"Chase's privacy practices present high risk due to aggressive collection of sensitive financial and identity data combined with extensive cross-site behavioral tracking and advertising. The company shares customer data including financial account information with advertising networks and third parties for behavioral targeting, operates tracking technologies (including Flash cookies) users cannot easily disable, and retains data retention policies that are not transparently disclosed. While opt-out mechanisms exist, they are cumbersome and device/browser-specific, and the policy reserves broad rights to unilateral changes with minimal notice."
chase Privacy Concerns & Scorecard
Chase engages in aggressive cross-site behavioral tracking using online behavioral advertising (OBA) to track web-browsing activities across non-affiliated websites over time. Uses multiple tracking technologies including cookies, web beacons, local shared objects (Flash cookies), and clear GIFs.
Chase shares data with advertising networks and behavioral tracking companies for online behavioral advertising purposes. Data is shared with third parties for co-branded services, corporate transactions, and explicitly 'other companies for advertising and tracking purposes.'
Chase collects extensive sensitive financial and identity data including payment card information, tax identification numbers, driver's license numbers, and precise geolocation information on mobile devices. Additionally collects behavioral data including web-browsing activities, search terms, and navigation patterns across non-affiliated websites.
Opt-out mechanisms for behavioral advertising are browser and device-specific, requiring users to separately opt out on each device and each browser. Even after opt-out, users still receive advertisements, just not behaviorally targeted ones.
Privacy policy does not specify data retention periods, leaving users uncertain about how long their sensitive financial and behavioral data is retained.
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, verification, legal compliance, and fraud prevention
Account servicing, transaction processing, fraud detection, and advertising targeting
Service delivery, fraud prevention, and behavioral profiling for advertising
Device fingerprinting, cross-device tracking, service optimization, and advertising delivery
Online behavioral advertising, marketing campaign performance monitoring, and user profiling
Advertising segmentation and targeting
Cross-Platform Tracking
Chase tracks users across non-affiliated websites over time through online behavioral advertising, combining web-browsing activities, search terms, and navigation patterns collected via cookies, web beacons, and Flash cookies. Information is linked across multiple platforms and services, and data is combined from multiple online and offline sources to build comprehensive user profiles for advertising purposes.
Tracking Methods:
Cookies
Persistent cookies used to track web-browsing activities across non-affiliated websites and support online behavioral advertising
Web Beacons (Clear GIFs)
Tracking pixels and clear GIFs embedded in emails and web pages to monitor email response data and user engagement
Local Shared Objects (Flash Cookies)
Flash cookies that persist across browser clearing and are not easily managed through standard browser settings, used for behavioral advertising
Device Fingerprinting
Unique identifiers and device settings collected to identify and track users across devices and browsers
AI & Data Training
chase does not train AI on your content
Based on their public policy, your content is not used to train AI models.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed chase
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.