VerbatermBetaVerbaterm is in beta. You may encounter bugs, incomplete features, or unexpected results while we improve reliability.

Privacy policy

Pandora

Review these first

Score60.0
Reviewed
Policy typePrivacy policy
Concern findings7
Protections0
Source supportStrong

Source provenance

Verified official source
Retrieved
Last checked
PublishedAutomated refresh
Source URLhttps://www.pandora.com/privacy/

Canonical URL: /about

What changedMaterial language shifts detected around cancel, refund, renew, personal data. 117 new line(s), 257 removed line(s).

Snapshot hash 3ca00d6e07865228aa77da278be8bcf793a4cfd6c2ca3e7701185c0bcbb6f41f

Snapshot of the source text at fetch time, not a live mirror of the policy page.

Plain-English summary

The privacy policy indicates several areas of concern. Your data may be transferred and processed in the US, where privacy regulations might not offer the same level of protection as in other parts of the world. The company cannot guarantee 100% security for your personal data, so you use the services and provide information at your own risk. The policy also notes that personal data collection includes sensitive and precise geolocation data and can be combined from various sources. Sharing personal data for targeted advertising might be considered a 'sale' under some state laws. Furthermore, the service may record your interactions with session replay technology, and third parties can collect data via their own tracking technologies. If you are a primary account holder, you are responsible for other users' access, and public postings generally cannot be removed.

90% confidence

Ask Verbaterm

Follow up on findings with grounded answers from this review. Not legal advice.

Risk Flags

1 finding

Critical issues that could significantly impact users, including potential financial loss, privacy breaches, or limitations on legal rights.

high95% confidence

Data transferred and processed in the US, with potentially lower protection levels.

Personal data may be transferred to and processed in the United States, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world.

Why it matters: Your personal data, if collected from outside the United States or provided directly through certain Sirius XM consumer websites, will be transferred to and processed in the United States. This means your data may be subject to US data protection and privacy regulations, which could offer a lower level of protection compared to regulations in other regions, such as the European Union.

If you choose to access the Sirius XM Podcast Content from outside of the United States, or if you provide any personal data directly to us through the Team Coco, 99% Invisible or any other Sirius XM consumer website such as the Sirius XM merchandise store, or any interaction with Team Coco or 99% Invisible directly, you understand that your data will be transferred to and processed in the United States, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world such as the European Union.

Changes to This Policy, paragraph 12 · Citation strength: strong

Data Use

4 findings

How the company collects, uses, shares, and retains your data, including potential privacy impacts.

medium90% confidence

Personal data includes sensitive and precise geolocation data.

The categories of personal data collected include Sensitive Personal Data and Precise Geolocation Data of device, subject to applicable law and user privacy rights and choices.

Why it matters: The service collects sensitive personal data and precise geolocation data from your device. While this is subject to applicable law and your choices, it indicates a broad scope of data collection that could be used for various purposes.

The categories of personal data we collect include: 1. Registration Data, 2. Vehicle Data, 3. Payment Data, 4. Sensitive Personal Data (to the extent permitted by applicable law and in accordance with your privacy rights and choices), 5. Precise Geolocation Data of device (to the extent permitted by applicable law and in accordance with your privacy rights and choices),

Summary of Sirius XM Key Personal Data Practices, paragraph 2 · Citation strength: strong

medium90% confidence

Sharing personal data for targeted advertising may be considered a 'sale'.

Disclosures of personal data for advertising/marketing-related purposes could be considered a "sale" under broad definitions of state privacy laws, and such disclosures are made with unaffiliated third parties for their own business and advertising/marketing purposes.

Why it matters: Your personal data, including email address and device data, may be shared with unaffiliated third parties for their own advertising and marketing purposes. This type of sharing could be classified as a "sale" of your personal data under certain state privacy laws, potentially exposing you to targeted advertising from these third parties.

You may opt-out of our sharing of your email address for third-party marketing through your Sirius XM Online Account Center (for former or current SiriusXM audio subscribers) or by sending an email request to opt-out of sharing for third-party marketing to privacy@siriusxm.com or privacy@pandora.com , depending upon your subscription service. These disclosures of personal data may also be considered a “sale” of personal data or use or “sharing” of personal data for “targeted advertising” under applicable state privacy laws and you can effectuate your related opt-out rights pursuant to Section 14 “State Specific Rights”.

E. Data Collected Through Mobile and Connected Devices:, paragraph 7 · Citation strength: strong

medium90% confidence

Session replay technology records user interactions.

Session replay technology may record details of your interactions with the Services, such as pages visited, time spent, sections reviewed, links clicked, and information provided.

Why it matters: Your every interaction on the service, including which pages you visit, how long you stay, what parts of a page you focus on, links you click, and any information you type, may be recorded using session replay technology. This data is used for internal business purposes like analytics and service improvement, creating a detailed log of your behavior.

Sirius XM may record through session replay technology details of your interactions with the Services such as what pages you visit on the website, how long you visit those pages, what sections of the page you spend the most time reviewing, and any links you click or information you provide. We use this information, including disclosing to third party service providers, for our internal business purposes, such as for website analytics, to improve the Services and our products and services, and to address functionality issues.

More About our Data Practices, paragraph 21 · Citation strength: strong

medium90% confidence

Third parties can collect data via their own tracking technologies.

Advertisers, agencies, and ad tech vendors may use their own tracking technologies on your device or the Services to collect data about your device and other personal information, potentially over time and across different websites and services.

Why it matters: Third-party advertisers and ad technology vendors can place their own tracking technologies (like cookies) on your device or within the service. This allows them to collect data about your device and other personal information over time, not just on this service but potentially across other websites and online services you visit, contributing to a broader profile of your online activities.

In addition, some advertisers, agencies, and ad tech vendors may utilize their own tracking technologies embedded in their ads or on your device, and they may otherwise collect or have access to data about your device and other information about you, some of which may be personal data under certain state laws. Some of these parties may collect personal data over time when you visit the Services or other online websites and services.

Third Party Advertising and Analytics/Privacy Controls, paragraph 1 · Citation strength: strong

Cancellation & Renewal

All clear

Terms related to subscription cancellation, automatic renewals, and associated billing practices.

Looking good

No billing surprises spotted

Verbaterm only flags concerns it can cite. No cancellation, auto-renewal, or refund terms needed attention here.

Gotchas

2 findings

Potentially overlooked clauses that could disadvantage users, such as unfavorable dispute resolutions or unexpected fee structures.

medium90% confidence

Primary account holders are responsible for other users' access.

If you are the primary account holder, you are responsible for any individual whose Listener Profile you permit to connect to your SiriusXM Service, and their service usage data may be compiled with your account data.

Why it matters: As the primary account holder, you are held responsible for the actions and data generated by anyone else you allow to access your SiriusXM subscription through a Listener Profile. Their listening and service usage data may be merged with your own account data, potentially impacting your personalized experiences or data profile.

If you are the primary account holder of a SiriusXM-brand subscription, you are responsible for access by any other individual whose Listener Profile you permit to connect to your SiriusXM Service. The terms of your subscription plan, the Sirius XM Customer Agreement, and this Policy will apply to their use of your subscription, and service usage data collected under their Listener Profile may be compiled indistinguishably with data associated with your account.

More About our Data Practices, paragraph 4 · Citation strength: strong

medium90% confidence

Public postings cannot generally be removed.

If you have made any public postings on the Services, including community forums or social media platforms, those communications generally cannot be removed even if you cancel or deactivate your account.

Why it matters: Content you post publicly on community forums or social media through the services will likely remain public indefinitely, even if you delete your account. This means you lose control over that content once it's posted.

If you have made any public postings on the Services including community forums or on social media platforms, those communications generally cannot be removed even if you cancel or deactivate your account.

Third Party Advertising and Analytics/Privacy Controls, paragraph 22 · Citation strength: strong

Protections

0 findings

Commitments and features that benefit users, such as strong data privacy practices, clear cancellation processes, or transparent data handling.

Looking good

No source-backed concerns shown

Verbaterm only flags concerns it can cite. Uncited model claims stay out of the review and do not count against the company.

Report an issue

Flag a citation problem, stale policy text, or incorrect company match.

Verbaterm boundaries

This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.