Xbox Gamertag
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
A gamertag lookup site that takes Microsoft login data, usage IDs, and ad-partner tracking; you can disconnect and ask them to delete.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Usage data, device IDs, and—if you sign in—Microsoft name, email, gamertag, and profile info.
Read the exact line
Privacy policy
“Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit”
Training
They use it to run the site, verify gamertags, improve the service, send marketing, and show ads.
Read the exact line
Privacy policy
“To identify You when You return, to show that Your gamertag has been verified as Yours, to operate, secure, analyse and improve the Service, and to communicate with You.”
Sharing
Service providers, affiliates, business partners, ad partners, and Cloudflare can get data; a verified badge is public.
Read the exact line
Privacy policy
“We may share Your personal information with Service Providers to monitor and analyze the use of our Service, to contact You.”
Kept
Microsoft login data is kept while connected; credentials are deleted when you disconnect; other data length is vague.
Read the exact line
Privacy policy
“We keep this information for as long as Your account remains connected. If You disconnect, the credentials We hold are deleted immediately.”
Controls
You can disconnect, opt out of marketing email, clear cookies, or email them to access, export, or erase data.
Read the exact line
Privacy policy
“You can also disconnect there by choosing "Disconnect my account", which deletes the credentials We hold for You”
Fine print
They will post policy changes and may email you first; no terms here on suing, refunds, or closing accounts.
Read the exact line
Privacy policy
“We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Disconnect your Microsoft account
Your account page, choose "Disconnect my account"
Opt out of marketing email
Your account page, or the unsubscribe link in any marketing email
Revoke the app at Microsoft
account.live.com/consent/Manage
Ask them to access, export, or erase your data
Email contact@xboxgamertag.com
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
Ad companies can track you with cookies and codes tied to your signed-in account.
Read the exact line
Privacy policy
“Our advertising partners may use cookies, similar technologies and identifiers to deliver, measure and select advertising, including identifiers derived from information associated with Your account where You have signed in.”
For example, after you sign in, an ad network could still target you on this site even if they never see your email.
They can give your information to other companies they work with, not only their own vendors.
Read the exact line
Privacy policy
“We may share Your information with Our business partners to offer You certain products, services or promotions.”
For example, a partner running a promotion could get your details so they can market to you.
Microsoft login can hand over more than a gamertag, including activities or a contact list if that is available.
Read the exact line
Privacy policy
“If You decide to register through or otherwise grant us access to a Third-Party Social Media Service, We may collect Personal data that is already associated with Your Third-Party Social Media Service's account, such as Your name, Your email address, Your activities or Your contact list associated with that account.”
For example, signing in might let them store your Microsoft email and related profile fields.
They keep old versions of your Microsoft profile, not just the latest gamertag.
Read the exact line
Privacy policy
“We keep a record of this information as it changes over time, so that a change such as a new gamertag does not lose what was held before.”
For example, if you rename your gamertag, they may still have the old name on file.
Signing in also signs you up for marketing email unless you later opt out.
Read the exact line
Privacy policy
“By connecting Your Microsoft account You agree that We may contact You by email, including with news, offers and other marketing about the Service”
For example, you might get offer emails after linking Xbox even if you only wanted a verification badge.
They say they only read public Xbox profile info and will not show your email to other users.
Read the exact line
Privacy policy
“We do not post as You, access Your private messages, friends list or achievements, or share Your name, email address or account identifier with other visitors.”
For example, other people on the site should see a verified badge, not your Microsoft email.
Unlinking Microsoft on the account page wipes the login tokens they stored.
Read the exact line
Privacy policy
“If You disconnect, the credentials We hold are deleted immediately.”
For example, choosing Disconnect my account should stop them from pulling your Xbox profile with your login.
They say the site is not for kids under 13, but they only react if they find out, with no real age check described.
Read the exact line
Privacy policy
“Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13.”
For example, a 12-year-old could still use the site unless a parent emails them.
They claim ordinary security but admit they cannot promise your data will not leak.
Read the exact line
Privacy policy
“While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.”
For example, if servers are breached, they have already said they do not guarantee protection.
They say they will warn you before a new privacy policy takes effect.
Read the exact line
Privacy policy
“We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.”
For example, they might email you or put a banner up before they start using data in a new way.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
How we got here · grade D · score 36/100 · 13 of 15 policy answers backed by a verified quote · 5 not stated
What does the app collect beyond what it needs to work?
They collect usage data, IP address, device identifiers, cookies, and optional Microsoft account details such as name, email, and gamertag.
Does it record your voice, face or body, and what happens to that?
The policy does not describe collecting voice, face, or body data.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
The site is ad-supported. Partners may use cookies and identifiers, including ones derived from a signed-in account.
Do they sell or share your data, and can you opt out?
They share with providers, affiliates, business partners, and advertisers. You can clear cookies, disconnect, or ask them to delete data.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
Disconnecting deletes Microsoft credentials immediately. For other personal data they say you can use account settings or contact them; they may keep some data for legal reasons.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
If you sign in they keep a history of Microsoft account fields as they change, with disconnect and contact options but no full memory editor described.
Do they commit to basic security, and have they leaked data?
They say they use commercially acceptable means but cannot guarantee absolute security. No audit or bug-bounty program is described.
Is there a real age gate, and are teens protected?
They say the service is not for anyone under 13 and they will remove data if they learn a child used it. No age-check process is described.
Will they tell you when the rules change, and is the policy specific?
The policy is dated August 31, 2026 and they say they will email and/or post a notice before changes take effect. Retention periods for usage data stay general.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
The privacy policy mentions possible purchases in boilerplate but does not describe subscriptions, auto-renewal, or refunds.
The privacy policy is 3,612 words at a college level (Flesch reading ease 47.1).
