Snapshot of the source text at fetch time, not a live mirror of the policy page.
Plain-English summary
The privacy policy outlines that no internet or email transmission is fully secure, posing a risk to user data. User information may be stored and processed in various jurisdictions with differing data protection laws, and third-party privacy policies will govern user data when navigating to external sites. The company uses automated data collection, including cookies, for analytics and advertising purposes, and aggregated/de-identified data can be used and shared broadly. Marketing communications may be sent to users, and the company does not honor 'Do Not Track' signals. Critically, under CCPA, certain data disclosures may be considered a 'sale' or 'sharing'. For enterprise users, log data is controlled by the customer's privacy policy, and organization administrators have broad access to user activity and data, including session recordings. The policy itself may be amended at any time, with continued use implying acceptance.
90% confidence
Ask Verbaterm
Follow up on findings with grounded answers from this review. Not legal advice.
Risk Flags
1 finding
Critical issues that users should be aware of, including significant privacy intrusions, limitations on legal rights, or data security warnings.
high90% confidence
Information may be stored and processed in other jurisdictions with different data protection laws
User information is maintained and processed by Tailscale and its third-party service providers in Canada, Germany, the United States, and the United Kingdom, and may also be stored in other jurisdictions that may have different data protection laws than the user's country of residence.
Why it matters: User information may be subject to different data protection laws and standards depending on where it is stored and processed, which could affect their privacy rights.
Your information is maintained and processed by us and our third-party service providers in Canada, Germany, the United States and the United Kingdom, and may also be maintained, processed, and stored in other jurisdictions that may have different data protection laws than those in your country of residence.
YOUR PRIVACY CHOICES, paragraph 5 · Citation strength: strong
Data Use
4 findings
How the company collects, uses, and shares your data, including specifics on third-party sharing, advertising, and data retention.
medium90% confidence
Aggregated and de-identified information may be used for any purpose and shared with third parties
Tailscale may aggregate and/or de-identify any information collected through its services so that it can no longer be linked to the user or their device. This 'Aggregate/De-Identified Information' may be used for any purpose, including developing statistics, insights, industry trend reporting, and thought leadership, and may also be disclosed with any third parties, including partners.
Why it matters: While de-identified, user data can be broadly used and shared, potentially contributing to aggregated insights and trends that are not directly controlled by the user.
We may aggregate and/or de-identify any information collected through our Services so that such information can no longer be linked to you or your device (“Aggregate/De-Identified Information”). We may use such information for any purpose, including without limitation developing and publishing information statistics, insights, industry trend reporting or thought leadership related to the Services, and may also disclose such data with any third parties, including our third-party partners.
HOW WE USE YOUR INFORMATION, paragraph 9 · Citation strength: strong
medium90% confidence
Marketing communications can be sent with news, updates, promotions, surveys, or contests
Tailscale may contact users by email, postal mail, or phone with news, updates, information, promotions, surveys, or contests relating to its services or other services that may be of interest, and to customize content on their site, in accordance with applicable legal requirements.
Why it matters: Users may receive various marketing communications, including promotional content and surveys, which could lead to an influx of marketing messages.
Marketing, outreach and online advertising: Contact you by email, postal mail, or phone with news, updates, information, promotions, surveys or contests relating to the Services or other services that may be of interest to you, and customize the content you see on our Site, in accordance with applicable legal requirements
HOW WE USE YOUR INFORMATION, paragraph 4 · Citation strength: strong
medium90% confidence
Tailscale does not respond to 'Do Not Track' signals
Tailscale does not currently recognize or respond to browser-initiated 'Do Not Track' (DNT) signals, despite providing other opt-out mechanisms.
Why it matters: Users who enable DNT in their browser to signal a preference against tracking may still have their online activity tracked by Tailscale, as DNT signals are not honored.
formation collected on our Services for third party purposes, and that is why we provide the variety of opt-out mechanisms listed above. However, we do not currently recognize or respond to browser-initiated DNT signals.
LEGAL BASES FOR USE OF YOUR INFORMATION, paragraph 10 · Citation strength: strong
medium90% confidence
Disclosure of information to advertising, analytics, and enhancement providers may be considered 'sale' or 'sharing' under CCPA
The disclosure of user information to certain advertising, analytics, and enhancement service providers may be considered a 'sale' of personal information or 'processing'/'sharing' for online targeted advertising purposes under applicable law, specifically the CCPA.
Why it matters: Under California law, users' personal information, such as online identifiers, may be shared or sold to third parties for targeted advertising purposes without explicit opt-in consent, impacting their privacy.
As explained above in the “How We Disclose Your Information” section, the disclosure of your information to certain advertising, analytics and enhancement service providers under applicable law may be considered a “sale” of personal information or the “processing”/“sharing” of personal information for online targeted advertising purposes.
YOUR PRIVACY CHOICES, paragraph 1 · Citation strength: strong
Cancellation & Renewal
All clear
Terms related to account termination, subscription cancellation, and automatic renewals, including any associated fees or notice periods.
✓
Looking good
No billing surprises spotted
Verbaterm only flags concerns it can cite. No cancellation, auto-renewal, or refund terms needed attention here.
Gotchas
1 finding
Potentially tricky or obscure clauses that could have negative implications for users, such as mandatory arbitration, class action waivers, or one-sided modification clauses.
medium90% confidence
Customer Log Data is controlled by the Customer, not Tailscale
Customers have the option to use features that generate additional logs and data ('Customer Log Data') sent to Tailscale for processing and storage. The Customer, not Tailscale, is the data controller for this data and is responsible for processing it according to their own privacy policies.
Why it matters: If a user is part of a Customer's account, their log data is governed by the Customer's privacy policies, not Tailscale's, potentially leading to different data handling practices than expected from Tailscale directly.
Customers have the option, in their discretion, to use certain features and functionalities through the Tailscale Solution that may generate additional logs and other data that is sent to Tailscale for processing and storage on behalf of our Customers (“Customer Log Data”). The Customer, and not Tailscale, is the data controller over such Customer Log Data. Tailscale will process Customer Log Data in accordance with our Data Processing Addendum with the Customer.
INFORMATION WE COLLECT THROUGH AUTOMATED MEANS, paragraph 2 · Citation strength: strong
Protections
3 findings
Explicit commitments and features that benefit users, such as strong data encryption, clear data deletion policies, or privacy-preserving defaults.
Protection95% confidence
Ability to opt-out of marketing communications
Users can stop receiving marketing communications at any time by contacting Tailscale or by following the opt-out instructions in marketing emails.
Why it helps: Users have control over the marketing emails they receive and can easily opt out to reduce unwanted communications.
If, in accordance with applicable legal requirements, we send you marketing communications regarding our Services or the services of third parties that we believe will be interesting to you, you can ask us to stop sending such communications at any time by contacting us using the information in the "Contact Us" section below at any time. In our marketing email messages, you can also opt out by following the instructions located at the bottom of such emails.
Company does not disclose personal information to third parties for their direct marketing purposes
Tailscale explicitly states that it does not disclose user personal information with third parties for their own direct marketing purposes, as outlined by the California "Shine the Light" law.
Why it helps: This commitment prevents the sharing of user personal information with third parties for their independent marketing efforts, protecting users from unsolicited direct marketing from other companies.
We do not disclose your personal information with third parties for their own direct marketing purposes.
HOW WE PROTECT YOUR INFORMATION, paragraph 15 · Citation strength: strong
Protection95% confidence
Services not directed to minors; no intentional collection of information from children under 16
The services are not directed to minors or children under the age of 16. Tailscale does not intentionally or knowingly collect information from minors or children or allow them to open and manage accounts.
Why it helps: This policy protects children under 16 by preventing the intentional collection of their personal information and ensuring that the services are not designed for them.
The Services are not directed to minors or children. In this context, minors are individuals under the age of 16. We do not intentionally or knowingly collect information from minors or children or allow them to open and manage accounts.