Memos

X replaces its $200 entry-level API plan with a pay-per-use model

tam kien duong — Tue, 28 Apr 2026 00:00:00 +0000

X ▪ Developer Terms ▪ April 28, 2026

X introduced a new pricing model for its API called the “self-serve use”. It is intended for “hobbyists, commercial prototyping, initial development, early-stage X product integrations, and supporting applications with a limited number of end-users”, developers can now read and write content to the service and pay accordingly. Previously, it was a flat-rate system with only two options: a first one at $200 and a second one at $5,000, and restrictive rate-limiting. Commercial uses still have to subscribe to the pre-existing “Enterprise plan”.

Zalando excludes personalised items from return policy

tam kien duong — Mon, 27 Apr 2026 00:00:00 +0000

Zalando ▪ Terms of Service ▪ April 27, 2026

Zalando excluded custom-made items from its returns and cancellation policies. These include “goods made to your specifications and/or clearly personalised”.

In the same changes, Zalando also mentioned QR codes as an alternative to the classic return shipping label. Customers can download both options from their account.

YouTube excludes Image Posts as revenue source for Shorts creators

Saumyaa Naidu — Wed, 22 Apr 2026 00:00:00 +0000

YouTube ▪ Content Monetisation Policy ▪ April 22, 2026

YouTube added revenue associated with Image Posts appearing in the Shorts Feed to the list of revenue sources that are not included in the Creator Pool. The list is part of YouTube’s Shorts monetisation policies.

The Creator Pool is the revenue from ads running between videos in the Shorts Feed added together each month excluding the cost of music licensing. In December, YouTube began testing the addition of Image Posts or still image carousels as part of the Shorts Feed.

Snapchat lowers its standards for monetising content

tam kien duong — Mon, 13 Apr 2026 00:00:00 +0000

Snapchat ▪ Content Monetisation Policy ▪ April 13, 2026

Snapchat revised several sections of its rules regarding eligibility for monetising content creation and publication.

The changes are mainly deletions of indications of mandatory qualitative rules. For example, “face must be clearly visible” but not “throughout the duration of the video” anymore. It is now unclear what counts as transformative commentary or reaction videos. For example, the previous mention of “generic or static reactions” has been removed. The audio only has to “relate to the content” and doesn’t have to “be clearly audible and directly relevant to the content”.

“Formulaic or unoriginal template-based content” was previously mentioned as not monetisable. Since it was removed, it allows for the possibility of monetising AI-generated or edited content. As such, the only mention of AI tools has also been removed from the list of disqualifying criteria.

Snapchat clarifies activity tracking for personalising ads

Saumyaa Naidu — Fri, 03 Apr 2026 00:00:00 +0000

Snapchat ▪ Privacy Policy ▪ April 3, 2026

In its Privacy Policy, Snapchat removed the use of similar information from “Snapchatters” in the same household. Snapchat will only use this information from “friends” of the user now. It uses information about their interactions with ads or content to determine whether to show those ads to the user. Snapchat also clarified it won’t use inferences about gender cohort, interests, or friends’ interests (previously “interests of other people associated with you”) for teen accounts in the EU, UK, Norway, and Switzerland. These changes are part of Snapchat’s broader activity tracking, which involves making inferences for ad personalisation.

YouTube uses ad services to analyse data from other sites and apps

tam kien duong — Thu, 02 Apr 2026 00:00:00 +0000

YouTube ▪ Privacy Policy ▪ April 2, 2026

Google Ads are now explicitly part of the services advertised, collecting data on YouTube and other services on Google’s platform. Only Google Analytics was previously mentioned in this context. A change in the section implies that analytics and measurements are not limited to “other sites or apps that use Google’s ad services” but any company service.

Other minor language changes include replacing “collected” with “shared” and extending linking data from visits on other apps. Additionally, clarifying that tracking isn’t only about “cookies”.

Bing revises its data retention policy

tam kien duong — Wed, 01 Apr 2026 00:00:00 +0000

Bing ▪ Privacy Policy ▪ April 1, 2026

Bing applied significant changes in its data use policy.

A paragraph specifying the retention policy for personalised advertising was removed. It was set at 13 months unless the user consented to a longer period.

Another paragraph about de-identification of “stored search query” was removed. IP addresses were supposed to be deleted after 6 months, and session identifiers after 18 months.

The introductory paragraph of the section has been updated to reintroduce retention of personal data for “other legitimate purposes, such as operating our business, meeting our contractual and legal obligations, improving and developing our products and services, protecting the safety and security of our systems and customers, and resolving disputes”.

The previous version only referred to legal obligations. This change expanded the initial scope to include improving products, business operations, and security. Criteria to determine retention periods are now summarised into three categories: purpose, nature and sensitivity, and obligations.

WhatsApp collects more data from customer support and the official chatbot

tam kien duong — Fri, 27 Mar 2026 00:00:00 +0000

WhatsApp ▪ Privacy Policy ▪ March 27, 2026

WhatsApp expanded the scope of data collection in its privacy policy regarding Ireland Contacting customer service or the service itself now collects information about the device and the app (e.g. “version of the app” or “error codes” ) are now collected. Prior to this, only usage data (e.g. searches made on the service help centre) and given feedback and responses to surveys were the only data transmitted.

Engaging with the integrated chatbot now also transmits “log and troubleshooting information” and “usage information” to Meta, WhatsApp’s parent company, along with previously disclosed data, including “general location information (…), device and connection information” to Meta.

YouTube TV lifts the prohibition on NFL football games on portable devices

tam kien duong — Thu, 12 Feb 2026 00:00:00 +0000

YouTube ▪ Commercial Terms ▪ February 12, 2026

YouTube TV changed the language of its commercial terms to reflect a change in its pricing model. The service has replaced its “base plan” with four different plans. YouTube TV has removed the mention that it was “restricted from distributing NFL football games on any portable device”. The deletion is in a paragraph that states that “YouTube TV content may not always be available or may not be available on all devices”.

A new section has also been added to the service that states that it may “provide promotional offers from time to time”. Once the promotional period ends, subscribers will be charged the standard price of the YouTube TV plan.

These changes only apply to the US jurisdiction.

YouTube TV is a subscription service that provides US cable TV content through YouTube. These changes occurred after the announcement of a revamp of YouTube TV around a set of plans. These offers are currently only available to US users.

Telegram prohibits collecting data for AI use

tam kien duong — Tue, 03 Feb 2026 00:00:00 +0000

Telegram ▪ Terms of Service, Developer Terms ▪ February 3, 2026

Telegram added an explicit prohibition against data scraping that applies to ‘all users, businesses, and third-party services accessing the platform’. The text refers to the Content Licensing and AI Scraping Terms which explicitly targets data acquisition to ‘train, fine-tune, validate or otherwise engage in the development, enhancement, benchmarking or deployment of artificial intelligence, machine learning models and similar technologies’.

Telegram is a messaging app founded by Pavel Durov and his brother Nikolai. It was marketed as a privacy-focused and secure app. However, this change also serves as a reminder that group chats are not end-to-end encrypted. For example, bot developers can access chat histories and ongoing conversations in order to provide their services. Chatbots can use user interactions to gather data and improve their services in a way that is indirectly related to the user (such as training data and fine-tuning). This may lead to the unintentional disclosure of sensitive information further along the AI pipeline. Despite security concerns and the availability of official alternatives, Telegram was notoriously popular with French officials.

A similar modification has also been detected in the developer terms.

X focuses its automated enforcement on child protection in the UK

tam kien duong — Tue, 27 Jan 2026 00:00:00 +0000

X ▪ Community Guidelines ▪ January 27, 2026

X added clarifications regarding the automated enforcement of child protection regulations. This change has only been detected in the UK jurisdiction, and its language and references are specific to this area.

The introduction to the methodology of “automated content enforcement” mentioned the use of “artificial intelligence models” alongside “heuristics, and machine learning algorithms”. This change does not significantly impact the system and mainly updates the latest language.

A short explanation of how the supervised machine learning model operates has been replaced by a longer explanation in dedicated paragraphs. The example mostly focuses on how automated decisions are used to protect children. It insists on using both internal tools and third-party services. Additionally, it notes that “proprietary technology is steadily reducing the burden on people to report this content”.

Two sections have been added on reporting non-compliance with the UK’s Online Safety Act and on issues concerning “proactive technology”. Mostly, it provides links to relevant forms to file reports.

Seven occurrences of the term “content harmful to children” have been added throughout the document.

The majority of these modifications focus on protecting children from exposure to sensitive content and children’s protection. This must be balanced with the creation of synthetic content that depicts children.

X, formerly known as Twitter, is a social media platform owned by Elon Musk. Grok is a generative artificial intelligence service run by xAI, X’s parent company, that is fully integrated into X. In July 2025, a new version of its image and video generation tool was released, including a “spicy” mode that removes protections regarding adult content. Since December 2025, media and regulators have reported on the persistent use of these tools to produce sexually suggestive images of young women or girls, which are then shared through X.

On January 12, 2026, the UK regulator for communication services, Ofcom, launched an investigation into this service. Other regulators, including the EU Commission, are also investigating the same issue.

TikTok rewrites all US terms following the transfer of its USA operations

tam kien duong — Fri, 23 Jan 2026 00:00:00 +0000

TikTok ▪ Commercial Terms, Data Processor Agreement, Developer Terms, In-App Purchases Policy, Law Enforcement Guidelines, Privacy Policy, Terms of Service ▪ January 23, 2026

On January 23, 2026, TikTok revised multiple policy documents in several jurisdictions. The updates established a new legal entity, “TikTok USDS Joint Venture LLC”, as the new “operator of the Platform in the United States”. Most importantly, the terms that applied globally with a few paragraphs defining local specificities, now have a dedicated US version that applies only to that country.

The updated privacy policy for this US entity (also applicable to TikTok Ad Network) replaced all references to the “Platform” with “Service”. It now includes data collection from AI interactions. The tracking of precise location information has been part of the policy in Europe, the United Kingdom and Switzerland since October 2025.

The data collection has been expanded to include as sources:

the duration and frequency of use;
engagement with other users;
interactions with websites while using the in-app browser;
information from sellers and payment providers;
information on the delivery of products purchased through TikTok’s shopping features.

TikTok has added shopping features and age verification as purposes for data collection, and widened information sharing with several new service providers, business partners and their affiliates to “facilitate a global and interoperable experience”. The policy states that the US entity will share certain data with international TikTok operations for interoperability “in compliance with applicable laws”.

Documents from other jurisdictions (Ireland, the United Kingdom, Australia and Canada) have been less affected. They mainly reflect changes in the service’s contact points in the US and update links to point to new “global” versions of the terms that now differ from the US version. The Developer Terms, however, contain a new section named “TikTok Developer US Data Sharing Agreement”.

This establishment of a US-based entity for TikTok has come into place to address national security concerns and avoid a potential ban. TikTok is the object of scrutiny regarding digital rights, election integrity, misleading political information and direct influence over young audiences. But beyond these points, the United States of America have treated TikTok’s case as a matter of national security, in a long-standing conflict with China that culminated with Oracle buying TikTok’s US operations, leading to these changes.

Starlink allows third-party collaborators to use personal information globally for training AI models and removes mentions of not selling user data

tam kien duong — Fri, 16 Jan 2026 00:00:00 +0000

Starlink ▪ Privacy Policy ▪ January 16, 2026

On January 16, 2026, Starlink introduced several changes regarding the use of personal data.

A previous memo emphasized that this policy shifted from the website to the company’s telecommunication services. The changes described by the memo also mentioned that de-identified data are now ‘from and about’ users.

Personal information is now used “to train our machine learning or artificial intelligence models” for various purposes. They are listed in the same document, which includes “to comply in good faith with applicable laws, legal processes, and lawful government requests” and “to use data analytics to debug, optimize, and improve our products and services, marketing, customer relationships and experiences”.

“Third-party collaborators” have been added along with affiliates and service providers. This opens up the ability to share data horizontally with partners, both inside and outside the parent company. Such third-party collaborators are not defined in the document.

Starlink is a service provided by SpaceX, a company owned by Elon Musk. He is the CEO, CTO, and chairman of the company. He is also the founder and CEO of xAI, a company focused on generative artificial intelligence with the infamous Grok. This software has recently gained attention for enabling the creation of CSAM material. xAI is also the parent company of X, formerly known as Twitter. The website was a prominent and popular microblogging platform. Several governments and companies still use it to host their official communications.

Additionally, users now have to opt out of “the use of your data for artificial intelligence model training by third-party collaborators” if they don’t want their data to be processed.

Finally, the set of changes also included the removal of standard text claiming that the service was “not knowingly selling user information”. This leaves the question of whether they do it now.

Bing applies its intellectual property policies to all types of ads, but adult content remains restricted to search

tam kien duong — Thu, 08 Jan 2026 00:00:00 +0000

Bing ▪ Privacy Policy ▪ January 8, 2026

On January 8, 2026, Bing extended the scope of its intellectual property policies to apply to ‘all ad types’, instead of just ‘Search’. The previous version stated that ‘Adult is not allowed in other ad types’, which include ‘native’, ‘display’, and ‘video’. The updated guidelines outline specific standards for ‘counterfeit policy’ and ‘trademark used in the text of the ad or keywords, as well as imagery contained in the creative’. The modification primarily streamlines the implementation of this policy across the various ad networks that Bing is operating.

However, the adult content policy remains in place for search. The document specifies that adult advertisements are defined by the content of the ad copy and the target website. It also provides a list of countries that may be targeted.

Search ads appear in search results on sites that use Bing, such as DuckDuckGo and Ecosia. This channel is not only limited to text, but also includes images. Search results being limited by the keywords used during interactions with the search engine makes them more reliable in terms of consent. On the contrary, other types of ads are prone to unsolicited displays of content. This partially solves the problem of displaying age-inappropriate content to young audiences. It also ensures that the search engine continues to serve as a conduit for web traffic through paid advertising.

The adult content policy makes it mandatory for concerned ads to be mediated by an age-gating mechanism on the publisher’s responsibility.

Age verification is a controversial issue in many jurisdictions. The efficacy of shielding youth audiences, the practicality of implementing such measures, and the potential for perpetuating surveillance systems are all matters of concern.

Shein specifies that the return window depends on third-party sellers

tam kien duong — Wed, 07 Jan 2026 00:00:00 +0000

Shein ▪ General Conditions of Sale ▪ January 7, 2026

Shein updated its return and refund policies, providing more specific details in its general conditions of sale. It clarified that the return period will vary based on third-party sellers, if applicable. This language is typical and consistent with other similar documents.

Return and refund rules are strictly defined in Europe. In contrast, in the United States, they are more flexible and demand clarity only as a best practice.

Shein is a rapidly growing Chinese online marketplace that initially specialized in fast fashion products but also extended into other kinds of goods. In the context of low-cost fast fashion, return and refund policies are crucial due to lax quality control standards and misleading product pages. Shein also attempted to open a physical store in Paris, which sparked significant controversy.

Telegram expands its age eligibility requirement to Australian users

tam kien duong — Wed, 07 Jan 2026 00:00:00 +0000

Telegram ▪ Terms of Service ▪ January 7, 2026

Telegram expanded its age eligibility requirement by adding Australia to the regions where users must be at least 18 years old to sign up, alongside the EU and the United Kingdom.

The wording was also revised. Whereas the previous policy referred to “citizens of EU countries and the United Kingdom,” linking the restriction to nationality, the updated text applies to “users,” making the requirement dependent on the user’s location rather than citizenship.

Australia’s Online Safety Act 2021 introduced age verification. Telegram was fined AUD 957,780 for non-compliance in February 2025. Since November, Telegram has been challenging the fine on technical, legal and freedom of speech grounds.

Telegram is a messaging application founded by Nikolai and Pavel Durov, two Russian entrepreneurs. Telegram has come under intense scrutiny around the world for being a platform that facilitates many illegal activities, including the sale of illegal pornography and the drug trade. Marketed as a privacy-focused messaging app, it also benefits Durov’s anti-Putin reputation and the company’s “refusal to hand over data in response to lawful orders”. Since then, and especially since Durov’s arrest by the French authorities, Telegram has started cooperating with government agencies and modifying its policies.

YouTube allows viewers in Taiwan to buy Jewels

tam kien duong — Tue, 06 Jan 2026 00:00:00 +0000

YouTube ▪ Content Monetisation Policy ▪ January 6, 2026

On January 6, 2026, YouTube expanded its Virtual Items Program to viewers in Taiwan. Previously, eligibility was described using the term “US viewers”, which was ambiguous and did not clearly specify whether it was based on residency or location. The updated language clarifies that eligibility is based on the user’s location.

The Virtual Items Program is a microtransaction mechanism that allows viewers to purchase bundles of Jewels, which they can transform into digital items. These items can then be sent as tokens of ‘appreciation in real-time’ during vertical live streams. Items received by the creator, as Rubies, are converted into Google AdSense credit at a rate of 1 Ruby per USD0.01. Google AdSense is an online advertising program provided by Google platform.

AliExpress allows the sale of decorative plants in Poland, France, Germany, Italy and Spain

tam kien duong — Sun, 04 Jan 2026 00:00:00 +0000

AliExpress ▪ Marketplace Sellers Conditions ▪ January 4, 2026

On January 4, 2026, AliExpress modified its Marketplace Sellers Conditions to allow local sellers in Poland, Germany, France, Italy, and Spain to sell live ornamental plants. The policy now permits these sellers to ‘sell live plants within the country if they meet the compliance requirements’. An announcement released on October 14, 2025 stated that ‘plant seeds, living plants only for ornamental purposes rather than food purposes’ are authorized. ‘Agricultural and vegetable’ products are still prohibited for sale

AliExpress is a serious competitor for Amazon in the field of online shopping. The Chinese company has recently started delivering fresh food in South Korea and in London.

In November 2023, the European Union was already investigating AliExpress for distributing ‘illegal products such as fake medicines, non-compliant food, and ineffective dietary supplements’.

Facebook now uses AI interactions to personalise experiences and ads

Saumyaa Naidu — Sun, 28 Dec 2025 00:00:00 +0000

Facebook ▪ Privacy Policy ▪ December 28, 2025

Facebook included AI at Meta as a Meta Product to which its privacy policy now applies. The generative AI features and experiences across Meta Company Products are collectively referred to as AI at Meta. The platform will collect information from interactions with AI at Meta, and also share it on Meta Products and with integrated partners. These interactions will include prompts, responses received, actions requested, and feedback given to AI. Facebook will also record information provided by others about a user to AI at Meta, including messages and content that the user may have shared.

In the revised policy, information collected across Products will be used to personalise features, content, and ads in AI at Meta, among other Meta Products. The information will also be shared with other Meta Companies to personalise features and integrations.

Furthermore, interactions with AI at Meta and related metadata such as content and messages will be used for purposes such as personalising and improving Meta Products, promoting safety, integrity, and security, providing measurement, analytics, and business services, personalising ads on Meta Audience Network, undertaking research for social good, and sharing information with others, including law enforcement.

Information collected from user activities on Meta products including posts, comments, audio etc, interactions with AI at Meta, and information from partners, vendors, and third parties, will all be used for the newly introduced purpose of developing and improving AI at Meta. Facebook removed the clarification that it will not share personally identifying information, such as username, unless included in messages to the AIs, with third-parties.

Besides the updates in use of data from AI at Meta, Facebook has also expanded information collection on users’ connections and interactions both on and off Meta Products, and on the online or in person use of third party products and services. The platform added data providers as a third-party public source for datasets which will now be additionally used for undertaking analytics.

The policy no longer provides details of information used to decide which ads and commercial content to show. It also removed factors that influence the personalisation of Facebook Feed and links to manage it. The policy clarifies now that search engines and other third parties use public content about a user (name, username, profile picture, etc.) according to their own terms and policies, not Meta’s. Finally, for non-account holders, Facebook added that it can remove content that violates their terms and policies.

Meta is among the several major platforms that have introduced updates related to AI data use, including Google, LinkedIn, and Open AI. Given this shift, researchers have highlighted concerns such as privacy risks, manipulation using vulnerabilities, and a lack of users’ control over their data and experience on platforms.

TikTok updates its Developer Terms to introduce Commercial Content Library access, clarify research purposes, and reorganize core definitions

Asma Sifaoui — Fri, 26 Dec 2025 00:00:00 +0000

TikTok ▪ Developer Terms ▪ December 26, 2025

TikTok updated its Developer Terms of Service with targeted but consequential revisions that clarified access conditions, introduced a new data category tied to the EU Digital Services Act, and restructured core definitions governing developer use of TikTok services.

The update strengthens the acceptance clause by replacing permissive language with an explicit prohibition. Where the prior version stated that users who do not agree to the terms should not access the Developer Services, the revised text now states that users who do not agree are not permitted to access or use them. This change sharpens the contractual boundaries around consent and access.

TikTok also introduces a new defined dataset, “CCL Data,” referring to advertising and commercial content made available through the Commercial Content Library API. Alongside this, the company adds a new definition of “CCL Purposes,” explicitly framing the use of this data as supporting supervision and research into risks associated with online advertising, including illegal ads, manipulation, and disinformation with foreseeable impacts on public health, security, civic discourse, political participation, and equality. The Commercial Content Library API itself is newly defined and explicitly linked to Article 39 of the EU Digital Services Act, signaling alignment with statutory transparency obligations.

In addition, the Definitions section is reorganized and renumbered without materially changing the substance of most existing terms. Definitions for Developer Content, End Users, TikTok API, Developer Documentation, Developer Services, Sample Code, SDKs, TikTok Services, and TikTok Information are reinserted in a revised order, with minor wording adjustments but no substantive expansion of rights or obligations.

Overall, the changes do not broaden developer permissions but instead formalize a compliance-oriented data access pathway tied to EU law, clarify enforcement language around acceptance of the terms, and structurally reorganize definitions to accommodate the newly introduced Commercial Content Library framework.