Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
This privacy policy raises several concerns regarding the security and handling of your personal information. One significant issue is that the service cannot guarantee absolute security for your personal information (risk_flags-1), meaning there's a potential for data breaches. If you use the service as part of an organization, an administrator may have access to and control over your account and files (risk_flags-2), limiting your personal control. The company also collects additional information from third parties, including detailed online behavior like mouse movements (data_use-1), to improve services, which could impact your privacy. Furthermore, your personal information and files may be disclosed to third parties under various legal and business circumstances, including government requests (data_use-2). Finally, the service does not respond to Do-Not-Track requests (gotchas-1), meaning your browsing activity may still be tracked, and unresolved DPF Principles-related complaints are subject to mandatory arbitration (gotchas-2).
89% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risks to be aware of
These findings highlight material or hard-to-reverse harms, such as significant financial loss, permanent privacy exposure, loss of account access, or limitations on dispute rights.
high95% confidence confidence
No guarantee of absolute security for personal information
No method of transmission over the Internet, or method of electronic storage, is 100% secure, so Backblaze cannot guarantee absolute security.
Why it matters: The service states that it cannot guarantee absolute security for your personal information, indicating a potential risk of data breach or unauthorized access despite security measures.
We use appropriate technical and organizational security measures to protect your personal information from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, both during transmission and once we receive it. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security
How We Protect Your Information, paragraph 2 · Citation strength: strong
medium95% confidence confidence
Administrator control over accounts and files for organizations
If you use services as part of a business, group, or organization, the administrator may be able to access and control your account and your files.
Why it matters: Your account and data may be subject to control and access by an administrator if you are using the services through a business, group, or organization, potentially reducing your personal control.
If you use our services as part of a business, group, or organization where Backblaze was set up by an administrator, the administrator may be able to access and control your account and your files. Refer to your organization's internal policies for more information.
Who We Share Your Information With, paragraph 2 · Citation strength: strong
How your data is used
These findings describe how your data is collected, processed, and shared. Concerns include broad data collection, sharing with third parties, or uses beyond the primary service.
medium90% confidence confidence
Collection of personal information from third parties for improvement purposes
The service may collect additional information about you from third parties, including user clicks, mouse movements, page visits, surveys, and IP addresses, primarily to understand how to maintain and improve services.
Why it matters: Your online activities, such as clicks and mouse movements on webpages, may be collected from third-party tools to help the company improve their services, which could impact your privacy.
We may collect additional information about you from third parties primarily to assist us in understanding how we can maintain and improve the services we offer to better serve you. The type of information we collect from third party tools that we use may include: user's clicks to test different versions of our website; recordings of where people move their mouse on key web pages; page visits which in turn allows Backblaze to decide if it needs to update certain pages; surveys, which users can voluntarily complete, and a user's IP address.
**Personal information that we collect from third parties**, paragraph 1 · Citation strength: strong
medium90% confidence confidence
Disclosure of personal information or files to third parties under various circumstances
Backblaze may disclose your personal information or files to third parties when required by law or regulatory requirement, court order, in response to lawful requests by public authorities, in connection with business changes, to protect their rights, to investigate wrongdoing, and to protect an individual's vital interests.
Why it matters: Your personal information and files may be disclosed to third parties under various legal and business circumstances, including government requests, business transactions, and protection of the company's interests, which means your data might become accessible to entities outside of Backblaze.
We may also disclose your personal information or your files to third parties: (a) where required by law or regulatory requirement, court order, or other judicial authorization, (b) in response to lawful requests by public authorities, including for the purposes of meeting national security and law enforcement requirements; (c) in connection with the sale, transfer, merger, bankruptcy, restructuring, or other reorganization of a business; (d) to protect or defend our rights, interests, or property, or that of third parties; (e) to investigate any wrongdoing in connection with our products and services; and (f) to protect the vital interests of an individual.
Who We Share Your Information With, paragraph 2 · Citation strength: strong
low95% confidence confidence
Use of cookies and similar tracking technology
The service uses cookies and similar tracking technology to collect and use personal information.
Why it matters: The service utilizes cookies and similar tracking technologies to gather and use your personal information, a common practice that, while generally understood, continuously collects data about your online activity.
Like all e-commerce websites we use cookies and similar tracking technology (collectively "Cookies") to collect and use personal information about you.
Cookies and Similar Tracking Technology, paragraph 1 · Citation strength: strong
Cancellation and renewal terms
These findings describe terms related to how subscriptions renew, how to cancel services, and any associated conditions or penalties.
✓
Looking good
No billing surprises spotted
Verbaterm only flags concerns it can cite. No cancellation, auto-renewal, or refund terms needed attention here.
Other gotchas
These findings highlight other notable terms that may be disadvantageous, unexpected, or require careful attention from the user.
low95% confidence confidence
Service does not respond to Do-Not-Track requests
The service does not respond to Do-Not-Track requests because the Internet community has not reached a consensus on honoring these signals.
Why it matters: The service disregards Do-Not-Track signals, meaning your browsing activity may still be tracked even if you've enabled this privacy setting in your browser.
Some browsers make it possible for you to signal that you don’t want your Internet browsing activity to be tracked. Because the Internet community hasn’t reached a consensus on how to best honor these signals, Backblaze doesn’t respond to Do-Not-Track requests at this time.
Do Not Track, paragraph 1 · Citation strength: strong
medium90% confidence confidence
Mandatory arbitration for DPF Principles-related complaints
Backblaze commits to refer unresolved complaints concerning personal data received in reliance on the EU-U.S. DPF and Swiss-U.S. DPF to the International Division of the American Arbitration Association (ICDR-AAA).
Why it matters: If you have unresolved complaints related to data privacy frameworks, you may be required to use arbitration through ICDR-AAA instead of other dispute resolution methods, potentially limiting your options for recourse.
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Backblaze commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to the International Division of the American Arbitration Association (ICDR-AAA), an alternative dispute resolution provider based in the United States.
How to Contact Us, paragraph 8 · Citation strength: strong
Consumer protections
These findings highlight commitments and features designed to protect users, such as data encryption, clear data deletion policies, or explicit user control over privacy settings.
Protection95% confidence confidence
Ability to opt out of marketing emails
Upon creating a Backblaze Account, you can manage your email preferences, including opting out of all Marketing Emails, and can unsubscribe at any time using a link in the email or on their website.
Why it helps: You have control over receiving marketing communications and can easily opt out at any time, reducing unwanted promotional emails.
**Marketing Emails:** These will include Backblaze company news, tips-and-tricks, service promotions (e.g., refer-a-friend) and similar types of material. Upon creating a Backblaze Account you will be able to manage your email preferences, including opting out of receiving all Marketing Emails. **You will also be able to unsubscribe at any time by using the unsubscribe link provided in any given email or through our**[**What types of Email Does Backblaze Send?**](https://www.backblaze.com/unsubscribe.htm)**Website**.
Commitment to process personal information compatibly with collection purpose and offer opt-out for new uses
The service will only process personal information in ways compatible with the original collection purpose or later authorized purposes, and will offer an opportunity to opt-out if using the information for a materially different purpose.
Why it helps: Your personal information will primarily be used for the purposes it was originally collected for, and you will be given the option to opt-out if the company decides to use it for a significantly different purpose.
We will only process personal information in ways that are compatible with the purpose we collected it for or for the purposes you later authorize. Before we use your personal information for a purpose that is materially different from the purpose we collected it for or that you later authorized, we will provide you with the opportunity to opt-out.
Clear process for exercising data protection rights
You can exercise your privacy rights by submitting a data subject request through a provided form.
Why it helps: The company provides a clear and direct method for you to exercise your privacy rights, simplifying the process of managing your personal data.
**You can exercise your privacy rights by submitting a data subject request with the completion of**[**this**](https://preferences.backblaze.com/privacy)**form.**
**Additional information for California consumers**, paragraph 3 · Citation strength: strong
Report an issue
Flag a citation problem, stale policy text, or incorrect company match.
Verbaterm boundaries
This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.