BACK TO HOME
square

square

General Servicesquare.com

Privacy Conclusion

"Square implements sophisticated multi-destination tracking and data collection through a Customer Data Platform, automatically sharing user data with Google Analytics, OneTrust, and unspecified martech vendors. While opt-out mechanisms exist through tracking subscriptions and OneTrust cookie management, the lack of a complete privacy policy makes it impossible to verify data retention practices, breach notification procedures, or comprehensive user rights. The automatic collection of behavioral data (page interactions, events, user identification) combined with third-party sharing without explicit consent visibility positions Square in the moderate-to-high risk category comparable to Netflix/Spotify."

Risk Score
58
ELEVATED

Take Action

6 Privacy Improvements Available

View Actions

square Privacy Concerns & Scorecard

Privacy Risk Analysis
Data CollectionHIGH

Extensive tracking infrastructure collects multiple data types including page interactions, user identification, events, analytics, and marketing/tracking data through a Customer Data Platform (CDP) system

Tracking & AdsHIGH

Sophisticated multi-destination tracking infrastructure with marketing technology scripts enabled by default. Tracking includes page views, clicks, scroll behavior, and element visibility without explicit consent mechanism

Third-Party SharingHIGH

Data is automatically sent to multiple unspecified third-party destinations through CDP system without explicit user consent visible in code. Confirmed sharing with Google Analytics, OneTrust, and internal martech services

Retention & ControlMEDIUM

No data retention periods or deletion mechanisms specified in available policy documentation

Transparency & RightsMEDIUM

Limited user control mechanisms available through opt-out functions and OneTrust consent management, but no comprehensive privacy policy text describing user rights, breach notification, or data portability

Recommended Actions

Data access deletion request

  1. 1Go to Square's privacy request portal (Square profile portal) at squareup.com, or call 1-844-213-737
  2. 2Submit an access, deletion, or correction request for your personal data.
  3. 3Square will process your request in accordance with applicable law.
Access Settings

Targeted advertising opt out

  1. 1Navigate to any page on squareup.com.
  2. 2Click the 'Your Privacy Choices' link located in the footer of the page.
  3. 3Follow the on-screen instructions to opt out of targeted advertising or the sale/sharing of your personal data.
Access Settings

Marketing email opt out

  1. 1Open any digital receipt you received from a Square seller.
  2. 2Select 'Manage preferences' in the receipt.
  3. 3To unsubscribe from all businesses, go to 'Email preferences' and toggle off 'Receive offers & updates'.
  4. 4To unsubscribe from specific businesses only, go to 'Businesses visited' and toggle off offers and updates for each individual business.
Access Settings

Automate your privacy

Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.

Data Collection & Tracking

Personal Information Collected

Identity Data

User authentication, account management, and tracking identification

Behavioral Data

Analytics, user behavior understanding, marketing optimization

Technical Data

Session management, tracking persistence, analytics

Marketing Data

Targeted advertising, marketing campaign optimization, audience segmentation

Cross-Platform Tracking

Square implements a Customer Data Platform (CDP) with multi-destination tracking that sends user behavior data (page views, events, user identification) across its ecosystem and to third-party analytics vendors including Google Analytics, Datadog, and Optimizely, indicating cross-platform and cross-site behavioral tracking capability.

Tracking Methods:

Customer Data Platform (CDP)

Central tracking system (sq:cdpTrackerInitialized) that collects and distributes user data to multiple third-party destinations with batch processing and heartbeat tracking

Tracking Pixel / Tag

Google Analytics and marketing technology tracking pixels load automatically to capture page views, user behavior, and events

Cookie Tracking

OneTrust cookie consent system manages first-party cookies for tracking and analytics purposes

JavaScript Event Queuing

Multiple event queues (track, page, identify) automatically queue user interactions and send to CDP destinations without explicit per-action consent

AI & Data Training

square does not train AI on your content

Based on their public policy, your content is not used to train AI models.

How to Object

No opt-out available

This service does not currently provide a public way to opt out of AI training.

Why We Analyzed square

TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.