobile SDKs, location-identifying technologies, and similar technology... and we may use third-party partners or service providers to assist with this effort, such as Google and Meta (e.g., via the Meta Pixel). Information we collect automatically about you or your device may be combined with other personal information we collect directly, and our third-party partners may combine this information with information collected from other devices, websites, or apps."

Grubhub deploys Meta Pixel, Google, and other third-party SDKs that combine user data across devices, websites, and apps to build cross-context profiles for advertising purposes.

"We may share internet usage information with ad networks and other advertising partners for the purpose of cross-context behavioral advertising. We may also share this information with other trusted partners... These trusted partners may use this information to support and market partnership benefits (including by communicating with you), as well as for their internal business purposes such as analytics and product improvement. Any such partner uses will be governed by the partners' respective privacy policies."

Grubhub shares user data broadly with ad networks, trusted partners, affiliates, and subsidiaries for advertising, analytics, and the partners' own business purposes, governed only by those partners' own policies.

"We may collect information about your approximate location automatically when you use the Platform. For example, your IP address tells us roughly where you are. We may also collect information about your precise location if you allow us to access your device's location. We may use the Google Maps API to gather geolocation data. Google uses various technologies to determine your location, including IP address, GPS and other sensors that may, for example, provide Google with information on nearby devices, WiFi access points and cell towers."

Grubhub collects both approximate (IP-based) and precise (GPS) location data, and uses the Google Maps API which leverages WiFi access points, cell towers, and nearby device information to determine location.

"Grubhub retains identifiers for as long as you have an account with Grubhub, and for such additional period as Grubhub determines is necessary to comply with its legal obligations and defend against legal claims."

Every category of personal data is retained for the entire life of the account plus an undefined additional period determined solely at Grubhub's discretion, with no clear deletion timeline.

"We may update this Privacy Policy from time to time. When we make changes to this Privacy Policy, we will change the effective date at the beginning of this Privacy Policy... If you do not cancel your Account before the date the revised Privacy Policy becomes effective, your continued access to or use of the Platform and/or Services will be subject to the revised Privacy Policy."

Grubhub can change its privacy policy at any time and treats continued use as acceptance of the new terms, with no guarantee of direct notice beyond updating the effective date.

"Identifiers can also include numbers assigned to you like your IP address or a unique Grubhub account number and information about your device and its software like your browser type, device type/model/manufacturer, operating system, and other similar information... this information can include the site from which you came to our site, the site to which you are going when you leave our site, the pages you visit on the Platform, the links you click on the Platform, whether you open our emails or click the links we send, page scrolling, and where you click or move your mouse on our website."

Grubhub collects extensive device metadata and detailed behavioral data including mouse movements, scroll position, and click tracking that goes beyond what is needed for a food delivery service.

"In certain circumstances, we may decline such a request, such as when we are unable to verify your identity, or when we are unable to delete your information for legal or regulatory reasons. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request."

Grubhub reserves the right to decline deletion requests and may retain data even after a deletion request for vaguely defined 'legal or regulatory reasons,' with no self-service guarantee of complete deletion.