"Y Combinator's privacy practices present significant risks through extensive collection of sensitive personal and financial data, broad sharing with affiliates and third-party analytics providers without clear limitations, and cross-site behavioral tracking for targeted advertising. The binding arbitration clause eliminating class action rights, combined with vague retention periods and unilateral account termination rights, severely limits user recourse and control. Critical concerns include session replay capture of screen contents, indefinite retention of Hacker News content after account deletion, and perpetual licensing of user content for unrestricted Y Combinator use."
Y Combinator Privacy Concerns & Scorecard
Mandatory binding arbitration clause eliminates class action rights and jury trials, capping liability at $100 regardless of actual damages and preventing public disclosure of disputes.
Y Combinator collects extensive personal and sensitive data including identity information, location/geolocation, financial data (compensation), health-adjacent data, work history, and session replay information that captures screen contents.
Broad sharing with Affiliates and Y Combinator-funded companies without detailed limitations or transparent disclosure of scope.
Y Combinator uses cookies and third-party tracking pixels for targeted advertising across sites and does not honor Do Not Track signals.
Y Combinator reserves unilateral right to delete user accounts and all associated data without prior notice or liability.
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, identity verification, communications, service delivery
Applicant evaluation, WaaS matching, network building
Service delivery, fraud prevention, content customization
Service delivery, moderation, fraud prevention, analytics
Service improvement, targeted advertising, fraud detection
Profile enrichment, networking
Application review, service delivery, platform operation
Event documentation, verification
Cross-Platform Tracking
Y Combinator tracks users across multiple websites through cookies and third-party tracking pixels for targeted advertising purposes. The policy does not respond to Do Not Track signals. Session replay technology captures screen contents across browsing sessions, and data is shared with third-party analytics providers (Google Analytics, Amplitude, PostHog, New Relic) that track cross-site behavior.
Tracking Methods:
Cookies
First-party and third-party cookies used to track user behavior, preferences, and sessions; enable targeted advertising
Tracking Pixels
Third-party tracking pixels deployed across websites to enable cross-site behavioral tracking and retargeting
Session Replay
Records user interactions including screen contents, mouse movements, and keystrokes for behavior analysis and fraud prevention
Analytics Tags
Third-party analytics providers (Google Analytics, Amplitude, PostHog, New Relic) track user behavior through embedded tracking code
Terms of Service Updates
Broad perpetual license granted to YC over all user inputs
NEW version grants YC a nonexclusive, worldwide, perpetual, irrevocable license to copy, display, upload, process, distribute, modify and use all user Inputs for 'any YC-related purpose' including creating investor databases and marketing initiatives. OLD version contained no such license grant. This allows YC to retain and commercialize all data and documents users submit.
Effective: June 26, 2026
Mandatory arbitration clause with class action waiver introduced
NEW version incorporates YC General Terms by reference and prominently displays arbitration agreement with class action waiver, requiring individual binding arbitration only. OLD version contained no arbitration or dispute resolution terms. Users can no longer pursue class actions or litigate in court.
Effective: June 26, 2026
Broad liability exclusion for YC regardless of user losses
NEW version explicitly states YC will not be liable for losses from using the Services 'except to the extent such liability cannot be lawfully excluded.' OLD version contained no liability limitations. This substantially reduces YC's responsibility for service failures, errors, or losses users incur.
Effective: June 26, 2026
AI & Data Training
Y Combinator does not train AI on your content
Based on their public policy, your content is not used to train AI models.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed Y Combinator
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.