"Xtrm presents a critical privacy risk (78/100) comparable to Facebook/TikTok due to aggressive collection of sensitive government identifiers and financial data, coupled with broad third-party sharing to advertising networks, credit bureaus, and law enforcement. The company employs pervasive cross-site behavioral tracking via cookies and pixels without honoring Do Not Track signals, operates under vague data retention policies for most sensitive data types (with only biometric data having explicit 3-year retention), and enables unilateral policy amendments through continued-use consent. Users have limited control over tracking and automated decision-making, with opt-out options fragmentary and often ineffective."
xtrm Privacy Concerns & Scorecard
Continued use of services after policy changes constitutes acceptance, enabling unilateral policy amendments without explicit opt-in.
Data broadly shared with advertising networks, marketing partners, and analytics providers who independently track users across websites and share information with other organizations.
Xtrm collects extensive sensitive government identifiers including Social Security numbers, passport numbers, driver's license numbers, and photographs without explicitly limiting collection to necessary purposes.
Third-party tracking pixels and cookies enable behavioral advertising across websites and devices without requiring explicit per-visit consent.
Financial and identity verification data retention periods not specified, creating indefinite storage risk for sensitive government identifiers and banking information.
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Identity verification and fraud prevention
Payment processing and fraud prevention
Identity verification and fraud prevention
Fraud prevention, personalization, and marketing
Analytics, tracking, fraud prevention, and advertising
Analytics, marketing, personalized advertising, and understanding user engagement
Account creation, customer service, and marketing
Account management and fraud prevention
Employment screening and background verification
Marketing, user engagement, and behavioral analysis
Payment processing, fraud prevention, and marketing insights
Marketing communications and preference management
Cross-Platform Tracking
Xtrm tracks users across websites and devices through third-party cookies, web beacons, and device identifiers that enable cross-site behavioral tracking and retargeting. Third-party analytics services like Google Analytics independently collect data simultaneously with Xtrm's collection, and advertising cookies share behavioral information with external organizations and advertisers across the internet.
Tracking Methods:
Advertising Cookies
Third-party cookies set by advertising providers to track online activity, identify browser and device, and share information with other organizations and advertisers for interest-based advertising
Web Beacons (Tracking Pixels)
Invisible pixels embedded in web pages and emails that continue to function even when cookies are disabled, enabling passive tracking across websites
Analytics Cookies
Third-party analytics services like Google Analytics collect data simultaneously and independently with Xtrm's collection, tracking user behavior and site usage
Device Identifiers and Fingerprinting
Unique device identifiers and browser fingerprints enable cross-device tracking and identification without cookies
Passive Data Collection
Automatic collection of IP addresses, device types, and browser information during user interactions with the service
AI & Data Training
xtrm does not train AI on your content
Based on their public policy, your content is not used to train AI models.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed xtrm
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.