Facebook Privacy Summary
Facebook (Meta) is a social networking platform for connecting, sharing content, messaging, and advertising across Meta’s family of apps and services.
Quick Summary
Facebook (Meta) collects one of the most comprehensive personal data profiles of any platform — spanning your posts, messages, Marketplace transactions, Events attendance, Facebook Dating activity, gaming history, and real-time device behavior. The December 2025 policy update adds Meta AI conversation data and mouse movement tracking as explicit categories. All data flows across the entire Meta ecosystem: Instagram, WhatsApp, Messenger, and Quest.
Why You Should Care About Facebook's Privacy Practices
Facebook builds a profile on you that goes far beyond what you post. Your Marketplace buying and selling history, Events you say you're attending, Facebook Dating preferences (including sensitive attributes), and Groups you join all feed the same advertising machine. Facebook Dating collects particularly sensitive data — relationship status, sexual orientation signals, religious affiliation — used for targeting. Meta AI now explicitly uses your conversations for training. Even mouse movements and whether Facebook is in your browser foreground are tracked. Data shared across all Meta companies means your Facebook activity influences what you see on Instagram, WhatsApp, and Quest.
Why High Exposure?
- Collects 20 types of personal data
- 10 concerning practices identified
- Shares data with 9 third parties
- 9 tracking methods used
- Limited user controls for data management
Privacy Highlights
What They Collect
- Account info (name, email, phone number, date of birth, gender, password)
- Profile content (bio, education, workplace, relationship status, religious views, political views)
- Posts, comments, photos, videos, and Stories
- Facebook Marketplace listings, purchases, and transaction history
- Facebook Events — RSVPs, attendance, and event interests
- Facebook Dating preferences and activity (including sensitive attributes)
- Facebook Groups membership and activity
- Facebook Gaming activity and in-game behavior
- Facebook Watch viewing history
- Messages sent and received (content and metadata — not E2E encrypted by default)
- Meta AI conversation content (prompts and responses — added Dec 2025)
- Payment and financial info (Facebook Pay, Marketplace transactions)
- Device info (browser, OS, device IDs, hardware characteristics)
- Device activity (mouse movements, foreground/background state — added Dec 2025)
- IP address and network data
- GPS and device-derived location
- Cookies and off-site tracking (Meta Pixel on third-party websites)
- Data from other Meta Companies (Instagram, WhatsApp, Messenger, Quest)
- Data from third-party partners and advertisers (off-Facebook activity)
How They Share Data
- Other Meta Companies (Instagram, WhatsApp, Messenger, Quest, Workplace)
- Advertisers (behavioral targeting, lookalike audiences, conversion measurement)
- Meta Audience Network publishers (off-Facebook ad delivery)
- Facebook Marketplace buyers and sellers (transaction data)
- Integrated third-party apps (apps you log into with Facebook)
- Service providers and vendors (cloud, analytics, fraud prevention)
- Researchers and non-profit organizations
- Law enforcement and government (legal requests and court orders)
- New owners (data transferred in any merger or acquisition)
Data Retention
Data retained as long as necessary to provide services. Deletion starts within 30 days of account deletion request; full removal from active systems takes up to 90 days. Backups, legal holds, and cross-product sharing can extend data retention significantly longer.
Your Rights
- Access your data (Activity Log and Download Your Information tool)
- Edit or remove profile information and posts
- Delete your account (with 30-day deactivation grace period)
- Off-Facebook Activity tool (limit cross-site tracking)
- Ad preferences management (manage categories, opt out of interests)
- Manage Facebook Dating data separately
- Data portability (Transfer Your Information tool)
- GDPR and CCPA rights (EEA and California residents)
Detailed Analysis
Concerning Practices
- Facebook Dating collects highly sensitive data including relationship preferences, orientation signals, and religious affiliation — used within Meta's ad targeting infrastructure
- Meta Pixel tracks your behavior across millions of third-party websites, linking it to your Facebook identity even when you're not on Facebook
- Messenger messages are NOT end-to-end encrypted by default — Meta retains access to message content
- Mouse movements and browser foreground state tracked (Dec 2025 addition) — behavioral monitoring at hardware level
- Meta AI conversations now explicitly collected and used for model training and personalization
- Facebook Login gives Meta visibility into your activity across all third-party apps you access with it
- Cross-Meta-ecosystem data sharing — Facebook activity informs Instagram, WhatsApp, and Quest profiles
- Off-Facebook Activity tool exists but requires manual opt-out; tracking is on by default
- Location inferred from IP even if you deny GPS permission explicitly
- Data transferred to any acquirer in full in any M&A scenario — no user consent required
Personal Data Types
Tracking Methods
Third Parties
User Controls
Frequently Asked Questions About Facebook
Legal Disclaimer
This analysis is provided for informational purposes only and should not be used as legal advice. Privacy Exposure ratings and summaries are AI-generated assessments based on publicly available privacy policies — they are not statements of fact and may contain errors. Learn how ratings are determined. Consult with legal professionals for matters requiring legal guidance.