Reddit Quietly Expands AI Data Sharing in New Privacy Policy

What Actually Changed on July 1

Reddit's privacy policy is a single static page at reddit.com/policies/privacy-policy. The Wayback Machine captured the new version on June 12, 2026 at 06:57 UTC.^[1] The previous archived version, dated February 1, 2026, was the policy in force until July 1.^[2] Diffing the two surfaces five real changes. None of them is tiny.

1. A new sharing partner category: LLM providers. The old "How We Share Your Information" section listed five kinds of service providers Reddit shares data with: payment processors, cloud providers, ad serving and measurement providers, age verification providers, and compliance providers. The new policy adds a sixth: "LLM providers who help us compile and summarize public content for relevant search results on Reddit."^[1] The clause is the new AI training / data licensing language, written into the privacy policy itself. The word "public" is doing a lot of work there.

2. Personalized advertising scope expands from on-Reddit to on and off Reddit. The old "How We Use Your Information" section said Reddit uses your data to "Provide you with relevant advertising, including personalized advertising on Reddit." The new version drops the geographic limit and says "on and off Reddit."^[1][2] That one word change ("on" to "on and off") is the formal authorization for cross-site ad targeting. The opt-out settings in your Reddit account already cover this, but the policy now matches the actual practice.

3. Public content gets new framing about AI training exposure. The "Reddit Is a Public Platform" section used to say your content "may also be available in responses provided by an AI chatbot like OpenAI's ChatGPT." The new version keeps that line and adds: "as well as reshared by others without permission or where Reddit has no control."^[1][2] This is a new acknowledgment that public posts can show up in AI training datasets and downstream products, and that Reddit cannot or will not stop that.

4. The "Public Content Related to You" section is renamed "Public Information Related to You." Same content, more accurate label. Karma, trophies, moderator status, subreddit memberships, and your cake day are not exactly "content." Reddit fixed the wording.^[1][2]

5. The integrations section grows. The new policy adds explicit references to "app store APIs" and to age range information shared via Apple and Google accounts: "such as where you have elected to share your age range information associated with your Apple or Google accounts."^[1] The old version did not name Apple or Google in this section.

None of these are subtle. They are all material. Reddit's own definition of a material change, from the same policy, is a change that the company "in our sole discretion" considers material. Reddit judged none of these material enough to email users about it.

The LLM Clause Is the Real Story

The new sharing clause reads in full: "(vi) LLM providers who help us compile and summarize public content for relevant search results on Reddit."^[1] Three things to notice.

First, "public content" is the universe of data the clause covers. On Reddit, almost everything is public. Posts, comments, usernames, subreddit memberships, vote history, post edits, deletions, the time you posted, the subreddit you posted in. If a user has not set a post or comment to private (and most never do), it is "public content" under Reddit's own definitions.

Second, "LLM providers" is the new category. The clause does not name a specific vendor. The most prominent LLM provider Reddit has a known data licensing relationship with is OpenAI, through the 2024 deal that gave OpenAI access to Reddit's data API for AI training. Google has a separate, larger Reddit data licensing deal reported at $60 million a year. Both companies have been documented training models on Reddit data. The new privacy policy clause formalizes what the data licensing deals already do in practice.

Third, the use case Reddit names is "compile and summarize public content for relevant search results on Reddit." That is the cover story for the policy. Reddit is telling users, and regulators, that the LLM access is for Reddit's own search product, not for arbitrary model training. But Reddit's public content has been flowing to OpenAI, Google, and other model trainers for more than two years under data licensing deals. The privacy policy catching up to the deals is the real story, not the stated use case.

Reddit's IPO prospectus from March 2024 disclosed the data licensing business as a material revenue line. Reddit's S-1 said the company had signed data licensing deals with multiple parties, that the deals were non-exclusive, and that the content being licensed was the public-facing content of the platform.^[3] The new privacy policy clause is the consumer-facing version of what the S-1 told Wall Street. It is not new monetization. It is new disclosure.

What the clause does not say is the part that matters for users. There is no opt-out for "do not share my public posts with LLM providers." The GPC and DNT signals Reddit honors apply to advertising, not to data licensing for AI training. If you want your public posts out of the LLM pipeline, the only options Reddit offers are: delete the posts before July 1, delete your account, or set the posts to private (a feature Reddit does not really offer for posts and comments, only for some user profile fields).

Personalized Advertising Is Now Off-Reddit Too

The other quiet change is the one-word edit from "on Reddit" to "on and off Reddit" in the advertising line.^[1][2] This is not a new capability. Reddit has been serving personalized ads off its own site through its ad tech stack for years. The change is in the policy. The old text said Reddit only used your data to personalize ads shown on Reddit. The new text authorizes the cross-site behavior the company already has.

The practical impact for most users is small. Reddit's off-site ad reach is real but not dominant. The bigger impact is regulatory. Under the CCPA and similar state privacy laws, the difference between on-site and off-site personalization is the difference between a first-party data use and a "sale" or "share" of personal information. The new text puts Reddit on the "share" side of the line for users in California, Colorado, Connecticut, and the 18 other states with comprehensive privacy laws. Reddit's existing opt-out settings cover the new scope, but the policy language is the legal anchor for the data flow.

Why "Quietly" Is the Operative Word

Reddit did not email users about the change. Reddit did not post a corporate blog entry. The r/announcements subreddit, the official channel for user-facing changes, has no post about the policy update.^[4] The r/redditsecurity subreddit, the channel for security and privacy incidents, has no post about it either.^[5]

The signals that the change happened are all in the policy page itself. At the top: "Effective: July 1, 2026. Last Revised: May 26, 2026." A line below the header: "We've updated our Privacy Policy. Please take a look before the changes take effect on July 1, 2026. This page is the updated Privacy Policy; for the version effective until July 1, 2026, click here." At the bottom: a revision history list with "July 1, 2026" as the new top entry, above "January 6, 2026" and the older revisions.^[1]

That is the entire announcement. No email, no push notification, no in-app banner, no tweet from the official Reddit account. Compare that to the 2024 subreddit blackout, when Reddit CEO Steve Huffman did multiple AMAs and a congressional-style hearing about API pricing. A 15,000-character privacy policy rewrite that introduces a new data sharing partner category is a quieter event than an API price change. The asymmetry is the point. The API change affected the people who build third-party apps. The privacy policy change affects everyone.

Reddit's user agreement is also being updated to a July 1, 2026 effective version per the same materials. The full new user agreement text was not available at the time of writing, but the User Agreement page at reddit.com/policies/user-agreement is the canonical source once the change takes effect.^[6]

The Business Context: Reddit's Data Is Its Most Valuable Asset

Reddit went public on the New York Stock Exchange on March 21, 2024 under the ticker RDDT.^[3] The IPO pitch to Wall Street had two pillars: advertising revenue growth and a new data licensing business. The data licensing business is built on the public content Reddit users have posted since 2005. Reddit told the SEC the licensing business was "non-exclusive" and that the licensed content was "publicly available content posted by users on the Reddit platform."^[3]

Google signed a reported $60 million a year deal in 2024 to license Reddit data for AI training. OpenAI signed a separate deal the same year. The deals are widely understood in the AI industry to cover both training new models and powering live search and answer products. Anthropic and other model developers have also been documented as Reddit data users, though the financial terms of those relationships are not public.

The June 2026 privacy policy update is the consumer-facing version of those deals. Reddit is not announcing a new monetization strategy. It is updating the terms under which the existing strategy operates. The new clause names "LLM providers" as a category of service provider, names "public content" as the data, and names "search results on Reddit" as the use case. The rest of the policy language is the legal plumbing that connects the data licensing business to the data subject rights users have under the GDPR, CCPA, and the 22 state privacy laws that take effect or amend in 2026.

What Reddit Users Can Do Before July 1

Five practical steps for the next 19 days, ranked by impact.

1. Delete the posts and comments you do not want in training data. Once the LLM provider clause goes live on July 1, your public content can be shared with model providers under the new policy terms. Deleting a post or comment before July 1 removes the source content. It does not remove what has already been scraped and ingested, but it stops future flows. The deletion is per-post, not account-wide. You can mass-delete your own posts with third-party tools like Redact, but the official Reddit app requires individual deletion. Your deleted posts and comments are still visible to anyone who saved them before deletion; deletion is not a recall.
2. Enable the Global Privacy Control (GPC) signal in your browser. Reddit honors GPC for advertising opt-out.^[1] The GPC signal does not cover the new LLM sharing clause. It does cover the cross-site personalized advertising. GPC is a one-time browser setting, not a per-site toggle. The EFF and Mozilla both ship GPC by default in their browsers.
3. Turn off personalized advertising in Reddit settings. Reddit > User Settings > Privacy > toggle off "Personalize ads based on information from our partners." This is the per-account version of the GPC opt-out. It will not stop Reddit from licensing your public content to LLM providers. It will stop Reddit from using your activity to inform the ads you see on and off Reddit.
4. Decide whether to delete your account. Account deletion removes your public profile and disassociates your content from your account. It does not delete the posts and comments themselves. The posts remain visible under "[deleted]." If your concern is the posts, the only way to remove them from the platform is to delete them one by one. If your concern is the account, deletion is fast and irreversible.
5. Send a data subject access request (DSAR) before July 1. Reddit is required to provide a copy of all data the company holds about you under the GDPR, CCPA, and the 22 state privacy laws.^[1] Send the request via Reddit's Data Request form. The response typically arrives within 45 days. Doing the request before July 1 captures the data set under the current policy. Doing it after captures the new data flows the LLM clause authorizes. Both are useful for different reasons.

What r/privacy and the Rest of Reddit Are Saying

The r/privacy subreddit, one of the largest active communities tracking platform surveillance on the internet, has not yet (as of June 12, 2026) had a megathread on the policy update. The community has been skeptical of platform AI training disclosures for years. The 2024 subreddit blackout, which started as a protest over API pricing and quickly became a referendum on data licensing, cost Reddit a wave of high-profile moderator resignations and at least one major default subreddit going private.

The June 2026 update is the privacy policy equivalent of the 2024 API change: a quiet corporate move that touches every user, with a public-facing version that downplays the impact. The 2024 protest worked because moderators coordinated. The 2026 version is a single privacy policy page that almost no one reads. The asymmetry is the part to watch. If a coordinated community response materializes, it will look like the 2024 blackout, not a polite comment thread on r/announcements. If a coordinated community response does not materialize, the policy goes live on July 1 and Reddit's data licensing business expands under the new terms.

For the hundreds of millions of Reddit users who do not track platform privacy policy changes, the impact will be invisible. Their public posts and comments will flow to LLM providers under the new policy. Their personalized ads will be cross-site. Their content will be reshared by others in AI training datasets. None of that will be obvious from the Reddit app.

The Bottom Line

Reddit updated its privacy policy on May 26, 2026, effective July 1, 2026. The update adds LLM providers as a new sharing partner category. The update broadens personalized advertising from on-Reddit to on and off Reddit. The update adds language acknowledging that public content may show up in AI chatbot responses. The update was not announced to users. The revision history at the bottom of the policy is the only signal.

The new policy is consistent with the data licensing business Reddit has been running since the 2024 IPO. It is not a new strategy. It is the disclosure catching up to the deals. The practical difference for users is that the legal justification for Reddit sharing public content with LLM providers is now in the privacy policy, not just in Reddit's contracts with Google and OpenAI. For users in the European Union, the United Kingdom, California, and the 21 other jurisdictions with comprehensive privacy laws, that legal justification is what their data subject rights hang on.

Reddit has 19 days to put a louder signal on this change before it takes effect. The current signal is a single line at the top of a 52,000-character page that almost no one will read. The people who build the LLM products and the ad targeting products have already read it.

References

1. Reddit Privacy Policy, archived June 12, 2026 (effective July 1, 2026; last revised May 26, 2026) - Primary source. The full text of the new policy, including the new LLM provider sharing clause, the broadened personalized advertising scope, the renamed "Public Information Related to You" section, and the app store / Apple / Google account integrations language. Live URL: reddit.com/policies/privacy-policy.
2. Reddit Privacy Policy, archived February 1, 2026 (effective January 6, 2026; the prior version) - The previous privacy policy. Used here as the baseline for the diff that produced the five changes documented in this article.
3. Reddit, Inc. S-1 / 424B4 prospectus, filed February 2024 (SEC EDGAR) - Primary source for the IPO disclosure of the data licensing business model. Reddit told the SEC the licensing deals were "non-exclusive" and covered "publicly available content posted by users on the Reddit platform." Reddit went public on the NYSE under the ticker RDDT on March 21, 2024.
4. Reddit r/announcements subreddit, archived May 11, 2026 - Verification that the official Reddit announcement subreddit has no post about the July 1 privacy policy update as of the latest archived snapshot. The most recent announcement at the time of the snapshot was unrelated to the privacy policy change.
5. Reddit r/redditsecurity subreddit, archived May 31, 2026 - Verification that the official Reddit security and privacy subreddit has no post about the July 1 privacy policy update as of the latest archived snapshot. Reddit's privacy incident channel is silent on the change.
6. Reddit User Agreement - Live URL for Reddit's User Agreement, which is also being updated to a July 1, 2026 effective version. The full new user agreement text was not available at the time of writing; this URL is the canonical source once the change takes effect.
7. State of Surveillance: "Reddit Fined £14.5 Million for Letting Kids Slip Through" (February 25, 2026) - State of Surveillance coverage of the UK Information Commissioner's Office fine against Reddit for failing to verify ages and protect children's data. The fine is the third largest in ICO history and the regulatory backdrop for the July 1 policy update.
8. State of Surveillance: "DHS Built a Profile From Your Reddit Posts" (February 12, 2026) - State of Surveillance coverage of the leaked January 2026 DHS intelligence bulletin showing agents monitored a Reddit user who called for a peaceful protest. Demonstrates that the public content Reddit is now formalizing LLM access to is also the public content US government agencies are already scraping.

Related Coverage

• Reddit Fined £14.5 Million for Letting Kids Slip Through - The UK ICO fine against Reddit for failing to protect children's data, the regulatory backdrop for the July 1 policy update.
• DHS Built a Profile From Your Reddit Posts. A Leaked Bulletin Shows How. - Why Reddit's "public content" framing matters: government agencies are already scraping the public content the LLM clause now formalizes access to.
• A Redditor Criticized ICE. Grand Jury Wants Their Name. - The First Amendment cost of Reddit's public content model: federal prosecutors used a secret grand jury to unmask an anonymous user who posted public content criticizing immigration enforcement.
• Three States Tighten Privacy Laws on July 1, 2026 - The same July 1, 2026 effective date applies to Connecticut, Utah, and Arkansas state privacy law amendments. Reddit users in those states get new opt-out rights under the amendments on the same day the new Reddit policy goes live.
• Connecticut's Privacy Law Overhaul Hits July 1, 2026 - The deep dive on the Connecticut CTDPA amendments, which give consumers the right to a list of every third party their data was sold to. Directly relevant to the new Reddit LLM sharing clause for Connecticut users.
• Immediate Privacy Wins - A 30-minute checklist for the privacy settings that matter most. The Reddit opt-out, GPC browser setting, and data subject access request steps are covered in this guide.
• State Privacy Laws: A Comprehensive Guide - How the 22-state privacy law patchwork intersects with platform privacy policies like Reddit's, and where Connecticut, California, and Colorado users get the strongest opt-out rights.