Texas Catches Netflix Lying

Five petabytes a day, kids' profiles harvested, and a CEO who said the company collected nothing.

Netflix logo on a dim screen
Texas alleges Netflix runs the largest behavioural logging operation in streaming

Texas Attorney General Ken Paxton sued Netflix on May 11 over what the filing calls a surveillance machinery built without user consent. The lawsuit puts hard numbers on a practice Netflix has publicly denied for years.

Texas Attorney General Ken Paxton filed suit against Netflix on May 11. The filing alleges the company logs roughly five petabytes of user behaviour every day and ships that data to advertisers and data brokers including Experian, Acxiom, and Google Display and Video 360. In 2020, Netflix CEO Reed Hastings told the public, "we don't collect anything." The Texas filing argues Netflix operates as a logging company that built a surveillance machinery on top of a streaming product.

The collection list runs further than the viewing history most people assume. Netflix allegedly tracks device fingerprints, household network details, app usage patterns, IP-derived location data, and behavioural signals from accounts marked as children's profiles. None of that is necessary to play a movie. All of it has clear commercial value to the ad-targeting industry, which is where Texas says the data ends up.

The kids angle is the part Netflix will struggle to walk back. The lawsuit alleges Netflix aggressively harvests behavioural data from children's profiles while marketing those profiles as a safer mode. Targeted ads are not served to children inside the app, so users assume the data is sandboxed. The complaint says the same behavioural pipeline runs underneath, and the data leaves the building like any other log.

Texas is also targeting the autoplay default on children's profiles. Autoplay does more than push the next episode. It generates a continuous viewing signal that distinguishes attention from background play, and it deepens the behavioural model attached to that profile. A six-year-old who falls asleep with Netflix running is still producing usable telemetry. The AG wants the autoplay default ended and the data collection blocked by court order.

Five petabytes a day is industrial-scale behavioural capture from a company that publicly told users it did not exist. Hastings made the 2020 statement when Netflix was positioning itself against the ad-supported streaming model. Texas now alleges the internal architecture had already gone the other way.

Experian and Acxiom are dossier companies, not advertising platforms. Once a behavioural log enters their systems, it can be linked to credit identity, address history, household composition, and every other commercial dataset they hold. Google Display and Video 360 then closes the loop by serving ads across the open web based on that combined profile. The Netflix login becomes a join key on a much larger identity graph.

Any service that builds detailed behavioural logs will eventually monetise them, regardless of public statements to the contrary. The 2020 denial did not stop the logging. The kids' profile branding did not stop the harvest. The streaming experience is the cover. The logging is the product Netflix sells to brokers and ad tech.

Texas is asking for fines and a court order forcing Netflix to stop the collection and the sharing. Whether that order lands will depend on the judge and the evidence the AG can produce in discovery. A streaming app does not need to log five petabytes a day to play a video. It logs that much because somebody is paying for the logs.

Blackout VPN exists because privacy is a right. Your first name is too much information for us.

Keep learning

FAQ

What does Netflix actually collect about its users

According to the Texas filing, Netflix logs device fingerprints, household network details, app usage patterns, IP-derived location, and behavioural signals from every profile including children's profiles.

Where does the Netflix behavioural data end up

The Texas Attorney General alleges Netflix shares the data with advertisers, the data brokers Experian and Acxiom, and the Google Display and Video 360 ad platform.

Are children's profiles actually safer on Netflix

Targeted ads are not shown to children inside the Netflix app, but the lawsuit alleges Netflix still harvests behavioural data from those profiles and sends it through the same pipeline as adult accounts.

Why does autoplay matter in this lawsuit

Autoplay on a child's profile produces a continuous viewing signal that improves the behavioural model attached to that account. Texas wants autoplay disabled by default on kids' profiles.

Can a VPN stop Netflix logging your behaviour

A VPN hides your IP address and approximate location from Netflix and breaks one link in the identity graph. It does not stop logging tied to your account, so the strongest reduction comes from limiting how much you sign into.