3 ms·

Here in the US, it's absolutely allowed. Walmart, for example, will by default add in-store purchases using a credit card (and no other identifying information

Here in the US, it's absolutely allowed. Walmart, for example, will by default add in-store purchases using a credit card (and no other identifying information) to the purchase history on a Walmart.com account set up with the same credit card. You can only disable this tracking by going into Account > Settings > Privacy > Data Sharing in your Walmart.com account, where you'll find an option that states "Allow us to automatically add store purchases to your purchase history using credit card."

cyberax 1y ago
That's because you allowed Walmart to do that when you signed for the account. It's buried somewhere in the ToS. They are not allowed to track you when you don't _have_ an account. With Apple Pay or Android Pay they won't even be able to do that because they get anonymous tokens and not the card number.
- iwanttocomment 1y ago
  The Walmart/Walmart.com TOS and Privacy Policy documents only say: > We collect your personal information from technology we use in and outside of our stores. For example, our point-of-sale terminals process your credit card information when you complete your purchase [...] Which is pretty obvious. Nothing about them explicitly tracking in-store purchase history via credit card numbers, which as above, they certainly do and allow you to disable in your account settings. As another example, southern grocer H-E-B is famous for not having loyalty cards and tracking in-store customer behaviors via credit card number, regardless of whether you have an HEB.com account. They then sell that data to vendors. [0] This NYT article from several years ago verifies that Target ties all credit card purchases to a unique "guest ID". [1] Can you cite the US federal regulation or Visa/Mastercard TOS that prohibits tracking customer purchase behavior by credit card number without consent? There may be state or local statutes I'm unaware of, but I'm confident there's nothing on a country-wide level. You are absolutely correct that Apple Pay and Android Pay do not allow tracking in this manner due to anonymous tokenizing. But that's nothing new - going back to the subject of the article, tracking generally isn't possible with cash transactions as well. [0] https://www.pmidpi.com/blog/newsletter/h-e-b-releasing-customer-data-for-purchase-through-circana/ https://www.pmidpi.com/blog/newsletter/h-e-b-releasing-custo... [1] https://www.nytimes.com/2012/02/19/magazine/shopping-habits.html https://www.nytimes.com/2012/02/19/magazine/shopping-habits....
  - cyberax 1y ago
    > The Walmart/Walmart.com TOS and Privacy Policy documents only say Neither applies to in-person transactions. You don't sign anything when you enter Walmart. The rules are specified in PCI-DSS and also there are explicit laws in many states. There is wording that the card details or derived information can only be stored for legitimate business or legal reasons (i.e. associated with the transaction itself). > If you use a credit card or a coupon, or fill out a survey, or mail in a refund, or call the customer help line, or open an e-mail we’ve sent you or visit our Web site, we’ll record it and link it to your Guest ID You need to have a ToS acceptance somewhere along the chain. They can't use credit cards without notifying you.
    - deleted 1y ago
      [deleted]

cyberax 1y ago

That's because you allowed Walmart to do that when you signed for the account. It's buried somewhere in the ToS. They are not allowed to track you when you don't _have_ an account. With Apple Pay or Android Pay they won't even be able to do that because they get anonymous tokens and not the card number.

iwanttocomment 1y ago
The Walmart/Walmart.com TOS and Privacy Policy documents only say: > We collect your personal information from technology we use in and outside of our stores. For example, our point-of-sale terminals process your credit card information when you complete your purchase [...] Which is pretty obvious. Nothing about them explicitly tracking in-store purchase history via credit card numbers, which as above, they certainly do and allow you to disable in your account settings. As another example, southern grocer H-E-B is famous for not having loyalty cards and tracking in-store customer behaviors via credit card number, regardless of whether you have an HEB.com account. They then sell that data to vendors. [0] This NYT article from several years ago verifies that Target ties all credit card purchases to a unique "guest ID". [1] Can you cite the US federal regulation or Visa/Mastercard TOS that prohibits tracking customer purchase behavior by credit card number without consent? There may be state or local statutes I'm unaware of, but I'm confident there's nothing on a country-wide level. You are absolutely correct that Apple Pay and Android Pay do not allow tracking in this manner due to anonymous tokenizing. But that's nothing new - going back to the subject of the article, tracking generally isn't possible with cash transactions as well. [0] https://www.pmidpi.com/blog/newsletter/h-e-b-releasing-customer-data-for-purchase-through-circana/ https://www.pmidpi.com/blog/newsletter/h-e-b-releasing-custo... [1] https://www.nytimes.com/2012/02/19/magazine/shopping-habits.html https://www.nytimes.com/2012/02/19/magazine/shopping-habits....
- cyberax 1y ago
  > The Walmart/Walmart.com TOS and Privacy Policy documents only say Neither applies to in-person transactions. You don't sign anything when you enter Walmart. The rules are specified in PCI-DSS and also there are explicit laws in many states. There is wording that the card details or derived information can only be stored for legitimate business or legal reasons (i.e. associated with the transaction itself). > If you use a credit card or a coupon, or fill out a survey, or mail in a refund, or call the customer help line, or open an e-mail we’ve sent you or visit our Web site, we’ll record it and link it to your Guest ID You need to have a ToS acceptance somewhere along the chain. They can't use credit cards without notifying you.
  - deleted 1y ago
    [deleted]