"Y Combinator's privacy practices present significant risks through extensive collection of sensitive personal and financial data, broad sharing with affiliates and third-party analytics providers without clear limitations, and cross-site behavioral tracking for targeted advertising. The binding arbitration clause eliminating class action rights, combined with vague retention periods and unilateral account termination rights, severely limits user recourse and control. Critical concerns include session replay capture of screen contents, indefinite retention of Hacker News content after account deletion, and perpetual licensing of user content for unrestricted Y Combinator use."
ycombinator Privacy Concerns & Scorecard
Mandatory binding arbitration clause eliminates class action rights and jury trials, capping liability at $100 regardless of actual damages and preventing public disclosure of disputes.
Y Combinator collects extensive personal and sensitive data including identity information, location/geolocation, financial data (compensation), health-adjacent data, work history, and session replay information that captures screen contents.
Broad sharing with Affiliates and Y Combinator-funded companies without detailed limitations or transparent disclosure of scope.
Y Combinator uses cookies and third-party tracking pixels for targeted advertising across sites and does not honor Do Not Track signals.
Y Combinator reserves unilateral right to delete user accounts and all associated data without prior notice or liability.
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, identity verification, communications, service delivery
Applicant evaluation, WaaS matching, network building
Service delivery, fraud prevention, content customization
Service delivery, moderation, fraud prevention, analytics
Service improvement, targeted advertising, fraud detection
Profile enrichment, networking
Application review, service delivery, platform operation
Event documentation, verification
Cross-Platform Tracking
Y Combinator tracks users across multiple websites through cookies and third-party tracking pixels for targeted advertising purposes. The policy does not respond to Do Not Track signals. Session replay technology captures screen contents across browsing sessions, and data is shared with third-party analytics providers (Google Analytics, Amplitude, PostHog, New Relic) that track cross-site behavior.
Tracking Methods:
Cookies
First-party and third-party cookies used to track user behavior, preferences, and sessions; enable targeted advertising
Tracking Pixels
Third-party tracking pixels deployed across websites to enable cross-site behavioral tracking and retargeting
Session Replay
Records user interactions including screen contents, mouse movements, and keystrokes for behavior analysis and fraud prevention
Analytics Tags
Third-party analytics providers (Google Analytics, Amplitude, PostHog, New Relic) track user behavior through embedded tracking code
AI & Data Training
ycombinator does not train AI on your content
Based on their public policy, your content is not used to train AI models.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed ycombinator
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.