I dunno. I automatically assume that everything that passes any third-party site unencrypted can be intercepted, retained and subsequently disclosed to advertisers, government, or whatever else. This especially applies to for-profit companies for which I'm not a paying client but the commodity being sold. I mean, I don't need to read TOS to assume this, it's just common sense to me.

Probably I've been on the internet for too long.