Kroger

"We may share with or make available personal information to AdTech companies. We may also use purchased-based advertising to show you advertisements and offers that are more relevant to you on other websites, mobile apps, and digital channels. Interest based advertising occurs when advertisements are displayed to you based on information collected from your online interactions over time and across multiple websites that you visit, or across multiple devices or online services that you may use."

Kroger engages in cross-context behavioral advertising, tracking users across multiple websites, devices, and services, and shares data with identity resolution providers to build unified profiles across platforms.

"We may use GPS (Global Positioning Systems), beacons, or other location identifying technologies to locate your device for various notified purposes, such as having your order ready for pickup when you arrive at our store or to serve you timely advertisements. If you have opted in to location-based services in our mobile app, we may show marketing-related push notifications when you are in one of our stores."

Kroger collects precise geolocation data using GPS and in-store beacons, and uses it not only for order fulfillment but also for targeted advertising and marketing push notifications.

"We may share your information with service providers that we engage to provide services to us to support our business operations. AdTech Companies: We may share with or make available personal information to AdTech companies. Third Parties: Where we have the legal right, we may share or otherwise make your information available to third parties such as payment providers and marketing vendors."

Kroger shares personal data with a broad ecosystem of third parties including AdTech vendors, social networks, technology/SaaS providers, analytics providers, identity resolution providers, data enrichment providers, and marketing vendors.

"We may use technologies that monitor and record your experience and interactions with our websites and mobile apps, such as the features you engage with, how you navigate our websites and mobile apps, your keystrokes, cursor movements, scrolling activity, and click-related activity. These technologies may also collect and analyze information from your device, such as your operating system, plug-ins, and system fonts."

Kroger monitors keystrokes, cursor movements, scrolling behavior, and collects device fingerprinting data including system fonts and plug-ins — far beyond what's needed for a grocery shopping experience.

"This notice is subject to change at our discretion. We will indicate changes to the notice by updating the 'Last Updated' date at the beginning of the notice. Your continued use of our websites or our other services after any update to this notice will constitute your acceptance of our changes."

Kroger reserves the right to change the privacy notice at its sole discretion, and treats continued use of any of their services as acceptance of those changes without requiring affirmative consent.

"Except as otherwise permitted or required by applicable law or regulation, we will keep your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected or for purposes that are compatible with the purposes that we have previously disclosed. For example: We keep personal information associated with your loyalty card account for as long as you remain a customer."

Kroger's retention policy is vague — 'as long as reasonably necessary' with no specific timelines for most data categories. Loyalty data is retained indefinitely as long as someone remains a customer, and retention can extend to 'compatible purposes' not originally disclosed.

"Unless you cancel, by default (and with prior notice to the extent required by applicable law), your boost membership will automatically renew, and the applicable membership fee will be automatically charged to you at the time of renewal with a credit or debit card on file. Your membership will renew on your set renewal date. To avoid charges, you will need to cancel your membership prior to that date."

Kroger's Boost membership auto-renews by default and charges the card on file automatically, requiring users to proactively cancel before the renewal date to avoid being charged.

"If a loyalty program member chooses to delete the personal data associated with the loyalty program and we can verify your eligibility to make the request, we will delete your contact information including your physical address and email. This will make it impossible for us to provide many services to you including delivery, email communications and personalized offers, content and experiences. You will continue to receive Fuel Point benefits for as long as you remain a member of the program."

When a loyalty member requests deletion, Kroger only deletes contact information — not purchase history, inferences, or other collected data — and frames the partial deletion as a loss of services to discourage the request.