Disney+
Disney collects vast amounts of personal data about you — including your precise location, viewing habits, voice, and inferred interests — and shares or sells much of it to advertisers, social networks, and all of its own family of brands, with no fixed timeline for deleting it. If something goes wrong, your legal options are severely restricted: almost all disputes are pushed into private arbitration, class-action lawsuits are banned, and Disney's maximum financial liability to you is capped at $1,000. Any creative content you post can be used by Disney forever and for free, and your continued use of the service automatically counts as agreement to whatever new terms Disney decides to introduce. Children using Disney's platforms are not fully protected either, as their device IDs are collected and contextual advertising is still shown to them.
Last analyzed
Heads up: this analysis is AI-generated, can be incomplete or wrong, and is not legal advice. Use it as a starting point and read the original document before you agree — see our Terms.
Clause-by-clause breakdown
Every clause we flagged in Disney+'s agreement, with what it means for you.
Disney sells your browsing data and demographics to advertisers and social networks.
“Certain data collection and disclosures related to you and your activity on our sites and applications, such as by third parties for purposes of interest-based advertising and social media tools may, be a "sale" or "sharing" or constitute "targeted advertising" under applicable privacy laws. As defined by such laws, we "sold" or "shared" or processed for "targeted advertising" certain data elements within the following categories of personal information: identifiers, demographic information, commercial information, Internet or other electronic network activity information, approximate geolocation, and inferences drawn from the above. We "sold," "shared," or disclosed for the purpose of "targeted advertising," each category to business partners and other third parties as described in the "Sharing Your Personal Information With Other Entities" section of our Privacy Policy, including those who provide advertising, marketing, analytics, data augmentation, or audience measurement; other online third-party branded tools or functionality (such as maps or video players); and social networks.”
Quoted verbatim from the agreement What this means: Disney sells or shares your identifiers, browsing activity, demographic data, approximate location, and inferences about you with advertisers, marketing firms, analytics companies, and social networks for targeted advertising. This is a broad category of data shared with a wide range of third parties. While US residents can opt out via a 'Do Not Sell or Share' link, this opt-out is not automatic and must be repeated per device/browser if you are not logged in. Non-US users outside of GDPR-covered regions may have no equivalent opt-out right.
What you can do: If you are a US resident, click 'Do Not Sell or Share My Personal Information' in the website footer and submit the opt-out form for broader coverage. Log in before opting out so the preference applies across your devices.
Disney keeps your data indefinitely with no fixed deletion timeline.
“We retain each category of personal information that we collect for as long as necessary to fulfill the purposes described in our Privacy Policy, including to satisfy legal or reporting requirements. What this means in practice will vary for different types of information, but the criteria assessed in the data retention analysis take into account ongoing business or legal needs for the information, for example in relation to tax, health and safety, and potential or actual disputes or investigations.”
Quoted verbatim from the agreement What this means: Disney does not commit to any specific retention period for your personal data. The policy says data is kept 'as long as necessary,' which is determined by Disney based on broad criteria including 'potential or actual disputes or investigations.' In practice, this means your data could be kept indefinitely. There is no user-facing timeline or guarantee of deletion after a set period.
What you can do: Submit a deletion request via usprivacy.disney.com (US residents) or the relevant regional portal. Be aware that Disney may decline deletion requests citing legal or business reasons.
Disney can change its Cookie Policy without notifying you directly.
“Any changes in this Cookie Policy will become effective when we make the revised Cookie Policy available on or through the applicable website and/or online service.”
Quoted verbatim from the agreement What this means: Disney can update its Cookie Policy at any time simply by posting the new version on its website. There is no requirement to notify you directly or to obtain your fresh consent before the new terms take effect. Continued use of Disney services after a policy change means you are bound by the updated terms.
What you can do: Periodically check the Cookie Policy page for updates. Consider setting a reminder to review it every few months, especially if you use Disney services regularly.
You cannot join a class-action lawsuit against Disney.
“YOU AND DISNEY AGREE TO WAIVE CLASS ACTION PROCEDURES. Neither you nor Disney will seek to have a dispute heard as a class action or private attorney general action or in any other proceeding in which any party acts or proposes to act in a representative capacity. You and we agree not to, and expressly waive any right to, file a class action or seek relief on a class basis. No arbitration or proceeding can be combined with another without the prior written consent of all parties to the applicable arbitrations or proceedings. If this waiver of class or consolidated actions is deemed invalid or unenforceable, neither you nor we are entitled to arbitration; instead, all Disputes will be resolved in a court.”
Quoted verbatim from the agreement What this means: Disney requires you to give up your right to join a class-action lawsuit or any group legal action against them. This means if Disney harms many users in the same way, each person must fight their case alone — making it economically impractical to pursue small individual claims. The class-action waiver survives even if you opt out of arbitration, and you cannot opt out of the waiver alone without also opting out of arbitration.
What you can do: Mail an opt-out notice to P.O. Box 11565, Burbank, CA 91510 within 30 days of first agreeing to these terms — this is the only way to escape both arbitration and the class-action waiver.
Nearly all disputes must go to private arbitration, not court.
“You and Disney agree to resolve, by binding individual arbitration as provided below, all Disputes (including any related disputes involving The Walt Disney Company, its subsidiaries, or its affiliates) except for: (i) any claim within the jurisdiction of a small claims court consistent with the jurisdictional and dollar limits that may apply, as long as it is an individual dispute and not a class action; and (ii) any dispute relating to the ownership or enforcement of intellectual property rights.”
Quoted verbatim from the agreement What this means: Almost every dispute you have with Disney — including those involving all its subsidiaries and affiliates like ABC, ESPN, Marvel, and Pixar — must go through private arbitration instead of a public court. This removes your right to a jury trial and limits your ability to appeal decisions. The arbitration takes place under rules set by a private company (ADR Services or NAM), not a neutral government court.
What you can do: Mail an opt-out notice within 30 days of first agreeing to these terms to P.O. Box 11565, Burbank, CA 91510, Attention: Disney Opt-Out, to preserve your right to sue in court.
Continuing to use Disney products means you accept any new terms.
“If we make a material change to this Agreement, it will be effective thirty (30) days following either our dispatch of a notice to you or our posting of the amended terms through the Disney Products, the third party that makes Disney Products available to you, or at disneytermsofuse.com. You are responsible for periodically reviewing this Agreement for updates and amendments. By continuing to use the Disney Products you will be deemed to have agreed to and accepted any amendments. If you do not agree to any change to this Agreement, you must discontinue using the Disney Products.”
Quoted verbatim from the agreement What this means: Disney can change any part of these terms at any time. After 30 days' notice (which may just be a posting on their website), simply continuing to use any Disney product — Disney+, ESPN+, Disney.com, etc. — counts as your agreement to the new terms. You are never asked to actively confirm you accept changes; silence equals consent.
What you can do: Set a reminder to check disneytermsofuse.com periodically, and stop using all Disney products if you disagree with any update — that is the only way to reject new terms.
Disney's maximum payout to you for any harm is $1,000.
“IN NO EVENT SHALL OUR TOTAL LIABILITY TO YOU FOR ALL DAMAGES, LOSSES AND CAUSES OF ACTION EXCEED ONE THOUSAND U.S. DOLLARS (US $1,000).”
Quoted verbatim from the agreement What this means: No matter what Disney does wrong — data breaches, service failures, financial harm — the most they will ever pay you is $1,000 in total. For a company operating subscription services, streaming platforms, and e-commerce, this cap is extremely low relative to the potential harm a user could suffer, for example from a billing error or data exposure.
What you can do: Be aware that this cap limits your legal recovery; if you suffer significant harm, consult an attorney about whether any exceptions apply in your jurisdiction.
Disney can use your posts forever, for free, without crediting you.
“you grant us a non-exclusive, sublicensable, irrevocable and royalty-free worldwide license under all copyrights, trademarks, patents, trade secrets, privacy and publicity rights and other intellectual property rights for the full duration of those rights to use, reproduce, transmit, print, publish, publicly display, exhibit, distribute, redistribute, copy, index, comment on, modify, transform, adapt, translate, create derivative works based upon, publicly perform, publicly communicate, make available, and otherwise exploit such User Generated Content, in whole or in part, in all media formats and channels now known or hereafter devised (including in connection with the Disney Products and on third-party websites, services, applications, and/or platforms), in any number of copies and without limit as to time, manner and frequency of use, without further notice to you, without attribution (to the extent this is not contrary to mandatory provisions of applicable law), and without the requirement of permission from or payment to you or any other person or entity.”
Quoted verbatim from the agreement What this means: When you post any content — a photo, video, comment, or contest entry — Disney gets a permanent, irrevocable, royalty-free license to use it however they want, forever, across all platforms, without paying you or even crediting you. This license cannot be taken back even if you delete your account. Disney can also sublicense your content to third parties.
What you can do: Only post content you are comfortable with Disney using permanently and freely; avoid sharing anything you may want to control or monetize in the future.
Disney collects your precise location and shares it with third parties.
“Location information, including precise or approximate location information provided by a mobile or other device interacting with one of our sites, applications, or physical properties (including through beacon technologies), or associated with your IP address or other online or device identifier, where we are permitted by law to process this information; Geolocation data, including precise or approximate location information provided by a mobile device or other device or product interacting with or detected by our sites, applications, or physical properties, where we are permitted by law to process this information.”
Quoted verbatim from the agreement What this means: Disney collects precise location data from your mobile device, including through beacon technologies in physical properties like theme parks and stores. This precise location data is listed among the categories shared with third parties for targeted advertising and analytics purposes. Precise geolocation is sensitive data and its collection and sharing carries significant privacy risk.
What you can do: Deny location permissions to Disney apps on your device, and use the opt-out form to limit sharing of location-derived data with third parties.
Disney tracks you across third-party sites to serve targeted ads.
“Send you offers and promotions for our products and services or third-party products and services; Personalize content and experiences; Provide you with targeted advertising based on your activity on our sites and applications and on third-party sites and applications;”
Quoted verbatim from the agreement What this means: Disney uses your personal data to serve you targeted advertising not just on its own platforms but also on third-party sites and applications. This means your Disney activity can follow you around the web. The policy also allows sending promotions for third-party products and services, meaning your data profile is used to market non-Disney offerings to you.
What you can do: Opt out of targeted advertising via the "Your Privacy Choices" link on Disney properties, and review your ad preferences on third-party platforms (e.g., Google, Meta) where Disney may be targeting you.
All Disney-family brands can access and use your personal data independently.
“Other members of The Walt Disney Family of Companies may access your information where they perform services on behalf of the data controllers (as data processors) and, unless prohibited under applicable law, for use on their own behalf (as data controllers) for the purposes described in this policy.”
Quoted verbatim from the agreement What this means: Your personal data can be accessed and used independently by any member of the vast Walt Disney Family of Companies — which includes dozens of brands such as ABC, ESPN, Hulu, Marvel, National Geographic, Lucasfilm, and more. Each of these entities can use your data for their own purposes, not just to provide the service you signed up for. This is a very broad internal data-sharing arrangement.
What you can do: There is no direct opt-out from intra-company data sharing for service purposes; however, you can limit marketing use by updating your marketing preferences in your Disney account settings.
Disney uses your data to send you third-party product promotions.
“We may use information collected from you, or from devices associated with you, to: Provide you with the experiences, products, and services you request, view, engage with, or purchase; Communicate with you about your account or transactions with us and send you information or request feedback about features on our sites and applications or changes to our policies; Send you offers and promotions for our products and services or third-party products and services; Personalize content and experiences; Provide you with targeted advertising based on your activity on our sites and applications and on third-party sites”
Quoted verbatim from the agreement What this means: Disney uses your data not just to run its own services, but also to send you promotions for third-party products and to target you with ads based on your activity across Disney and non-Disney sites. This means your data is used to benefit third-party advertisers, not just to serve you directly. The scope of 'devices associated with you' means activity across multiple devices can be linked and used for this purpose.
What you can do: Log into your Disney account and opt out of marketing communications. Use the 'Do Not Sell or Share' opt-out to limit third-party targeted advertising.
Disney tracks your email opens and clicks to profile your interests.
“We may also use cookies or other tracking technologies within our communications to you (for example to see if they have been read or opened or to see what content you interact with and what links you follow) so that we can better match future communications to your interests. We may analyze online activities of registered guests across our websites and online services by use of cookies and other tracking technologies.”
Quoted verbatim from the agreement What this means: Disney tracks whether you open their emails, what links you click inside them, and what content you interact with. This data is combined with your broader browsing activity across Disney's many websites and services to build a profile of your interests. This tracking happens across all Disney-branded properties, which is a very large network.
What you can do: Opt out of marketing emails via your account settings. Use your browser's cookie controls or the consent management platform on Disney sites to limit tracking cookies.
Disney records you on camera at parks and records your phone calls.
“Still or video images captured by cameras or readers on or around our physical properties; and Call recordings when you call our reservation centers or other guest services phone numbers.”
Quoted verbatim from the agreement What this means: Disney records video of you when you visit physical properties like theme parks and resorts, and records your phone calls to guest services. These recordings are personal data and are retained under the same vague 'as long as necessary' retention policy. There is no specific disclosure about how long these recordings are kept or who can access them.
What you can do: Be aware that visiting Disney physical properties or calling guest services means you are being recorded. You can submit a data access or deletion request to find out what recordings Disney holds about you.
Disney collects voice, video, location, and inferred data about you.
“Geolocation data, including precise or approximate location information provided by a mobile device or other device or product interacting with or detected by our sites, applications, or physical properties, where we are permitted by law to process this information. Audio, electronic, visual, or similar information, including telephone call recordings, other voice recordings, and still or video images captured by cameras or readers on or around our physical properties. Inferences based on the above.”
Quoted verbatim from the agreement What this means: Disney collects sensitive categories of personal information including precise geolocation, audio/voice recordings, video images, and draws inferences from all of this. The US State Privacy Rights notice confirms these are among the categories that may be 'sold' or 'shared' for targeted advertising (except sensitive personal information as defined by law). The breadth of data types collected across both digital and physical interactions is unusually wide.
What you can do: Review and exercise your rights via usprivacy.disney.com. Limit app permissions on your device and be aware of data collection at physical Disney properties.
Disney buys extra data about you from outside data providers.
“We acquire information from other trusted sources to update or supplement the information you provided or we collected automatically, such as when we validate postal address information using third party services. Applicable law may require that you authorize the third party to share your information with us before we can acquire it.”
Quoted verbatim from the agreement What this means: Disney supplements the data you give them with information purchased or obtained from third-party data providers and social networks. This means Disney's profile of you may be richer than what you directly shared. The phrase 'applicable law may require' authorization implies that in many jurisdictions, Disney does this without needing your explicit permission.
What you can do: You can request to know what data Disney holds about you via the data subject rights portal. There is limited ability to prevent this enrichment outside of jurisdictions with strong data protection laws.
Disney shows contextual ads to children on its child-directed apps.
“show contextual advertising and ensure users do not see the same ads over and over again;”
Quoted verbatim from the agreement What this means: Disney's Children's Privacy Policy discloses that persistent identifiers collected from children are used to show contextual advertising. While behavioral advertising is restricted on child-directed properties, contextual advertising is still served to children. This means children using Disney apps and websites will see ads, even if those ads are not behaviorally targeted.
What you can do: Parents can review the list of child-directed Disney properties and their data practices. Contact Disney at [email protected] to ask about specific apps your child uses.
Fan art using Disney characters must be assigned to Disney.
“To the extent that we authorize you to create, post, upload, distribute, publicly display or publicly perform User Generated Content that requires the use of our copyrighted works, we grant you a non-exclusive license to create a derivative work using the specifically referenced copyrighted works as required for the sole purpose of creating such a work, provided that such license shall be conditioned upon your assignment to us of all rights worldwide in the work you create for the duration of copyright in the User Generated Content, in all formats and media known or unknown to date, including for use on Disney Products and on third party sites and platforms. If such rights are not assigned to us, your license to create derivative works using our copyrighted works shall be null and void.”
Quoted verbatim from the agreement What this means: If you create fan art or other derivative works using Disney's copyrighted characters or content, Disney requires you to assign all worldwide rights in that creation to them as a condition of being allowed to make it. In effect, any creative work you make using Disney IP belongs to Disney, not you.
What you can do: Avoid creating derivative works (fan art, remixes, etc.) using Disney IP if you want to retain any ownership rights in your creative output.
Subscriptions auto-renew and no refund is given when you cancel.
“You agree that your subscription will be automatically renewed and, unless you cancel your subscription, you authorized us to charge your payment method for the renewal term. You agree that we can change the terms of the subscription with advance notice to you and an opportunity for you to cancel. The period of auto-renewal will be the same as your initial subscription period unless otherwise disclosed to you. The renewal rate will be no more than the rate for the immediately prior subscription period, excluding any promotional and discount pricing, unless we notify you of a rate change prior to your auto-renewal, in which case you will have the right to cancel the renewal of your subscription. Unless otherwise disclosed when you subscribe, you have the right to cancel your Disney Product subscription . When a subscription is canceled, you will not receive a prorated refund, but you will continue to have access to the Disney Products until the end of the term during which you canceled the subscription.”
Quoted verbatim from the agreement What this means: Subscriptions auto-renew automatically and your payment method is charged unless you cancel first. Disney can raise the price before renewal — they just have to notify you. If you miss the notification, you may be charged the new higher rate. Cancellation does not trigger a prorated refund; you keep access until the end of the paid period.
What you can do: Set a calendar reminder before your renewal date to review pricing and cancel if needed; check your email for any price-change notices from Disney.
Disney can terminate your account without warning at any time.
“We may terminate or suspend your access to any Disney Products, and/or terminate this Agreement subject to the survival of terms as provided below, if required by law, or if we have objective reason to believe you have used the Disney Products in violation of any provision of this Agreement or any supplemental terms, and/or if you engage in or encourage infringement or any other illegal conduct as it relates to your use of the Disney Products.”
Quoted verbatim from the agreement What this means: Disney can suspend or terminate your account without prior notice if they believe you have violated any part of the agreement. Given how broadly the terms are written, this gives Disney wide discretion to cut off access to paid services like Disney+ without a refund obligation.
What you can do: Keep records of your purchases and subscriptions; if your account is wrongly terminated, contact Disney support and, if unresolved, consider disputing charges with your payment provider.
Disney can read, modify, or delete your posts and messages anytime.
“We may monitor, screen, post, remove, modify, store and review User Generated Content or communications sent through a Disney Product, at any time and for any reason, including to ensure that the User Generated Content or communication conforms to this Agreement, without prior notice to you.”
Quoted verbatim from the agreement What this means: Disney can read, store, modify, or delete anything you post or send through their platforms at any time, for any reason, without telling you. This includes private messages or chats sent through Disney services.
What you can do: Treat any content or communication on Disney platforms as potentially visible to Disney staff; do not share sensitive personal information through Disney messaging features.
Arbitration rules still apply even after you cancel your account.
“This arbitration agreement will survive the termination of your relationship with Disney, including any revocation of consent or other action by you to end your engagement with or use of any Disney Products or any communication with us.”
Quoted verbatim from the agreement What this means: Even after you cancel all Disney subscriptions, delete your account, and stop using all Disney products, the arbitration agreement still applies to any disputes that arise from your past use. You cannot escape the arbitration clause by simply leaving the service.
What you can do: The only way to avoid this is to mail an opt-out notice within 30 days of first agreeing to the terms, before any dispute arises.
All court cases must be filed in Los Angeles or New York only.
“You agree that any action at law or in equity arising out of or relating to this Agreement that is not subject to arbitration shall be filed, and that venue properly lies, only in the state or federal courts located in either Los Angeles, California or the borough of Manhattan, New York, New York, United States of America and you consent and submit to the personal jurisdiction of such courts for the purposes of litigating such action.”
Quoted verbatim from the agreement What this means: For any dispute that does make it to court (outside of arbitration or small claims), you must sue — or be sued — only in Los Angeles or New York. If you live elsewhere in the US or internationally, this could require expensive travel or hiring out-of-state legal counsel.
What you can do: Be aware of this geographic restriction before pursuing any legal action; consult a local attorney about whether this venue clause is enforceable in your jurisdiction.
Disney tracks you even when you are not logged in.
“We collect information through a variety of technologies, such as cookies, Flash cookies, pixels, tags, software development kits, application program interfaces, and Web beacons, including when you visit our sites and applications or use our applications on third-party sites or platforms using one or more devices, whether or not you are logged in or registered.”
Quoted verbatim from the agreement What this means: Disney tracks you using a wide array of technologies — including cookies, pixels, SDKs, and web beacons — even when you are not logged in or registered. This means anonymous visitors are still subject to tracking. The tracking occurs both on Disney's own properties and on third-party platforms where Disney apps are embedded.
What you can do: Use your browser's cookie controls or a privacy-focused browser extension to limit tracking, and visit Disney's Cookie Preference Centre to manage consent where available.
Your platform privacy settings don't apply to Disney's own data collection.
“Please keep in mind that when you provide information to us on a third-party site or platform (for example, via our applications), the information you provide may be separately collected by the third-party site or platform. The information we collect is covered by this privacy policy, and the information the third-party site or platform collects is subject to the third-party site or platform's privacy practices. Privacy choices you have made on the third-party site or platform will not apply to our use of the information we have collected directly through our applications.”
Quoted verbatim from the agreement What this means: If you use a Disney app on a third-party platform (e.g., a smart TV or app store), your privacy settings on that platform do not carry over to Disney's own data collection. Disney and the third-party platform each collect your data independently, and you must manage privacy choices separately with each. This creates a gap where users may believe they are protected when they are not.
What you can do: Review and set privacy preferences directly within each Disney app or website, not just at the platform level (e.g., your TV's privacy settings do not protect you from Disney's own data collection).
Disney uses your data for marketing without consent, citing "legitimate interests."
“Furthermore, your personal information may be used to fulfil our legitimate interests, such as to develop and improve our services, to provide you with a MyDisney account to access multiple online products and services, or to detect illegal activities. We also rely on our legitimate interests to execute our marketing strategies, such as creating aggregated segments & models for business analytics, including to look for similar audiences on online platforms that may enjoy our ads, or to ensure these platforms do not show our ads to you. You may object to the activities based on our legitimate interest at any time by contacting Disney as indicated below, but we might continue processing if we have compelling interests, which override your objections.”
Quoted verbatim from the agreement What this means: Disney uses "legitimate interests" as a legal basis to run marketing analytics and build audience models — including lookalike audiences on social platforms — without asking for your consent. While EU/UK users can object, Disney reserves the right to override those objections if it decides its interests are "compelling." This is a broad and user-unfriendly use of the legitimate interests basis.
What you can do: EU/UK users can object to legitimate-interest processing by emailing [email protected]; however, Disney may reject the objection, in which case you can escalate to your national data protection authority.
Disney builds detailed profiles of everything you watch and do.
“We collect information using analytics tools, including when you visit our sites and applications or use our applications on third-party sites or platforms. Information we obtain from a third party, such as a site or platform provider, about use of our applications on third-party platforms or devices; Activity information about your use, and the use by any person(s) you authorize through your account (for example, through the creation of profiles under your Disney+ or Hulu account), of our sites and applications, such as the content you view or post, how often you use our services, and your preferences;”
Quoted verbatim from the agreement What this means: Disney collects detailed activity data about everything you watch, view, post, and interact with across its services, including content viewed by sub-profiles on Disney+ and Hulu. This behavioral data is used to build a detailed picture of your preferences and is shared with third parties for advertising and analytics. The scope covers both online and offline interactions.
What you can do: Limit the number of sub-profiles on your account and review your activity history in account settings where available; opt out of targeted advertising to reduce how this data is used externally.
Hulu shares your viewing history and personal data with many business partners.
“When you allow us to share your personal information with another company, by electing to share your personal information with carefully selected companies so that they can send you offers and promotions about their products and services; When we provide you with relevant advertising on third-party sites and applications, we may share limited personal information about you, such as certain identifiers or hashed email address, with third parties. We may also share such information to provide you with and to measure relevant third-party advertising on our sites and applications. When you use the Hulu service, Hulu may share information with its business partners that help offer the Hulu service, including for example, its content programmers, distributors and device partners, and corporate owners; with your consent, Hulu may also share your viewing information together with certain personal information with these and other third parties;”
Quoted verbatim from the agreement What this means: Disney shares your personal information — including identifiers and hashed email addresses — with third-party advertisers. Hulu separately shares your viewing history and personal information with its business partners, distributors, and device partners. The scope of Hulu's sharing is particularly broad, covering content programmers and corporate owners.
What you can do: Review Hulu's specific privacy settings in your Hulu Account Page under Privacy and Settings. Use the opt-out controls on Disney properties to limit sharing of your identifiers with advertisers.
Your opt-out resets if you clear cookies or change browsers.
“If you are not logged in, your opt-out will be specific to the property and device or browser on which you made your election. For our other digital properties, to opt out, select "Do Not Sell or Share My Personal Information" or "Your Privacy Choices" on each. If you clear your tracking history or use another browser or device, you'll need to opt out again.”
Quoted verbatim from the agreement What this means: Opting out of data selling and sharing is not persistent. If you clear your browser cookies, use a different browser, or switch devices, your opt-out is erased and you must repeat the process on every Disney property. This design makes it easy for users to accidentally lose their opt-out status.
What you can do: Submit the opt-out form referenced in the policy to attempt a more durable opt-out. Enable Global Privacy Control (GPC) in a compatible browser, which Disney states it will honor. Log in to your Disney account before opting out so the preference can be tied to your account.
Disney collects device IDs from children and shows them contextual ads.
“show contextual advertising and ensure users do not see the same ads over and over again; On applicable child-directed websites and apps, or where we knowingly collect persistent identifiers from children, we take steps to ensure that the use of persistent identifiers is necessary to: maintain or analyze the functioning of the website or app; perform network communications; authenticate users of, or personalize the content on, the website or online service; serve contextual advertising on the website or online service or cap the frequency of advertising;”
Quoted verbatim from the agreement What this means: Disney collects persistent identifiers (such as device IDs and IP addresses) from children on child-directed apps and websites, and uses them to serve contextual advertising to children. While Disney states it does not use these for behavioral advertising or profiling, contextual ads are still served to children using their device identifiers.
What you can do: Parents can contact Disney at [email protected] or (877) 466-6669 to request deletion of a child's data or to withdraw consent for data collection. Review which child-directed apps your child uses and check their permissions.
You can request a copy of your data in a portable format.
“Right to Data Portability. You have the right to access your personal information in a portable format.”
Quoted verbatim from the agreement What this means: US state residents have a formal right to receive their data in a portable format, and the EU/UK privacy notices also reference data access rights. Disney provides regional portals and email contacts for exercising these rights. This is a positive user protection, though the process is manual rather than self-service.
What you can do: Submit a data portability request via usprivacy.disney.com (US) or the relevant regional portal listed in the Data Subject Rights Portal section.
Disney's kids' apps are independently certified for children's privacy compliance.
“TWDC's child-directed websites and mobile apps are included in PRIVO's Kids Privacy Assured COPPA Safe Harbor Certification Program ("the Program"). The Program certification applies to the digital properties listed on the validation page that is viewable by clicking on the PRIVO seal at the top of this policy. PRIVO is an independent, third-party organization committed to safeguarding children's personal information collected online.”
Quoted verbatim from the agreement What this means: Disney's child-directed properties are certified under PRIVO's COPPA Safe Harbor program, meaning an independent third party audits their children's privacy practices. This provides an additional layer of accountability beyond self-certification. Parents can contact PRIVO directly if they have unresolved concerns.
What you can do: If you have concerns about your child's data that Disney does not resolve, you can escalate to PRIVO at [email protected].
Using Disney content to train or develop AI tools is banned.
“with no right to reproduce, distribute, communicate to the public, make available to the public, or transform any Disney Product, including in connection with any use, creation, development, modification, prompting, fine-tuning, training, testing, benchmarking or validation of any artificial intelligence or machine learning tool, model, system, algorithm, product or other technology (”
Quoted verbatim from the agreement What this means: Disney explicitly bans using any of their content — movies, shows, images, scripts, code — to train, test, or develop AI tools. This is a broad restriction that covers even indirect uses like prompting or benchmarking AI systems. Violating this is treated as a breach of your license.
What you can do: Do not use any Disney content in AI workflows, including as training data, prompts, or evaluation benchmarks, even for personal or research purposes.
Bots, scrapers, and automated data collection are strictly banned.
“access, monitor, copy or extract the Disney Products using a robot, spider, script, or other automated means, including, for the avoidance of doubt, for the purposes of creating or developing any AI Tool, data mining or web scraping or otherwise compiling, building, creating or contributing to any collection of data, data set or database (other than for a public search engine's use of spiders for creating search indices to the extent not disallowed by Disney, including through the applicable robots.txt files or NOINDEX or NOFOLLOW meta-tags)”
Quoted verbatim from the agreement What this means: Disney prohibits any automated access to their platforms, including scraping, data mining, or bot-based monitoring. This applies even to building datasets or databases from Disney content. The only exception is public search engine indexing, and only where Disney has not blocked it.
What you can do: Do not use any automated tools, scripts, or bots to access or collect data from Disney's websites or apps.
Disney collects sensitive data like health and biometrics but doesn't sell it.
“As described above, we may process "sensitive personal information" (as defined by applicable law), including information revealing race; ethnicity; racial, ethnic, or national origin; citizenship; immigration status; religious beliefs; mental or physical condition or health diagnosis; sexuality; sexual orientation; status as transgender or non-binary; status as a victim of a crime; genetic data; biometric information; a child's personal information; and precise geolocation. We do not sell or share this information and we do not collect, use, or disclose sensitive personal information for purposes other than those permitted by applicable laws, including Section 7027(m) of the California Consumer Privacy Act regulations.”
Quoted verbatim from the agreement What this means: Disney acknowledges it may collect highly sensitive categories of data including health information, sexual orientation, immigration status, biometric data, and children's personal information. Disney states it does not sell or share this sensitive data and limits its use to legally permitted purposes. This is a meaningful protection, though the fact that such data is collected at all warrants awareness.
What you can do: Be mindful of what information you share with Disney services, particularly in contexts like health-related features or identity verification, as this data is retained even if not sold.
US residents can access, correct, or delete their data via a portal.
“Right to Data Portability. You have the right to access your personal information in a portable format. Right to Delete You have the right to request that we delete the personal information we have collected from or about you. Right to Correct You have the right to request that we correct inaccurate personal information that we maintain about you. Making a Request to Know, Access, Delete, or Correct Your Personal Information or Request a List of Categories or Specific Third Parties To make a request to know, access, delete, or correct, or to request a list of categories or specific third parties, please visit usprivacy.disney.com. To submit a request by phone, you may call (877) 466-6669. Before completing your request, we may need to verify your identity. We will send you a link to verify your email address and may request additional documentation or information solely for the purpose of verifying your identity.”
Quoted verbatim from the agreement What this means: US state residents (in the listed states) have the right to access, export, correct, and delete their personal data. Disney provides a dedicated portal (usprivacy.disney.com) and a phone number to submit these requests. These rights are meaningful protections, though they require identity verification and Disney may decline requests in some circumstances.
What you can do: Visit usprivacy.disney.com or call (877) 466-6669 to exercise your rights to access, correct, or delete your personal data.
Disney does not target ads at users it knows are under 18.
“We do not "sell," "share," or process for "targeted advertising" the personal information of known minors under 18 years of age.”
Quoted verbatim from the agreement What this means: Disney explicitly commits not to sell, share, or use for targeted advertising the personal data of users it knows to be under 18. This is a stronger protection than the legal minimum in many US states (which only requires this for under-13s). Combined with the COPPA-compliant children's privacy policy and PRIVO certification, this represents meaningful child protection.
What you can do: Ensure your child's account accurately reflects their age so Disney's protections for minors are correctly applied.
Your data is transferred globally, including to countries with weaker privacy laws.
“We operate globally and may transfer your personal information to individual companies of The Walt Disney Family of Companies or third parties in locations around the world for the purposes described in this privacy policy. Wherever your personal information is transferred, stored or processed by us, we will take reasonable steps to safeguard the privacy of your personal information. These steps may include implementing standard contractual clauses where recognized by law, obtaining your consent, or other lawful means of transferring personal information.”
Quoted verbatim from the agreement What this means: Disney transfers your personal data to countries around the world, including countries that may have weaker data protection laws than your home country. The safeguards mentioned (standard contractual clauses, consent) are standard legal mechanisms but do not guarantee the same level of protection you would have at home.
What you can do: EU and UK residents have additional protections under GDPR and can contact [email protected] with concerns about international data transfers.
Disney provides regional portals to access, correct, or delete your data.
“You have a number of rights set forth in Brazil's data protection legislation including but not limited to the right to confirm the existence of the processing of your personal data, request access to, change, or remove your personal data, or to change your marketing preferences (including withdrawing your consent at any time) – please see our Privacy Policy to learn more about managing your marketing preferences or deleting your account. You have a number of rights including the right to request access to, change, or remove your personal data, or to change your marketing preferences (including withdrawing your consent at any time) You have a number of rights including the right to request access to, obtain a copy of, correct or remove your personal information, limit processing pending verification of certain circumstances, or stop processing which is based on our legitimate interests.”
Quoted verbatim from the agreement What this means: Disney provides regional rights portals for users in the US, EU/UK, EMEA, Brazil, and Asia-Pacific to request access to, correction of, or deletion of their personal data. This is a positive user protection, giving users meaningful control over their information across multiple jurisdictions.
What you can do: Visit the Data Subject Rights portal relevant to your region (linked in Document 3) to exercise your rights to access, correct, or delete your personal data.
Frequently asked questions
Is Disney+'s Terms & Conditions agreement fair?
- BeforeYouClick grades Disney+ E on an A–E scale, where A is the fairest. Its agreement contains 11 critical clauses, 19 warnings and 9 good practices.
What are the biggest problems with Disney+'s terms?
- The most serious clauses we flagged are: Personal Data Sold to Advertisers and Partners, No Fixed Limit on Data Retention and Cookie Policy Changes Without User Consent.
How long does it take to read Disney+'s terms?
- Disney+'s agreement takes about 42 minutes to read in full, across 39 clauses we reviewed. The summary on this page covers the same ground in under a minute.
When was Disney+'s agreement last analyzed?
- We last read Disney+'s Terms & Conditions on August 17, 2026. Companies change their terms without notice, so check the original document for the current version.
Is this analysis legal advice?
- No. This analysis is AI-generated, can be incomplete or wrong, and is not legal advice. Use it as a starting point and read the original agreement before you agree to it.
More agreements to read
- NetflixStreamingGrade E
- SpotifyStreamingGrade E
- PosteoProductivityGrade A
- Mullvad VPNSecurityGrade A
- MurenaSecurityGrade B
- TutaProductivityGrade B