Yahoo Indiana Privacy Rights

Indiana residents have certain privacy rights under Indiana's Consumer Data Protection Act (ICDPA). This notice provides a general overview of the privacy rights under the ICDPA. Further, it applies generally to all of our products and services. For specific information about your personal data or how your personal data is processed by a particular Yahoo product or service you may interact with, please sign into your privacy controls.

The ICDPA defines certain terms in a particular manner that may differ from how those terms are used in everyday language. When these terms are used in this notice, they are used based on the definition set forth in the ICDPA. These terms are "personal data", "consumer", "controller", "processor", "sensitive data", "targeted advertising", "third party", and "sale of personal data". Please note that Yahoo uses the terms "personal data" and "personal information" interchangeably throughout our policies.

For purposes of this page, Yahoo may be referred to as "us", "our" or "we" and Yahoo's consumer customers may be referred to as "you" or "your".

Summary of ICDPA Privacy Rights

The ICDPA provides Indiana consumers with the following five privacy rights. These rights are explained in further detail in the sections below.

You may exercise these rights by logging into your privacy controls.

Note: To exercise the above rights (other than the right to opt out), you must first sign in to your account. This is how we authenticate your request to correctly associate it with your data.

Right to Confirm, Access, and Obtain a Copy or Summary of Your Personal Data

You have the right to confirm, access, and obtain a copy (or summary at Yahoo's discretion) of your personal data that you have provided to Yahoo. To access and obtain a copy or summary of your personal data, log into your privacy controls and click on the download your data link.

Right to Correct Inaccuracies in Your Personal Data

You have the right to correct inaccuracies in your personal data, taking into account the nature of the personal data and the purposes of the processing of your personal data. You may exercise this right by logging into your Yahoo account and updating your personal data. Please refer to this help article about updating your account information.

Right to Delete

You may request that Yahoo delete personal data you have provided to us and that we have collected about you by signing into your privacy controls.

If you have more than one registered account with Yahoo, you will need to exercise your deletion right within each registered account for which you wish to delete your personal data.

If you do not have a registered account with Yahoo, please refer to this help article about clearing your cookies.

Limitations

Nothing in the ICDPA shall be construed to restrict Yahoo's ability to: (a) comply with federal, state, or local laws, rules, or regulations; (b) comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, local, or other governmental authority; (c) cooperate with law enforcement agencies concerning conduct or activity that Yahoo reasonably and in good faith believes may violate federal, state, or local laws, rules, or regulations; (d) investigate, establish, exercise, prepare for, or defend legal claims; (e) provide a product or service specifically requested by a consumer; (f) perform a contract to which the consumer is a party, including fulfilling the terms of a written warranty; (g) take immediate steps at the request of the consumer prior to entering a contract; (h) take immediate steps to protect an interest that is essential for the life or physical safety of the consumer or of another individual, if the processing cannot be manifestly based on another legal basis; (i) prevent, detect, protect against, or respond to security incidents, identity theft, fraud, harassment, malicious or deceptive activities, or any illegal activity, investigate, report, or prosecute those responsible for any such action, and preserve the integrity or security of systems; (j) engage in public or peer reviewed scientific or statistical research that is in the public interest that adheres to all applicable ethics and privacy laws and is approved, monitored, and governed by an institutional review board, or a similar independent oversight entity that determine if: (A) the information is likely to provide substantial benefits that do not exclusively accrue to Yahoo; (B) the expected benefits of the research outweigh the privacy risks; and (C) Yahoo has implemented reasonable safeguards to mitigate privacy risks associated with research, including any risks associated with re-identification; (k) assist another controller, processor, or third party with any obligation under the ICDPA.

Right to Opt Out of the Sale of Personal Data or Targeted Advertising

Yahoo does not sell or share data that, on its own, identifies you, like your name or email address. As outlined in our Privacy Policy, we do share other identifiers with partners for product, service and targeted advertising reasons. Sharing this data allows us to provide the content and services you enjoy, helps our partners deliver better content and advertising, and keeps our services supported by our advertisers.

You have the right to direct Yahoo not to sell your personal data and to not use your personal data for targeted advertising. You may direct Yahoo to opt you out of selling your personal data and using your personal data for targeted advertising via the sale of personal data and targeted advertising control in your privacy controls. Note, if you opt out of targeted advertising on Yahoo, under the ICDPA Yahoo may still show you ads, including personalized advertisements based on your interactions with the family of Yahoo products.

If you choose to opt out of the sale of your personal data, such action may impact how you are able to view and/or receive some services that Yahoo offers. This is because some of the services that Yahoo offers require disclosure of your personal data to third parties and such disclosure may be deemed a sale of personal data under the ICDPA.

Yahoo sells or shares different categories of personal information to third parties depending on the product or service. You may locate the specific categories of personal data sold or shared for each product or service you use by signing into your privacy controls.

Yahoo does not process personal data for the purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning the consumer.

Across all of our products and services, Yahoo sells or shares the following categories of personal data to third parties: identifiers (e.g., technical, financial, government identifiers); contact information; physical characteristics or description information; internet or electronic network activity information; geolocation information; commercial information; audio, electronic, visual, thermal, olfactory or similar information; inferences, including advertising and content related inferences; professional or employment related information.

Right to Confirm Processing of and Access Your Personal Data

Under the ICDPA, Indiana consumers have the right to confirm the processing of and access the following information:

Categories of personal data: Yahoo may collect, use, disclose, or otherwise sell or share different categories of personal data depending on the product or service a consumer uses. You may locate the specific categories of personal data for each product or service by signing into your privacy controls.

Below is the full list of categories of personal data that Yahoo may collect, use, disclose for a business purpose or otherwise sell or share: identifiers (e.g., technical, financial, government identifiers); contact information; physical characteristics or description information; internet or electronic network activity information; geolocation information; commercial information; audio, electronic, visual, thermal, olfactory or similar information; biometric information; inferences, including advertising and content related inferences; medical information or health insurance information; professional or employment related information; education information; legally protected classifications; and other information that identifies or can be reasonably associated or linked with you.

Purposes for processing personal data: Yahoo may process your personal data for the following purposes: auditing; security and fraud prevention; debugging; short-term transient use; performing services on behalf of Yahoo; research; quality assurance service improvements; delivering content and ads; associating user activity; providing Yahoo services; providing contextual advertising; providing targeted advertising; providing personalized content; fulfilling user requests; for user communication; providing location-based services; providing promotions; creating analytics and reports for third parties; and payment processing.

Categories of Personal Data Sold or Shared: Across all of our products or services, Yahoo sells or shares the following categories of personal data with third parties: identifiers (e.g., technical, financial, government identifiers); contact information; physical characteristics or description information; internet or electronic network activity information; geolocation information; commercial information; audio, electronic, visual, thermal, olfactory or similar information; inferences, including advertising and content related inferences; professional or employment related information.

Categories of third parties: Yahoo may sell or share personal data of our consumers with the following categories of third parties: analytics providers; social button providers; application providers; advertising partners; content providers; game developers; payment providers; search partners; voice and digital assistant providers; and security partners.

Use of Precise Geolocation Information in Indiana

The ICDPA requires consumer consent for the collection of precise location data for certain commercial uses. Yahoo honors this legal requirement by truncating latitude and longitude coordinate information from geolocation data that falls within the state of Indiana. This converts the data into imprecise location data. Indiana residents do not need to manage or effectuate their Precise Location Information opt-out in your privacy controls to receive this privacy protection.

Verification Process for Access and Deletion

You may access and/or delete your personal data by signing into your privacy controls. We will verify your identity based on your login and process your request within your privacy controls. If you choose to email us at the email address below, we will need to verify your identity before we can fulfill your request. The verification process may vary depending on the nature of the request. If Yahoo denies your request, you may appeal by contacting us via email at indiana_privacy@yahooinc.com.

Right to Appeal

Under the ICDPA, you have the right to appeal a decision by Yahoo to decline to act on your request. If Yahoo declines to act on your request, we will inform you of this decision no later than 45 days after receipt of your request, and include the reason for declining to act, along with instructions on how to appeal the decision. If you choose to appeal, you must submit your appeal within a reasonable timeframe following receipt of the decision from Yahoo to decline to act on your request. We will respond to you in writing within 60 days of receipt of your appeal with a written explanation on any action taken or not taken and the reasoning for our decision. If we deny your appeal, we will also include information on how you may contact the attorney general to submit a complaint.

Contact Us

If you have questions, you can complete this form, or you may contact us via email at indiana_privacy@yahooinc.com.

Last updated: December 2025