Macy's, Inc. is a publicly traded (NYSE: M) Delaware-incorporated department-store retailer operating Macy's, Bloomingdale's, and Market by Macy's stores plus the Macy's shopping app. Macy's own Notice of Privacy Practices discloses collecting biometric data (voice recordings and facial recognition) and precise geolocation, using cookies, pixels, and SDKs across its sites and apps, and sharing/selling personal information with third parties for interest-based advertising as well as through its in-house 'Macy's Media Network' retail-media unit. The Macy's app's Apple App Store privacy label confirms Purchases, Identifiers, and Usage Data are used to track users across apps and websites owned by other companies. Macy's Inc.'s SEC 10-K makes ownership straightforward to trace via mandatory filings and separately discloses, as a risk factor, that physical device tampering and skimming at card-reader units is among the attack methods the company considers itself exposed to -- consistent with Macy's publicly reported 2019 Magecart-style checkout-skimming incident, though a live, verbatim-quotable primary source for that specific incident (state AG notice or company breach page) could not be retrieved within this drafting session's fetch budget after multiple blocked/DNS-failing/archive-unavailable attempts.