Netflix

"We may collect advertising information about you from other sources to support Advertisements, including the following (collectively referred to as 'Advertising Companies'): Advertisers that run Advertisements on Netflix ('Advertisers') may provide us with unique identifiers (for example, cookies or resettable device identifiers), demographic information and other information (such as information about your likely interests they have collected or inferred based on your activities online) in order to deliver Advertisements."

Netflix shares data with and receives data from a broad ecosystem of partners, service providers, Netflix marketing providers, and advertising companies, creating extensive third-party data flows.

"Netflix uses hashed identifiers and resettable device identifiers to display marketing for our service or Netflix content on third party services, to support Advertisements (including delivering Advertisements to you), and for analytics and optimization purposes. These technologies enable Netflix Marketing Providers to collect personal information (such as the pages you visit and device and network information) when you use our services, and Netflix Marketing Providers may also collect information about your online activities over time across different websites."

Netflix and its marketing providers track users across websites and services using cookies, hashed identifiers, resettable device identifiers, and pixel tags, building cross-service profiles for marketing and advertising.

"We collect information about your computer or other Netflix capable devices you might use to access our service (such as smart TVs, mobile devices, set top boxes, gaming systems, and other streaming media devices), your network, and network devices. The information includes: device IDs or other unique identifiers, including for your network devices (such as your router), and devices that are Netflix capable on your network."

Netflix collects identifiers not just for your device but for other devices on your network (like your router and other Netflix-capable devices), going beyond what's needed for core streaming functionality.

"IP addresses (which can be used to tell us the general location of your device, such as your city, state/province, and postal code)... Service Providers such as those that help us determine a general geographic location based on your IP address in order to customize our service and for other uses consistent with this Privacy Statement. For online multiplayer games, we may use the general location of your device (such as your city, state/province, or country) to match you with other players."

Netflix uses IP-based geolocation to determine your city, state, and postal code, and shares this with service providers and uses it across multiple purposes beyond basic content delivery.

"We may retain personal information as required or permitted by applicable laws and regulations, including to honor your choices, for our billing or records purposes, and as otherwise necessary to fulfill the purposes described in this Privacy Statement. Specifically, we retain personal information for as long as necessary to provide our service; to administer and operate our business; to research, analyze, and improve our services; to send marketing and informational messages; to support Advertisements; for safety, security, and fraud prevention; and to comply with law and enforce the Netflix Terms of Use."

Netflix's retention policy is extremely broad and open-ended, listing nearly every purpose in the privacy statement as a reason to retain data, with no specific timelines for deletion.

"We will update this Privacy Statement from time to time in response to changing legal, regulatory, or operational requirements. We will provide notice of any such changes (including when they will take effect) as required by law. Your continued use of the Netflix service after any such updates take effect will constitute acknowledgement and (as applicable) acceptance of those changes."

Netflix can change its privacy statement unilaterally, and continued use of the service is treated as acceptance of the new terms, with the only alternative being account cancellation.