Privacy policy clauses for Web Bluetooth API
The Web Bluetooth API is a browser standard that allows websites to communicate directly with Bluetooth-enabled devices such as wearables, fitness trackers, and medical sensors. Websites use it to retrieve real-time sensor data, control smart devices, and enable seamless pairing without requiring native applications.
Free scan · No signup · Results in 60 seconds
What data Web Bluetooth API collects
Your privacy policy must disclose each of the following data types when you use Web Bluetooth API.
When does Web Bluetooth API trigger privacy obligations?
Data Flow Trigger
Web Bluetooth API initiates privacy obligations the moment your site or app calls `navigator.bluetooth.requestDevice()`. This triggers collection of:
- –Bluetooth device identifiers (MAC addresses, UUIDs) — classified as PII under GDPR Recital 51 and most state privacy laws
- –GATT service descriptors and characteristic data — often includes sensor readings (heart rate, blood glucose, location approximation)
- –Device pairing metadata — retained by the browser and accessible to your script
