Wayfair Inc. (NYSE: W) is a Boston-based online furniture and home-goods retailer founded in 2002 by Niraj Shah and Steven Conine. Its privacy notice states it may automatically collect IP address, device and hardware information, unique identifiers, crash data, cookie data, location data, and page/product views, and it names an extensive advertising stack including Criteo, Meta, Google, Xandr, LiveRamp, Moloco, Podscribe, and Reddit pixels. The notice offers a state-law opt-out of the sale of and sharing of personal information for targeted advertising, discloses that cookie data may be shared with third parties to identify site visitors for email and direct-mail outreach, and states that Wayfair processes Global Privacy Control opt-out signals. Wayfair also operates a retail media business, selling sponsored-product placements to suppliers. The company has a dual-class share structure in which its co-founders and other insiders hold roughly two-thirds of total voting power. Its FY2025 10-K states cybersecurity incidents have not materially affected the company, and no Wayfair breach notifications appear in California's public database.
TRACK RECORD
1 ENFORCEMENT ACTION
[2026-08-02]
As of August 2, 2026, searching the California Attorney General's public data-breach notification database for "Wayfair" returns no submitted breach notifications. The database covers breaches of unencrypted personal information reported to more than 500 California residents, so absence of a listing is limited evidence, not proof of no incidents.
Wayfair's privacy notice states it may automatically collect usage and device information from use of its services, including IP address, hardware and software information, unique identifiers, crash data, cookie data, location data, and page/product views or clicks.
The Apple App Store privacy label for the Wayfair app lists "Data Linked to You" categories including Purchases, Financial Info, Contact Info, Search History, Browsing History, Identifiers, and Usage Data, with purposes including the developer's advertising or marketing.
Per Wayfair's 2026 proxy statement, the board is co-chaired by co-founders Niraj Shah (CEO) and Steven Conine, and its beneficial-ownership table shows all current executive officers and directors as a group holding 99.89% of Class B shares, representing 67.46% of total voting power.
Wayfair Inc. is a single publicly traded company (NYSE: W) with SEC-documented ownership and a dual-class share structure: publicly traded Class A stock carries one vote per share while Class B stock, held primarily by the co-founders and their affiliates, carries ten votes per share.
Wayfair's privacy notice offers an opt-out of the sale of and sharing of personal information for targeted advertising, including cross-context behavioral advertising — language indicating its practices meet US state-law definitions of "sale" and "sharing" of personal data.
Wayfair operates a retail media advertising business: in 2019 it opened its self-service Sponsored Products program to all suppliers as part of building out an advertising platform on its shopping properties, a model in which supplier ads are targeted to Wayfair shoppers.
The Google Play data-safety section for the Wayfair Android app states the app may share data with third parties, listing the shared categories as "Personal info, Financial info and 2 others."
In its FY2025 annual report, Wayfair states that risks from cybersecurity threats, including prior incidents, have not materially affected the company to date. This is a company assertion in an SEC filing rather than an independent audit.
As of August 2, 2026, searching the California Attorney General's public data-breach notification database for "Wayfair" returns no submitted breach notifications. The database covers breaches of unencrypted personal information reported to more than 500 California residents, so absence of a listing is limited evidence, not proof of no incidents.
Wayfair partnered with ad-tech firm Moloco to run machine-learning-driven personalized display advertising for its ads business; Wayfair's own privacy notice separately discloses use of Moloco's pixel for advertising personalization, campaign measurement, and analytics.
Wayfair's cookie policy discloses an identity-resolution practice: information from cookies may be made available to third parties, who may use it to identify visitors to the site and reach them through other channels such as email or direct mail. The policy states users have the right to opt out of this activity.
The Apple App Store privacy label for the Wayfair app discloses that Location and Identifiers may be used to track users across apps and websites owned by other companies.