"AWS presents a high-risk privacy profile (68/100) comparable to major ad-supported platforms, driven by extensive collection of sensitive data including biometrics and government IDs, broad sharing with advertising partners and third-party service providers, and cross-site behavioral tracking enabled by default. Critical concerns include indefinite data retention after account closure, opaque third-party sharing practices, and limited user control mechanisms—essential cookies cannot be disabled and cookie preferences reset automatically, requiring repeated opt-outs."
aws Privacy Concerns & Scorecard
AWS collects extensive sensitive data including biometric information (voice, appearance, image, video), government-issued IDs, tax IDs, credit history, precise geolocation, and protected classification characteristics (age, race, gender, gender identity). This represents one of the broadest sensitive data collection practices.
AWS shares personal information broadly with advertising partners, AWS Marketplace sellers, service providers, and third-party content providers including payment processors, analytics providers, and recruitment services. Hashed email addresses and cookies are shared with advertising partners for targeted advertising purposes.
AWS enables cross-context behavioral advertising by default using cookies and hashed identifiers, with cross-site retargeting on third-party websites. Users must actively opt out, and preferences reset when browser cookies are cleared.
Essential cookies cannot be deactivated and users must actively decline each cookie category separately. Cookie preferences reset when browser cookies are cleared, requiring users to repeatedly opt out of tracking.
AWS retains personal information indefinitely for vague purposes including 'as long as required to enable continued use' and 'as required by law'. Data is retained after account closure for fraud prevention, security, and dispute resolution with no clear deletion timeline.
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, identity verification, billing, tax compliance, and fraud prevention
Customer support, billing notifications, marketing communications, and account recovery
Payment processing, billing, credit risk assessment, and fraud prevention
Customer support quality assurance, identity verification, fraud prevention, and service improvement
Service delivery, fraud prevention, security, and analytics
Service delivery, security, fraud prevention, and analytics
Service improvement, analytics, fraud detection, and targeted advertising
Billing, customer support, service improvement, and fraud prevention
Personalization, service improvement, and targeted marketing
Account categorization, service recommendation, recruitment activities, and business development
Legal compliance, anti-discrimination monitoring, and service customization
Account validation, service recommendations, and recruitment activities
Account security, access control, and fraud prevention
Marketplace operations, affiliate program administration, and partner management
Cross-Platform Tracking
AWS uses cookies and hashed identifiers to track your behavior across third-party websites and services for cross-context behavioral advertising and retargeting purposes. This cross-site tracking is enabled by default and includes monitoring pages you visit, links you click, and content you download on other websites.
Tracking Methods:
Advertising Cookies
Persistent cookies and similar technologies placed by AWS and advertising partners to track user behavior across third-party websites and services for targeted advertising and retargeting purposes
Performance/Analytics Cookies
Cookies used to measure website performance and user interaction within AWS properties; third parties cannot use these for their own purposes but can set functional and advertising cookies
Functional Cookies
Cookies that enable AWS website functionality and remember user preferences; can be set by both AWS and third-party service providers
Hashed Email and Contact Information
Hashed versions of user email addresses and contact information shared with advertising partners to enable cross-context behavioral advertising without directly identifying individuals
Device Fingerprinting and Unique Identifiers
Unique codes derived from device characteristics and contact information to track users across devices and enable cross-device advertising targeting
IP Address and Device Location Tracking
IP address logging and device location data collection used to determine user location, track usage patterns, and enable location-based advertising
Pixel Tags and Web Beacons
Tracking pixels embedded in emails and web pages to monitor email opens, link clicks, and web page interactions across third-party websites
Third-Party Embedded Content
Third-party content (e.g., Marketo, Salesforce integrations) embedded in AWS properties that can set their own cookies and track user behavior independently
AI & Data Training
aws does not train AI on your content
Based on their public policy, your content is not used to train AI models.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed aws
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.