Unpacking

"We may also share your personal information with the following: Relevant third party provider, where our services use third party advertising, plugins or content, subject to your privacy choices and settings, and our ToU. Merchants, business partners, or advertisers where you consented and chose to participate in offers, contests, or other activities. third party Processors (such as analytic providers; data centers; etc.), located anywhere in the world, subject to the requirements and limitations."

Personal information is shared with a broad range of third parties including advertisers, merchants, analytics providers, and data centers worldwide, with vague limitations on the scope of sharing.

"Advertising Identifiers: A user-resettable identification number for advertising associated with a device (e.g., iOS uses the Identifier for Advertising (IDFA) and Android uses Google Advertising ID). ... Engagement Data: Information about (i) your visits to, and interaction and engagement with the services, content and ads on third party websites, applications, platforms and other media channels ("Channels"), and (ii) your interaction with emails including the content and ads therein."

Humble Bundle collects advertising identifiers (IDFA, Google Ad ID) and tracks user engagement across third-party websites, apps, and media channels, enabling cross-service profiling and tracking.

"Location Information: We collect your IP address from which we can derive imprecise location information, for example, at the city or zip code level, of a user's computer or device. We may also have this type of location information if you provide it to us during sign up or in your profile, project page, or contributions."

Humble Bundle derives location data from IP addresses and collects user-provided location information, used for advertising and audience engagement purposes among other broad processing goals.

"For the life of the account and a reasonable and legally compliant time thereafter. ... We may retain and use copies of your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements."

Data is retained for the life of the account plus an undefined 'reasonable' period afterward, with no specific deletion timeline. Even after deletion requests, copies may be retained indefinitely for legal and dispute purposes.

"This policy may be amended or updated from time to time at our discretion. Any updates will be effective at the time of publication, unless specified otherwise. Your continued use of our services after the publication of a policy update constitutes your consent to the changes."

Humble Bundle can change the privacy policy at its discretion, and changes take effect immediately upon publication. Continued use is treated as consent to the new terms, giving users no meaningful ability to reject changes.

"Right to Delete/Erase: You can request us to delete all the information we have collected about you. It is important to note that by exercising your right to deletion you may lose access to your account and any purchases, points or features associated with it. ... We may retain and use copies of your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements."

Exercising the right to delete data can result in loss of all purchases and account features, creating a significant disincentive. Additionally, Humble Bundle reserves the right to retain copies of data even after a deletion request.

"Device Information and Device ID: Device ID, which is a distinctive number associated with a smartphone or similar handheld device. As well as, device information, including Device type, operating system and software information, and settings. ... Advertising Identifiers: A user-resettable identification number for advertising associated with a device (e.g., iOS uses the Identifier for Advertising (IDFA) and Android uses Google Advertising ID)."

Humble Bundle collects persistent device identifiers, OS details, software settings, and advertising IDs from user devices, used for purposes including advertising and audience engagement beyond core storefront functionality.