CrowdStrike
Information Technology
56
out of 100. Number 159 of 512, counting from the worst.
Where CrowdStrike does well
- North American customers are NOT forced into arbitration: disputes go to state and federal courts in Santa Clara County, California, and no class-action waiver was found anywhere in the documents. Amendments to the Terms and Conditions require written consent of both parties (Section 14.6) — no unilateral term changes. CrowdStrike sends renewal reminder emails at least 60 days and again 30 days before any auto-renewal of a 12-month-or-longer term, and cancellations can be done via the Falcon platform's Manage Subscription feature. Material changes to the Website Terms of Use apply prospectively only. The Privacy Notice is unusually candid that ad-data sharing 'may be considered a sale' under the CCPA, offers an opt-out form plus Global Privacy Control support, and states it does not sell data of individuals under
- Customers can opt out of CrowdStrike's default right to display their company name and logo as a customer reference by emailing legal@crowdstrike.com.
Online orders auto-renew indefinitely by default; the renewal only stops if you proactively cancel.
The fine print
6 clauses and findings from the draft archive, dated 1 October 2026. The plain English comes first; the small print is the company's own words. None of these has been checked yet.
-
Online orders auto-renew indefinitely by default; the renewal only stops if you proactively cancel.
Following the initial Subscription/Order Term, the Order will automatically renew for additional Subscription/Order Terms, unless either party terminates a current Subscription/Order Term or cancels the upcoming automatic renewal pursuant to these Order Terms or the Agreement.
-
Your renewal price can silently change — they bill you whatever their current standard price is, not what you originally agreed to pay.
The fees for each renewal Subscription/Order Term will be based on... CrowdStrike's then-standard price for the renewing subscription of the applicable Offering at the time of renewal, which might be different from the price of the expiring Subscription/Order Term.
-
They can swap the products in your order for different ones at renewal and charge the new products' prices, without your approval.
If, during a Subscription/Order Term, the licensed CrowdStrike Offering(s) have been renamed, upgraded or replaced with new Offering(s) providing improved or substantially similar functionality, at the time of the next renewal CrowdStrike may modify Customer's Order to include those new Offering(s), and charge Customer CrowdStrike's then-standard prices for such Offering(s).
-
If your company is based outside North America, you must resolve disputes through a 3-arbitrator international arbitration in London, Singapore, or New York — an expensive process that rules out court for smaller claims.
Any dispute, claim, or controversy arising out of or relating to this Agreement... shall be referred to and finally resolved by arbitration... The arbitral panel shall consist of three (3) arbitrators... The seat, or legal place, of arbitration shall be London, England.
Terms and Conditions (Exhibit B, Dispute Resolution Outside North America)
-
They openly admit that uploading your email list for ad targeting and sharing tracking data with advertisers may legally count as selling your personal data.
In the preceding 12 months, we have disclosed certain categories of personal information described above to third-party advertising partners, such as in connection with our use of tracking technologies for cross-context behavioral advertising or by providing lists of email addresses for potential customers so that we can reach you across the internet with advertisements for our Offerings. This may be considered 'sharing' or a 'sale' under the CCPA.
-
CrowdStrike buys your data from data brokers, and anything you post on their website (even code or scripts) can be sold by them forever — you grant them an irrevocable license to 'sell' your content.
Other sources of personal information include:... Data brokers... You hereby grant to CrowdStrike a perpetual, irrevocable, royalty-free, fully-paid, sublicensable, transferable, non-exclusive, worldwide license to copy, distribute, modify, make derivative works of, publicly display, publicly perform, make, use, sell, translate and disclose to third parties any User Content that you post for any purpose.
Privacy Notice §4 and Website Terms of Use § Posting and User Content
How these were found
All documents read directly from crowdstrike.com on October 1, 2026; no mirrors were needed (nothing was fetch-blocked). Privacy Notice is Version 1.7, effective March 31, 2026. Terms and Conditions page showed no printed version/date; search index metadata indicated it was last updated ~January 2026. Documents are enterprise B2B-focused; consumer-style traps (e.g., home-use Falcon Prevent terms) were not the focus. Arbitration scoring reflects the North America vs. rest-of-world split: courts in the US, mandatory international arbitration elsewhere.
These notes come from the original draft and are not independent verification.