It’s a non-answer that their privacy policy explicitly states that they will collect this type of information and that they stipulate what kind parties they can share that info with?
That’s the straightest answer that you’re going to get. Privacy policies like this are bullshit, but they’re also the norm so acting like it’s a non-answer after 20 years of this being the norm seems a little… naive, perhaps?