Three weeks ago, Mozilla Foundation researchers sat down and actually tested six period tracking apps most of us have had installed at some point. Euki, Clue, Flo, Period Calendar, Planned Parenthood's Spot On, Stardust. Not marketing copy. Actual hands-on testing of what these apps do with your data once you hand it over.
The results weren't great. Some apps quietly routed information to analytics companies. Others engaged in what researchers called privacy-washing, which is a polite way of saying they made themselves sound safer than they actually were. If you've ever logged your flow, your mood, your cramps, or your sex life into an app because it asked nicely, this should bother you.
But here's what's been sitting with me since I read the full report three weeks ago. We scrutinize femtech constantly. Rightly so. It's intimate data, and post-Roe, Forbes documented exactly how that data trail could end up used against the person who created it. Meanwhile, the same intimacy, the same monetization incentive, the same lack of scrutiny exists on a dozen other platforms we log into without a second thought.
Take something like the PokerTube website, where players are creating accounts and logging session history without a second thought about who's on the other end. Deposit amounts. Playing patterns. Time of day you're most active. Whether you chase losses. That's a behavioral profile just as revealing as a cycle chart, and almost nobody asks who's storing it or for how long.
The data isn't that different, actually
Think about what a period tracker actually holds. Cycle length. Symptom logs. Mood entries. Sometimes sexual activity. Sometimes medication. It's a rolling diary of your body that updates itself.
Now think about a gaming account. Deposit history. Withdrawal requests. Session length. Bet sizing. Time-of-day activity. Whether you played after a loss (a huge behavioral tell). It's a rolling diary of your impulses.
Both are intimate. Both are monetizable. Neither gets the scrutiny it deserves, and that's the actual point of this piece, not a lecture about menstrual privacy specifically.
A 2024 Cambridge University-linked report called menstrual data a "gold mine" for advertisers. I'd argue betting and gaming data is the same gold mine wearing a different outfit. Advertisers don't care whether the behavioral signal comes from a fertility window or a losing streak. They care that it predicts what you'll do next and what you'll pay for.
Why nobody checks the entertainment side
Here's the uncomfortable asymmetry. When a period app gets caught sharing data, it makes headlines. Congress held hearings about it back in 2022. Journalists dig in. Advocacy groups issue guides.
When a niche entertainment site handles your account data sloppily, nothing happens. No headline. No hearing. You just get an email one day saying your inbox was part of a breach, and by then the damage is old news.
I'm not saying period apps get too much scrutiny. They don't get enough, if anything. I'm saying the bar we've built for femtech should apply everywhere a login screen exists. If you wouldn't hand a stranger your cycle data without asking questions, why would you hand a gaming platform your deposit history and location without the same pause?
Pew Research found in a 2023 survey that most Americans feel they have little to no control over what companies do with their data. That number should terrify anyone building a login flow, femtech or otherwise. It mostly doesn't, because outrage tends to cluster around whichever story is trending that week.
What actually matters before you create an account, anywhere
I've started running the same five questions on every app or site I sign up for now, cycle tracker or otherwise:
Does it ask for more than it needs? A period app doesn't need your location history. A poker account doesn't need access to your contacts.
Where does the data live, and who else touches it? Third-party analytics SDKs are the quiet backdoor in both femtech and gaming apps.
Can you delete your account and actually mean it? Not deactivate. Delete.
Is there a real privacy policy, or three paragraphs of legal filler?
Has anyone independently tested the claims, the way Mozilla did with period apps? If the answer is no, that's not proof of danger, but it's not nothing either.
Most of us fail all five checks constantly. I do too. I signed up for a mood-tracking app in 2023 without reading a word of its policy because I wanted the cute interface. Small failures like that are how this whole ecosystem keeps running on convenience instead of consent.
The FemTech boom makes this more urgent, not less
FemTech is projected to hit $55.88 billion in 2026, up from $46.47 billion the year before. That's a lot of new apps, a lot of new logins, a lot of new companies racing to collect data before anyone asks them to slow down. Growth at that pace rarely comes with better privacy defaults. It comes with more surface area.
The same growth pressure exists everywhere data has value, gaming platforms included. Nobody's slowing down to ask permission properly. They're racing to onboard users before a competitor does, and privacy policies get written by lawyers optimizing for liability, not by anyone thinking about what happens to your data five years from now.
If you're the type who reads the fine print on a menstrual disc packaging before you buy it (and if you're on this site, you probably are), extend that same instinct to every account creation screen you hit. The habit transfers. It doesn't matter if the app tracks ovulation or blackjack hands.
For readers curious about how product choices intersect with the rest of your cycle routine, our menstrual cup guide for beginners walks through the same kind of informed-decision thinking, just applied to what you're putting in your body instead of what you're putting into a database.
Frequently Asked Questions
Which period tracking apps did Mozilla flag as problematic? Mozilla's August 2026 audit tested Euki, Clue, Flo, Period Calendar, Planned Parenthood's Spot On, and Stardust. Several were found sharing data with third-party analytics companies despite privacy-forward marketing, a pattern Mozilla called privacy-washing.
Is gaming or gambling account data actually as sensitive as health data? It's different but comparably revealing. Deposit patterns, session frequency, and behavior after losses build a detailed profile of impulse control and financial habits, data advertisers and risk models both find valuable.
What should I check before creating an account on any app? Look at what data it requests versus what it needs, whether it uses third-party trackers, whether account deletion is genuine, and whether the privacy policy is specific rather than boilerplate. Five minutes of checking beats months of regret.
Why don't gaming and entertainment platforms get the same privacy scrutiny as femtech? Health data carries obvious stigma and legal risk post-Roe, which draws journalists and regulators. Entertainment platforms don't carry that same cultural alarm, even though the underlying data practices can be just as loose.
Does this mean I should stop using period tracking apps? No. It means read the privacy policy, check what's shared with third parties, and pick apps that minimize data collection. The same logic applies to any account holding personal information, not just cycle data.
Gambling involves risk. Please play responsibly and only wager what you can afford to lose. If you feel gambling is becoming a problem, visit BeGambleAware.org or call 1-800-GAMBLER.
The next time an app asks for your data, whether it wants your cycle or your card details, ask the same five questions. Mozilla did the work for period trackers. The rest of the internet is still waiting for someone to run the same audit.