"Legiit presents a critical privacy risk score of 82/100, placing it in the same category as Facebook/TikTok due to aggressive data collection (100+ tracking cookies), broad third-party sharing with ad networks and analytics platforms, and extraordinary cookie retention periods (up to 37 years). The service collects extensive behavioral, financial, and location data; shares it with Facebook, TikTok, LinkedIn, and Rubicon Project for advertising purposes; and retains indefinite data on closed accounts despite vague deletion policies. Users have limited practical control due to service degradation if tracking cookies are blocked, policy changes enforced through continued use, and no transparent mechanism to prevent affiliate or HP2 tracking."
legiit Privacy Concerns & Scorecard
Extensive collection of sensitive and behavioral data including location, financial information (credit card, billing), biometric-adjacent data (photos), and cross-site behavioral tracking through 100+ cookies and multiple tracking pixels
Data shared with advertising networks (Facebook, TikTok, LinkedIn, Rubicon Project), analytics providers (Google Analytics, Matomo, Hotjar, Dynatrace), and third parties for direct marketing purposes without explicit opt-in requirement
Extraordinarily long cookie retention periods (20-37+ years) combined with indefinite retention of closed account data and vague retention policies for operational records, enabling persistent tracking and identification across decades
Pervasive cross-site behavioral tracking through 100+ cookies with no descriptions provided, including Facebook pixel (ID: 291265201398169), Twitter conversion tracking, and affiliate tracking cookies that enable persistent user identification across merchant networks
Policy changes can occur at any time with only notification requirement; continued use constitutes acceptance. Deleted User Generated Content persists in cached/archived pages. Limited mechanisms to opt out of all tracking despite cookie consent interface
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, authentication, user identification, and profile management
Payment processing, fund withdrawal, and transaction management
Content localization, analytics, advertising targeting, and security/fraud prevention
Application performance monitoring, analytics, compatibility testing, and security
Service optimization, analytics, performance measurement, and personalized content
Targeted advertising, campaign measurement, affiliate program participation, and personalization
Service provision, community functionality, reputation management, and portfolio display
Customer support, service personalization, and communication preferences management
Cross-Platform Tracking
Legiit uses Facebook pixel (ID: 291265201398169), TikTok, LinkedIn, and Twitter tracking to monitor your behavior across the web for retargeting and behavioral profiling. Affiliate tracking cookies enable profiling across merchant networks. Google Analytics, Matomo, and Hotjar simultaneously track your activity on Legiit and share IP address and browsing behavior with US-based servers and third-party platforms.
Tracking Methods:
Facebook Pixel
Facebook pixel (ID: 291265201398169) tracks user actions across Legiit and other websites for conversion measurement and audience building for retargeting ads
Twitter/X Conversion Tracking
Conversion tracking pixel that monitors user interactions for Twitter advertising purposes across the web
TikTok Tracking Cookies
Cookies (_ttp, _tt_enable_cookie) set by TikTok to track user behavior across sites for behavioral profiling and retargeting
LinkedIn Tracking Cookies
Cookies (UserMatchHistory, bcookie) that enable LinkedIn to build behavioral profiles and match users across the web for advertising
Google Analytics
Analytics tracking that collects IP address, user behavior, page views, and session data; transmits to US Google servers
Matomo Analytics
Alternative analytics platform tracking user behavior, traffic patterns, and site usage
Hotjar Session Recording
HP2 cookies that enable session recording and heatmap analysis of user interactions on Legiit
Affiliate Tracking Cookies
Cookies (affiliate, affiliate_type, affiliate_service_id, affiliateUserId) that track user referrals across affiliate networks for commission attribution and behavioral profiling
Rubicon Project Ad Cookies
Advertising exchange cookie (c cookie) retained for 20 years enabling persistent behavioral profiling and cross-site ad targeting
Google Tag Manager
Container for deploying tracking tags (_gcl_au cookie) that manage Google's cross-site advertising tracking
Clicky Analytics
Web analytics platform tracking real-time visitor behavior and user interactions
Cloudflare/JetPack Tracking
Content delivery and performance optimization tracking user connections and site performance
AI & Data Training
legiit does not train AI on your content
Based on their public policy, your content is not used to train AI models.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed legiit
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.