"Link (by Stripe) presents a critical privacy risk score of 78/100 due to extensive collection of highly sensitive financial and identity data (bank accounts, SSNs, biometric data, credit reports) combined with broad sharing to advertising networks, financial institutions, and government entities with minimal user control. Data retention is indefinite for compliance purposes, opt-outs are severely limited (cannot restrict fraud prevention or affiliate sharing), and biometric data is collected and shared without clear deletion timelines. The 30-day delay before new customers can opt out and indefinite post-relationship data sharing further compound these risks."
link Privacy Concerns & Scorecard
Broad sharing of sensitive data with advertising partners, social networks, financial institutions, and unspecified third parties for marketing and fraud detection
Biometric data collection through facial recognition (selfies) for identity verification with broad retention and sharing practices
Severely limited opt-out options with inability to restrict sharing for core business purposes, fraud prevention, and affiliate transactions
Interest-based advertising and behavioral tracking using transaction data and personal information shared with advertising networks and social media platforms
Broad use of 'legitimate interests' legal basis for processing without explicit user consent requirement or clear notification
Indefinite data retention for compliance, fraud prevention, and financial reporting purposes with no clear deletion timeline
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Identity verification, compliance with anti-fraud and AML regulations, tax reporting, and verification of user eligibility
Processing payments, fraud detection, creditworthiness assessment, lending decisions, and financial reporting
Account management, payment processing, shipping, order fulfillment, and verification
Identity verification, fraud prevention, and compliance with AML/KYC regulations
Payment processing, order fulfillment, fraud detection, service eligibility assessment, and advertising eligibility evaluation
Fraud detection, security, service optimization, and behavioral analysis
Fraud prevention, service improvement, quality assurance, and AI model training for fraud detection
AML/KYC compliance, fraud prevention, identity verification, and account security
Service eligibility assessment, fraud prevention, and business analytics
Payment processing, fraud detection, order fulfillment, and service localization
Advertising, marketing, and user eligibility assessment
Cross-Platform Tracking
Link tracks your online activity across third-party websites and sites, collects mouse activity indicators for fraud detection, uses advertising cookies and pixels across the web, and shares data with social networks and analytics providers who track your behavior across multiple platforms. Your Stripe account activity is also shared with advertising partners to measure ad performance across their networks.
Tracking Methods:
Cookies (Including Advertising Cookies)
Stripe uses first-party and third-party cookies including advertising cookies to track user engagement, measure ad efficacy, personalize content, and enable interest-based advertising across devices and websites.
Tracking Pixels & Web Tags
Advertising pixels placed on third-party websites and social networks to track user behavior, measure conversion, and enable retargeting campaigns. Data shared with advertising partners and social networks for cross-site behavioral tracking.
Device Fingerprinting
Collection of device and browser information to create a unique fingerprint enabling tracking across multiple devices and sessions for fraud detection and personalization purposes.
Financial Connections (Account Linking)
Periodic automatic collection of bank account data when Financial Connections is active. Login credentials shared with financial partners and payment processors for account verification and transaction monitoring.
Analytics & Inference Analysis
Analytics providers track user interactions, engagement metrics, and derive inferences from transaction data. Results shared with service providers, advertising partners, and analytics platforms for behavioral profiling.
AI & Data Training
link uses your content to train AI
Below is what's used and how (if at all) you can object.
What Content Is Used
Transaction History
Transaction data and inferred patterns used for AI model training to improve fraud detection
Behavioral and Usage Patterns
User behavioral patterns, online activity, and inferred information derived through inference analysis for AI model training
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed link
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.