Snap Inc

Previous wording

We emphasize rapid innovation and prioritize long-term user engagement over short-term financial conditions or results if we believe that it will benefit the aggregate user experience and improve our financial performance over the long term. Although we have achieved profitability in certain periods, we have a history of operating losses and, as a result of our long-term focus, we may prioritize investments and expenses we believe are necessary for our long-term growth over achieving short-term profitability. Investments in our future, including through new products or acquisitions, are inherently risky and may not pay off, which would adversely affect our ability to settle the principal and interest payments on our outstanding convertible senior notes or other indebtedness when due, and further delay or hinder our ability to sustain profitability. This in turn would hinder our ability to secure additional financing to meet our current and future financial needs on favorable terms, or at all.

Current wording

We emphasize rapid innovation and prioritize long-term user engagement over short-term financial conditions or results if we believe that it will benefit the aggregate user experience and improve our financial performance over the long term. Although we have achieved profitability in certain periods, we have a history of operating losses and, as a result of our long-term focus, we may prioritize investments and expenses we believe are necessary for our long-term growth over achieving short-term profitability. Investments in our future, including through new products or acquisitions, are inherently risky and may not pay off, which would adversely affect our ability to settle the principal and interest payments on our Notes or other indebtedness when due, and further delay or hinder our ability to sustain profitability. This in turn would hinder our ability to secure additional financing to meet our current and future financial needs on favorable terms, or at all.

Previous wording

Our business and operations have been, and in the future could be, adversely affected by events beyond our control, such as health epidemics and geo-political events and conflicts. In addition, macroeconomic factors like labor shortages and disruptions, supply chain disruptions, banking instability, and inflation continue to cause logistical challenges, increased input costs, and inventory constraints for our advertisers, which in turn may also halt or decrease advertising spending, and harm our business.

Current wording

Our business and operations have been, and in the future could be, adversely affected by events beyond our control, such as health epidemics and geo-political events and conflicts. In addition, macroeconomic factors like labor shortages and disruptions, supply chain disruptions, banking instability, tariffs and retaliatory countermeasures, inflation, and fluctuating interest rates have in the past and may continue to cause logistical challenges, increased input costs, and inventory constraints for our advertisers, which in turn may also halt or decrease advertising spending, and harm our business.

Previous wording

We need to continually innovate and create new products, and enhance our existing products, to attract, retain, and grow our global community. Products that we create may fail to attract or retain users or partners, or to generate meaningful revenue, if any. In addition, we have and expect to continue to expand organically and through acquisitions, including in international markets, which we may not be able to effectively manage or scale. If our community does not see the value in our products or brand, or if competitors offer better alternatives, our community could easily switch to other services. Although we have experienced rapid growth in our community over the last few years, we have also experienced declines and there can be no assurance that declines won’t happen again.

Current wording

We need to continually innovate and create new products, and enhance our existing products, to attract, retain, and grow our global community. Products that we create may fail to attract or retain users or partners, or to generate meaningful revenue, if any. In addition, we have and expect to continue to expand organically and through acquisitions, including in international markets, which we may not be able to effectively manage or scale. If our community does not see the value in our products or brand, or if competitors offer better alternatives, our community could easily switch to other services. Although we have experienced significant growth in our community over the last few years, we have also experienced declines and there can be no assurance that declines won’t happen again.

Previous wording

We primarily rely on Google, Apple, and Amazon to provide their mobile operating systems and other services for our applications and other core services, including our platform. If these partners do not provide their services as we expect, terminate their services, or change the terms, or their interpretation of the terms, of our agreements, or change the functionality of their mobile operating systems in ways that are adverse to us, our service may be interrupted and our product experience could be degraded, which may harm our reputation, increase our costs, or make it harder for us to sustain profitability. Many other parts of our business depend on partners, including content partners and advertising partners, so our success depends on our ability to attract and retain these partners.

Current wording

We primarily rely on Google, Apple, and Amazon to provide their mobile operating systems and other services for our applications and other core services, including our platform. If these partners do not provide their services as we expect, terminate their services, or change the terms, or their interpretation of the terms, of our agreements, or change the functionality of their mobile operating systems in ways that are adverse to us, our service may be interrupted and our product experience could be degraded, which may harm our reputation, increase our costs, or make it harder for us to attain and sustain profitability. Many other parts of our business depend on partners, including content partners and advertising partners, so our success depends on our ability to attract and retain these partners.

Previous wording

Our business is complex and success depends on our ability to rapidly innovate, the interoperability of our service on many different smartphones and mobile operating systems, and our ability to handle sensitive user data with the care our users expect. Because our systems and our products are constantly changing, we are susceptible to data breaches, cyberattacks, security incidents, bugs, and other vulnerabilities and errors in how our products work and are measured. We may also fail to maintain effective processes that report our metrics or financial results. Given the complexity of the systems involved and the rapidly changing nature of mobile devices and operating systems, we expect to encounter issues, particularly if we continue to expand in parts of the world where mobile data systems and connections are less stable.

Current wording

Our business is complex and success depends on our ability to rapidly innovate, the interoperability of our service on many different smartphones and mobile operating systems, and our ability to safeguard sensitive user data. Because our systems and our products are constantly changing, we are susceptible to data breaches, cyberattacks, security incidents, bugs, and other vulnerabilities and errors in how our products work and are measured. We may also fail to maintain effective processes that report our metrics or financial results. Given the complexity of the systems involved and the rapidly changing nature of mobile devices and operating systems, we expect to encounter issues, particularly if we continue to expand in parts of the world where mobile data systems and connections are less stable.

Previous wording

We are also subject to complex and evolving federal, state, local, and foreign laws and regulations regarding privacy, data protection, biometric processing, content, artificial intelligence, or AI, taxes, and other matters, which are subject to change and have uncertain interpretations. Given the nature of our business, we are particularly susceptible to changes in such laws regarding privacy and data protection, which may require us to change our products and may impact our revenue stream. Any actual or perceived failure to comply with such legal and regulatory obligations, including in connection with our consent decree with the U.S. Federal Trade Commission, may lead to costly litigation or otherwise adversely impact our business.

Current wording

We are also subject to complex and evolving federal, state, local, and foreign laws and regulations regarding privacy, data protection, biometric processing, content regulation, artificial intelligence, or AI, taxes, and other matters, which are subject to change and have uncertain interpretations. Given the nature of our business, we are particularly susceptible to changes in such laws regarding privacy and data protection, which may require us to change our products and may impact our revenue stream. Any actual or perceived failure to comply with such legal and regulatory obligations, including in connection with our consent decree with the U.S. Federal Trade Commission, or FTC, may lead to costly litigation or otherwise adversely impact our business.

Previous wording

We had 443 million daily active users, or DAUs, on average in the quarter ended September 30, 2024. We view DAUs as a critical measure of our user engagement, and adding, maintaining, and engaging DAUs have been and will continue to be necessary. Our DAUs and DAU growth rate have declined in the past and they may decline in the future due to various factors, including as the size of our active user base increases, as we achieve higher market penetration rates, as we face continued competition for our users and their time, or if there are performance issues with our service. In addition, as we achieve maximum market penetration rates among younger users in developed markets, future growth in DAUs will need to come from older users in those markets or from developing markets, which may not be possible or may be more difficult, expensive, or time-consuming for us to achieve. While we may experience periods when our DAUs increase due to products and services with short-term popularity, we may not always be able to attract new users, retain existing users, or maintain or increase the frequency and duration of their engagement if current or potential new users do not perceive our products to be fun, engaging, or useful. In addition, because our products typically require high bandwidth data capabilities for users to benefit from all of the features and capabilities of our application, many of our users live in countries with high-end mobile device penetration and high bandwidth capacity cellular networks with large coverage areas. We therefore do not expect to experience rapid user growth or engagement in regions with either low smartphone penetration or a lack of well-established and high bandwidth capacity cellular networks. As our DAU growth rate continues to slow or if the number of DAUs becomes stagnant, or we have a decline in DAUs, our financial performance will increasingly depend on our ability to elevate user activity or increase the monetization of our users.

Current wording

We had 460 million daily active users, or DAUs, on average in the quarter ended March 31, 2025. We view DAUs as a critical measure of our user engagement, and adding, maintaining, and engaging DAUs have been and will continue to be necessary. Our DAUs and DAU growth rate have declined in the past and they may decline in the future due to various factors, including as the size of our active user base increases, as we achieve higher market penetration rates, as we face continued competition for our users and their time, or if there are performance issues with our service. In addition, as we achieve maximum market penetration rates among younger users in developed markets, future growth in DAUs will need to come from older users in those markets or from developing markets, which may not be possible or may be more difficult, expensive, or time-consuming for us to achieve. While we may experience periods when our DAUs increase due to products and services with short-term popularity, we may not always be able to attract new users, retain existing users, or maintain or increase the frequency and duration of their engagement if current or potential new users do not perceive our products to be fun, engaging, or useful. In addition, because our products typically require high bandwidth data capabilities for users to benefit from all of the features and capabilities of our application, many of our users live in countries with high-end mobile device penetration and high bandwidth capacity cellular networks with large coverage areas. We therefore do not expect to experience rapid user growth or engagement in regions with either low smartphone penetration or a lack of well-established and high bandwidth capacity cellular networks. As our DAU growth rate continues to slow or if the number of DAUs becomes stagnant, or we have a decline in DAUs, our financial performance will increasingly depend on our ability to elevate user activity or increase the monetization of our users.

Previous wording

Substantially all of our revenue is generated from third parties advertising on Snapchat. For the years ended December 31, 2023, 2022, and 2021, advertising revenue accounted for approximately 96%, 99%, and 99% of our total revenue, respectively. Even though we have introduced other revenue streams, including subscription models, we still expect this trend to continue for the foreseeable future. Most advertisers do not have long-term advertising commitments with us, and our efforts to establish long-term commitments may not succeed.

Current wording

Substantially all of our revenue is generated from third parties advertising on Snapchat. For the years ended December 31, 2024, 2023, and 2022, advertising revenue accounted for approximately 91%, 96%, and 99% of our total revenue, respectively. Even though we have introduced other revenue streams, including subscription models, we expect advertising revenue to account for a substantial majority of our revenue in the foreseeable future. Most advertisers do not have long-term advertising commitments with us, and our efforts to establish long-term commitments may not succeed.

Previous wording

Our advertising customers range from small businesses to well-known brands, and may include advertising resellers. Many of our customers spend a relatively small portion of their overall advertising budget with us, but some customers have devoted meaningful budgets that contribute more significantly to our total revenue. In addition, advertisers may view some of our advertising solutions as experimental and unproven, or prefer certain of our products over others. Advertisers, including our customers who have devoted meaningful advertising budgets to our product, will not continue to do business with us if we do not deliver advertisements in an effective manner, or if they do not believe that their investment in advertising with us will generate a competitive return relative to other alternatives. As our business continues to develop, there may be new or existing customers, including from different geographic regions, that contribute more significantly to our total revenue, and a loss of such customers or a significant reduction in how much they spend with us could adversely impact our business. Any economic or political instability, whether as a result of the macroeconomic climate, war or other armed conflict, terrorism, or otherwise, in a specific country or region, may negatively impact the global or local economy, advertising ecosystem, our customers and their budgets with us, or our ability to forecast our advertising revenue, and could seriously harm our business.

Current wording

Our advertising customers range from small businesses to well-known brands, including advertising resellers. Many of our customers spend a relatively small portion of their overall advertising budget with us, but some customers have devoted meaningful budgets that contribute more significantly to our total revenue. In addition, advertisers may view some of our advertising solutions as experimental and unproven, or prefer certain of our products over others. Advertisers, including our customers who have devoted meaningful advertising budgets to our product, will not continue to do business with us if we do not deliver advertisements in an effective manner, or if they do not believe that their investment in advertising with us will generate a competitive return relative to other alternatives. As our business continues to develop, there may be new or existing customers, including from different geographic regions, that contribute more significantly to our total revenue, and a loss of such customers or a significant reduction in how much they spend with us could adversely impact our business. Any economic or political instability, whether as a result of the macroeconomic climate or the implementation of tariffs and retaliatory countermeasures by the United States or other governments, war or other armed conflict, terrorism, or otherwise, in a specific country or region, may negatively impact the global or local economy, advertising ecosystem, our customers and their budgets with us, or our ability to forecast our advertising revenue, and could seriously harm our business.

Previous wording

Moreover, we rely heavily on our ability to collect, process, and disclose data and metrics to our customers so we can attract new customers and retain existing customers. Any restriction, whether by law, regulation, policy, or other reason, on our ability to collect, process, and disclose data and metrics that our customers find useful would impede our ability to attract and retain advertisers. Regulators in many countries in which we operate or have users are increasingly scrutinizing and regulating the collection, use, and sharing of personal data related to advertising, which could materially impact our revenue and seriously harm our business. Many of these laws and regulations expand the rights of individuals to control how their personal data is collected and processed, and place restrictions on the use of personal data of teens. The processing of personal data for personalized advertising continues to be under increased scrutiny from regulators, which includes ongoing regulatory action against large technology companies like ours, the outcomes of which may be uncertain and subject to appeal. These laws may prohibit us and our customers from advertising to teens, including based on the profiling of personal data. Other legislative proposals and present laws and regulations may also apply to our or our advertisers’ activities and require significant operational changes to our business. These laws and regulations could have a material impact on the development and deployment of AI and machine learning in the context of our targeted advertising activities. Other laws to which we are or may become subject further regulate contextual, behavioral, interest-based, or targeted advertising, making certain online advertising activities more difficult and subject to additional scrutiny. These laws grant users the right to opt-out of sharing of their personal data for certain advertising purposes in exchange for money or other valuable consideration, or require parental consent to be obtained for the processing of personal data of users under a certain age and restrict tracking and use of teens’ data, including for advertising. Regulators have issued significant monetary fines in certain circumstances where the regulators alleged that appropriate consent was not obtained in connection with targeted advertising activities. In addition, legislative proposals and present laws and regulations in countries where we operate regulate the use of cookies and other tracking technologies, electronic communications, and marketing.

Current wording

Moreover, we rely heavily on our ability to collect, process, and disclose data and metrics to our customers so we can attract new customers and retain existing customers. Any restriction, whether by law, regulation, policy, or other reason, on our ability to collect, process, and disclose data and metrics that our customers find useful would impede our ability to attract and retain advertisers. Regulators in many countries in which we operate or have users are increasingly scrutinizing and regulating the collection, use, and sharing of personal data related to advertising, which could materially impact our revenue and seriously harm our business. Many of these laws and regulations expand the rights of individuals to control how their personal data is collected and processed, and place restrictions on the use of personal data of teens. The processing of personal data for personalized advertising continues to be under increased scrutiny from regulators, which includes ongoing regulatory action against large technology companies like ours, the outcomes of which may be uncertain and subject to appeal. These laws may prohibit us and our customers from advertising to teens, including based on the profiling of personal data. Other legislative proposals and present laws and regulations currently, and may in the future, apply to our or our advertisers’ activities and require significant operational changes to our business. These laws and regulations could have a material impact on the development and deployment of AI and machine learning in the context of our targeted advertising activities. Other laws to which we are or may become subject further regulate contextual, behavioral, interest-based, or targeted advertising, making certain online advertising activities more difficult and subject to additional scrutiny. These laws grant users the right to opt-out of sharing of their personal data for certain advertising purposes, or require parental consent to be obtained for the processing of personal data of users under a certain age and restrict tracking and use of teens’ data, including for advertising. Regulators have issued significant monetary fines in certain circumstances where the regulators alleged that appropriate consent was not obtained in connection with targeted advertising activities. In addition, legislative proposals and present laws and regulations in countries where we operate regulate the use of cookies and other tracking technologies, electronic communications, and marketing.

Previous wording

Furthermore, in April 2021, Apple issued an iOS update that imposed heightened restrictions on our access and use of user data by allowing users to more easily opt-out of tracking of activity across devices. Additionally, Google announced that it will implement similar changes with respect to its Android operating system, and major web browsers, like Firefox, Safari, and Chrome, have or plan to make similar changes as well. The implemented changes have had, and the announced or planned changes likely will have, an adverse effect on our targeting, measurement, and optimization capabilities, and in turn our ability to target advertisements and measure the effectiveness of advertisements on our services. This has resulted in, and in the future is likely to continue to result in, reduced demand and pricing for our advertising products and could seriously harm our business. The longer-term impact of these changes on the overall mobile advertising ecosystem, our competitors, our business, and the developers, partners, and advertisers within our community remains uncertain, and depending on how we, our competitors, and the overall mobile advertising ecosystem adjusts, and how our partners, advertisers, and users respond, our business could be seriously harmed. Any alternative solutions we implement are subject to rules and standards set by the owners of such mobile operating systems which may be unclear, change, or be interpreted in a manner adverse to us and require us to halt or change our solutions, any of which could seriously harm our business. In addition, if we are unable to mitigate or respond to these and future developments, and alternative solutions do not become widely adopted by our advertisers, then our targeting, measurement, and optimization capabilities will be materially and adversely affected, which would in turn continue to negatively impact our advertising revenue. Our advertising revenue could also be seriously harmed by many other factors, including:

Current wording

Furthermore, in April 2021, Apple issued an iOS update that imposed heightened restrictions on our access and use of user data by allowing users to more easily opt-out of tracking of activity across devices. Additionally, Google has in the past implemented privacy controls on its Android devices and may in the future make changes to those privacy controls similar to Apple’s prior iOS update. The changes implemented by Apple have had, and similar changes, if implemented by Google or major web browsers, like Firefox, Safari, and Chrome, would have an adverse effect on our targeting, measurement, and optimization capabilities, and in turn our ability to target advertisements and measure the effectiveness of advertisements on our services. This has resulted in, and in the future is likely to continue to result in, reduced demand and pricing for our advertising products and could seriously harm our business. The longer-term impact of these changes on the overall mobile advertising ecosystem, our competitors, our business, and the developers, partners, and advertisers within our community remains uncertain, and depending on how we, our competitors, and the overall mobile advertising ecosystem adjusts, and how our partners, advertisers, and users respond, our business could be seriously harmed. Any alternative solutions we implement are subject to rules and standards set by the owners of such mobile operating systems which may be unclear, change, or be interpreted in a manner adverse to us and require us to halt or change our solutions, any of which could seriously harm our business. In addition, if we are unable to mitigate or respond to these and future developments, and alternative solutions do not become widely adopted by our advertisers, then our targeting, measurement, and optimization capabilities will be materially and adversely affected, which would in turn continue to negatively impact our advertising revenue. Our advertising revenue has in the past and could also be seriously harmed by many other factors, including:

Previous wording

•our inability, or perceived inability, to achieve an advertiser’s intended performance metric, measure the effectiveness of our advertising, or target the appropriate audience for advertisements;

Current wording

•our inability, or perceived inability, to achieve an advertiser’s intended performance metric, measure the effectiveness of our advertising, or target the appropriate audience for advertisements, including due to metric estimates published by third parties that may differ from our own metrics;

Previous wording

•volatility in the equity markets, which may reduce our advertisers’ capacity or desire for aggressive advertising spending towards growth; and

Current wording

•volatility in the equity and global trade markets, which may reduce our advertisers’ capacity or desire for aggressive advertising spending towards growth; and

Previous wording

•the political, economic, and macroeconomic climate and the status of the advertising industry in general, including impacts related to labor shortages and disruptions, supply chain disruptions, banking instability, inflation, and as a result of war, terrorism, or armed conflict.

Current wording

•the political, economic, and macroeconomic climate and the status of the advertising industry in general, including impacts related to labor shortages and disruptions, supply chain disruptions, banking instability, tariffs and retaliatory countermeasures implemented by the United States or other governments, inflation, fluctuating interest rates, and as a result of war, terrorism, or armed conflict.

Previous wording

Moreover, individuals are also becoming increasingly aware of and resistant to the collection, use, and sharing of personal data in connection with advertising. Individuals are becoming more aware of options and certain rights related to consent and other options to opt-out of such data processing, including through media attention about privacy and data protection. Some users have opted out of allowing Snap to combine certain data from third-party apps and websites with certain data from Snapchat for advertising purposes, which has negatively impacted our ability to collect or use certain user data and our advertising partners’ ability to deliver relevant content, all of which could negatively impact our business.

Current wording

Moreover, individuals are also increasingly aware of and resistant to the collection, use, and sharing of personal data, including in connection with advertising. Individuals are more aware of options and certain rights related to consent and other options to opt-out of such data processing, including through media attention about privacy and data protection. Some users have opted out of allowing us to combine certain data from third-party apps and websites with certain data from Snapchat for advertising purposes, which has negatively impacted our ability to collect or use certain user data and our advertising partners’ ability to deliver relevant content, all of which have in the past and could again in the future negatively impact our business.

Previous wording

Google and Amazon provide distributed computing infrastructure platforms for business operations, commonly referred to as a “cloud” computing service. We currently run the vast majority of our computing on Google Cloud and AWS and have built our software and computer systems to use computing, storage capabilities, bandwidth, and other services provided by Google and AWS. Our systems are not fully redundant on the two platforms. Any transition of the cloud services currently provided by either Google Cloud or AWS to the other platform or to another cloud provider would be difficult to implement and would cause us to incur significant time and expense. Given this, any significant disruption of or interference with Google Cloud or AWS, whether temporary, regular, or prolonged, would negatively impact our operations and our business would be seriously harmed. If our users or partners are not able to access Snapchat or specific Snapchat features, or encounter difficulties in doing so, due to issues or disruptions with Google Cloud or AWS, we may lose users, partners, or advertising revenue. The level of service provided by Google Cloud and AWS or similar providers may also impact our users’, advertisers’, and partners’ usage of and satisfaction with Snapchat and could seriously harm our business and reputation if the level of service decreases. Hosting costs also have and will continue to increase as our user base and user engagement grows and may seriously harm our business if we are unable to grow our revenues faster than the cost of utilizing the services of Google Cloud, AWS, or similar providers.

Current wording

Google and Amazon provide distributed computing infrastructure platforms for business operations, commonly referred to as a “cloud” computing service. We currently run the vast majority of our computing on Google Cloud and AWS and have built our software and computer systems to use computing, storage capabilities, bandwidth, and other services provided by Google Cloud and AWS. Our systems are not fully redundant on the two platforms. Any transition of the cloud services currently provided by either Google Cloud or AWS to the other platform or to another cloud provider would be difficult to implement and would cause us to incur significant time and expense. Given this, any significant disruption of or interference with Google Cloud or AWS, whether temporary, regular, or prolonged, would negatively impact our operations and our business would be seriously harmed. If our users or partners are not able to access Snapchat or specific Snapchat features, or encounter difficulties in doing so, due to issues or disruptions with Google Cloud or AWS, we may lose users, partners, or advertising revenue. The level of service provided by Google Cloud and AWS or similar providers may also impact our users’, advertisers’, and partners’ usage of and satisfaction with Snapchat and could seriously harm our business and reputation if the level of service decreases. Hosting costs also have and will continue to increase as our user base and user engagement grows and may seriously harm our business if we are unable to grow our revenues faster than the cost of utilizing the services of Google Cloud, AWS, or similar providers.

Previous wording

Macroeconomic uncertainties, including labor shortages and disruptions, supply chain disruptions, banking instability, inflation, and recession risks, have in the past and may continue to adversely impact our business.

Current wording

Macroeconomic uncertainties, including labor shortages and disruptions, supply chain disruptions, banking instability, tariffs and retaliatory countermeasures, inflation, fluctuating interest rates, and recession risks, have in the past and may continue to adversely impact our business.

Previous wording

Global economic and business activities continue to face widespread macroeconomic uncertainties, including labor shortages and disruptions, supply chain disruptions, banking instability, inflation, and recession risks, which may continue for an extended period, and some of which have adversely impacted, and may continue to adversely impact, many aspects of our business.

Current wording

Global economic and business activities have in the past and may continue to face widespread macroeconomic uncertainties, including labor shortages and disruptions, supply chain disruptions, banking instability, tariffs and retaliatory countermeasures, inflation, fluctuating interest rates, and recession risks, which may continue for an extended period, and some of which have adversely impacted, and may continue to adversely impact, many aspects of our business. For example, tariffs recently imposed by the United States, continued threats of new or increased tariffs, sanctions, trade restrictions and trade barriers, and ongoing changes in the United States and foreign government trade policies, including potential modifications to existing trade agreements, have created volatility in the global capital markets, have had and may continue to have a generally disruptive impact on the global economy, and could have further global economic consequences, including disruptions of the global supply chain.

Previous wording

As some of our advertisers experienced downturns or uncertainty in their own business operations and revenue, they halted or decreased or may halt, decrease, or continue to decrease, temporarily or permanently, their advertising spending or may focus their advertising spending more on other platforms, all of which may result in decreased advertising revenue. Labor shortages and disruptions, supply chain disruptions, banking instability, and inflation continue to cause logistical challenges, increased input costs, inventory constraints, and liquidity uncertainty for our advertisers, which in turn may also halt or decrease advertising spending and may make it difficult to forecast our advertising revenue. Any decline in advertising revenue or the collectability of our receivables could seriously harm our business.

Current wording

As some of our advertisers experienced downturns or uncertainty in their own business operations and revenue, they halted or decreased or may halt, decrease, or continue to decrease, temporarily or permanently, their advertising spending or may focus their advertising spending more on other platforms, all of which may result in decreased advertising revenue. Labor shortages and disruptions, supply chain disruptions, tariffs and retaliatory countermeasures, banking instability, inflation, and fluctuating interest rates, have in the past and may continue to cause logistical challenges, increased input costs, inventory constraints, and liquidity uncertainty for our advertisers, which in turn may also halt or decrease advertising spending and may make it difficult to forecast our advertising revenue. Any decline in advertising revenue or the collectability of our receivables could seriously harm our business.

Previous wording

Members of our community may also alter their usage of our products and services, particularly relative to prior periods when travel restrictions were in place. A decrease in the amount or quality of content available on Snapchat, or an interruption in the services provided to us, could lead to a decline in user engagement, which could seriously harm our business.

Current wording

As a result of macroeconomic uncertainties, our partners and community who provide content or services to us may experience delays or interruptions in their ability to create content or provide services, if they are able to do so at all. Members of our community may also alter their usage of our products and services, particularly relative to prior periods when travel restrictions were in place. A decrease in the amount or quality of content available on Snapchat, or an interruption in the services provided to us, could lead to a decline in user engagement, which could seriously harm our business.

Previous wording

We began commercial operations in 2011 and we have historically experienced net losses and negative cash flows from operations. As of September 30, 2024, we had an accumulated deficit of $12.7 billion and for the three months ended September 30, 2024, we had a net loss of $153.2 million. We expect our operating expenses to increase in the future as we expand our operations. We may incur significant losses in the future for many reasons, including due to the other risks and uncertainties described in this report. Additionally, we may encounter unforeseen expenses, operating delays, or other unknown factors that may result in losses in future periods. If our revenue does not grow at a greater rate than our expenses, our business may be seriously harmed and we may not be able to attain and sustain profitability.

Current wording

We began commercial operations in 2011 and we have historically experienced net losses and negative cash flows from operations. As of March 31, 2025, we had an accumulated deficit of $13.1 billion and for the three months ended March 31, 2025, we had a net loss of $139.6 million. We expect our operating expenses to increase in the future as we expand our operations. We may incur significant losses in the future for many reasons, including due to the other risks and uncertainties described in this report. Additionally, we may encounter unforeseen expenses, operating delays, or other unknown factors that may result in losses in future periods. If our revenue does not grow at a greater rate than our expenses, our business may be seriously harmed and we may not be able to attain and sustain profitability.

Previous wording

We cannot guarantee we will continue to attract and retain the personnel we need to maintain our competitive position. We face significant competition in hiring and attracting qualified engineers, designers, and sales personnel, and the change by companies to offer a remote or hybrid work environment may increase the competition for such employees from employers outside of our traditional office locations. In February 2023, we implemented our return to office plan that requires greater in-office attendance. While we intend to continue offering flexible work arrangements based on the different needs of teams across our company on a case-by-case basis, we may face difficulty in hiring and retaining our workforce as a result of this shift to have greater in-office attendance. Further, labor is subject to external factors that are beyond our control, including our industry’s highly competitive market for skilled workers and leaders, inflation, other macroeconomic uncertainties, and workforce participation rates. In addition, if our reputation were to be harmed, whether as a result of our strategic decisions or media, legislative, or regulatory scrutiny or otherwise, it could make it more difficult to attract and retain personnel that are critical to the success of our business. Further, negative perception of our DEI initiatives, whether due to our perceived over- or under-pursuit of such initiatives, may result in issues hiring or retaining employees, as well as potential litigation or other adverse impacts.

Current wording

We cannot guarantee we will continue to attract and retain the personnel we need to maintain our competitive position. We face significant competition in hiring and attracting qualified engineers, designers, and sales personnel, and the change by companies to offer a remote or hybrid work environment may increase the competition for such employees from employers outside of our traditional office locations. In February 2023, we implemented our return to office plan that requires greater in-office attendance. While we intend to continue offering flexible work arrangements based on the different needs of teams across our company on a case-by-case basis, we may face difficulty in hiring and retaining our workforce as a result of this shift to have greater in-office attendance. Further, labor is subject to external factors that are beyond our control, including our industry’s highly competitive market for skilled workers and leaders, inflation, fluctuating interest rates, other macroeconomic uncertainties, and workforce participation rates. In addition, if our reputation were to be harmed, whether as a result of our strategic decisions or media, legislative, or regulatory scrutiny or otherwise, it could make it more difficult to attract and retain personnel that are critical to the success of our business. Recently, there has also been increased scrutiny of companies’ human capital practices and initiatives. Negative perception of certain of these practices and initiatives, whether due to our perceived over- or under-pursuit of such initiatives, may result in issues hiring or retaining employees, as well as potential litigation or other adverse impacts.

Previous wording

In addition, cyber threat actors have also increased the complexity of their attempts to compromise user and advertiser accounts, despite our defenses and detection mechanisms to prevent these account takeovers. User credentials may be obtained on- or off-platform, including through breaches of third-party platforms and services, password stealing malware, social engineering, or other tactics and techniques like credential harvesting, and used to launch individual, group, or coordinated enterprise-wide attacks. Some of these attacks may be hard to detect, including if they are at scale, and may result in cyber threat actors using our service to spam or abuse other users, access user personal data, further compromise additional user accounts, or engage in fraudulent advertising. Some of these attacks could also compromise employee credentials or involve socially engineering employees into granting access to systems or otherwise enabling or assisting in the cyber threat actors’ goals. Because of our global and varied user base, we may also be the target of commercial exploits and other internal and external attack methodologies by commercial spyware vendors, nation states, or nation-state supported groups, which have targeted users and sought to use insiders to obtain user data at peer technology companies.

Current wording

In addition, cyber threat actors have also increased the complexity of their attempts to compromise user and advertiser accounts, despite our defenses and detection mechanisms designed to prevent these account takeovers. User credentials may be obtained on- or off-platform, including through breaches of third-party platforms and services, password stealing malware, social engineering, or other tactics and techniques like credential harvesting, and used to launch individual, group, or coordinated enterprise-wide attacks. Some of these attacks may be hard to detect, including if they are at scale, and may result in cyber threat actors using our service to spam or abuse other users, access personal data, further compromise additional accounts, or engage in fraudulent advertising. Some of these attacks could also compromise employee credentials or involve socially engineering employees into granting access to systems or otherwise enabling or assisting in the cyber threat actors’ goals. Because of our global and varied user base, we may also be the target of commercial exploits and other internal and external attack methodologies by commercial spyware vendors, nation states, or nation-state supported groups, which have targeted users and the data we process about them and sought to use insiders to obtain user or employee data at peer technology companies.

Previous wording

We rely on third parties and technologies to operate critical business systems to process sensitive information in a variety of contexts, including cloud-based infrastructure, data center facilities, AI, encryption and authentication technology, employee email, content delivery, and other functions. We may also rely on third parties to provide other products or services to operate our business or enable features in our platform. Additionally, some advertisers and partners store sensitive information that we share with them. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place despite their contractual representations to implement such measures and our third-party service provider vetting process. If these third parties fail to implement adequate data security practices or fail to comply with our terms, policies, or contractual obligations, our sensitive information may be improperly accessed or disclosed, and we may experience adverse consequences. And even if these third parties take all of these steps, their networks may still suffer a breach, which could compromise our sensitive information. We or our third-party providers may also experience failures or malfunctions of hardware or software, the loss of technology assets, or the loss of data that, while not caused by threat actors, may have a similar impact and risk to our business. While we may be entitled to damages if the third parties on whom we rely fail to satisfy their privacy or security-related obligations to us, or cause the loss of our data or prolonged downtime, any award may be insufficient to cover our damages, or we may be unable to recover such award.

Current wording

We rely on third parties and technologies to operate critical business systems to process sensitive information in a variety of contexts, including cloud-based infrastructure, data center facilities, AI, encryption and authentication technology, employee email, content delivery, and other functions. We also rely on third parties to provide other products or services to operate our business or enable features in our platform. Additionally, some advertisers and partners store sensitive information that we share with them. Our ability to monitor these third parties’ information security practices is limited, and these third parties may not have adequate information security measures in place despite their contractual representations to implement such measures and our third-party provider vetting process. If these third parties fail to implement adequate data security practices or fail to comply with our terms, policies, or contractual obligations, our sensitive information may be compromised, and we may experience adverse consequences. And even if these third parties implement data security practices and comply with various obligations, their networks may still suffer a breach, which could compromise our sensitive information. We or our third-party providers may also experience failures or malfunctions of hardware or software, the loss of technology assets, or the loss of data that, while not caused by threat actors, may have a similar impact and risk to our business. While we may be entitled to damages if the third parties on whom we rely fail to satisfy their privacy or security-related obligations to us, or cause the loss of our data or prolonged downtime, any award may be insufficient to cover our damages, or we may be unable to recover such award.

Previous wording

While we have implemented security measures designed to protect against security incidents, there can be no assurance that these measures will be effective. If any of these or similar events occur, our or our third-party partners’ sensitive information and information technology systems could be accessed, acquired, modified, destroyed, lost, altered, encrypted, or disclosed in an unauthorized, unlawful, accidental, or other improper manner, resulting in a security incident or other interruption. It may be difficult and costly to detect, investigate, mitigate, contain, and remediate a security incident. Our efforts to do so may not be successful. Actions taken by us or the third parties with whom we work to detect, investigate, mitigate, contain, and remediate a security incident could result in outages, data losses, and disruptions of our business. Threat actors may also gain access to other networks and systems after a compromise of our networks and systems.

Current wording

While we have implemented security measures designed to protect against cyberattacks and other security incidents, there can be no assurance that these measures will be effective. If any of these or similar events occur, our or our third-party partners’ sensitive information and information technology systems could be accessed, acquired, modified, destroyed, lost, altered, encrypted, or disclosed in an unauthorized, unlawful, accidental, or other improper manner, resulting in a security incident or other interruption. It may be difficult and costly to detect, investigate, mitigate, contain, and remediate a security incident. Our efforts to do so may not be successful. Actions taken by us or the third parties with whom we work to detect, investigate, mitigate, contain, and remediate a security incident could result in outages, data losses, and disruptions of our business. Threat actors may also gain access to other networks and systems after a compromise of our networks and systems.

Previous wording

We may expend significant resources or modify our business activities to adopt additional measures designed to protect against security incidents. Certain data privacy and security obligations may require us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our systems and sensitive information.

Current wording

We have and may continue to expend significant resources or modify our business activities to adopt additional measures designed to protect against cyberattacks and other security incidents. Certain data privacy and security obligations may require us to implement and maintain specific security measures or industry-standard or reasonable security measures to protect our systems and sensitive information.

Previous wording

We have previously suffered the loss of sensitive information related to employee error, insider threats, and vendor breaches. Any security incident experienced by us or our third-party partners could damage our reputation and our brand, and diminish our competitive position. Applicable privacy and security obligations may require us, or we may choose, to notify relevant stakeholders, including affected individuals, customers, regulators, and investors, of security incidents, or take other actions. Such disclosures and related actions are costly and the failure to comply with applicable legal requirements could lead to adverse consequences. Governments and regulatory agencies (including the Securities and Exchange Commission, or the SEC) have and may continue to enact new disclosure requirements for cybersecurity events. In addition, affected users or government authorities could initiate legal or regulatory action against us, including class-action claims, mass arbitration demands, investigations, penalties, and audits, which could be time-consuming and cause us to incur significant expense and liability or result in orders or consent decrees forcing us to modify our business practices. We could also experience loss of user or advertiser confidence in the security of our platform, additional reporting requirements or oversight, restrictions on processing sensitive information, claims by our partners or other relevant parties that we have failed to comply with contractual obligations or our policies, and indemnification obligations. We could also spend material resources to investigate or correct the incident and to prevent future incidents. Maintaining the trust of our users is important to sustain our growth, retention, and user engagement. Concerns over our privacy and security practices, whether actual or unfounded, could damage our reputation and brand and deter users, advertisers, and partners from using our products and services. Any of these occurrences could seriously harm our business.

Current wording

We have in the past experienced, and may in the future experience, actual and attempted cyberattacks and other security incidents that impact the confidentiality, availability, or integrity of sensitive information, including as a result of insider threats, employee error, vendor breaches, and other causes. Any cyberattack or other security incident experienced by us or our third-party partners could damage our reputation and our brand, and diminish our competitive position. Applicable privacy and security obligations may require us, or we may choose, to notify relevant stakeholders, including affected individuals, customers, regulators, and investors, of security incidents, or take other actions. Such disclosures and related actions are costly and the failure to comply with applicable legal requirements could lead to adverse consequences. Governments and regulatory agencies (including the Securities and Exchange Commission, or the SEC) have and may continue to enact new disclosure requirements for cybersecurity events. In addition, affected users or government authorities could initiate legal or regulatory action against us, including class-action claims, mass arbitration demands, investigations, penalties, and audits, which could be time-consuming and cause us to incur significant expense and liability or result in orders or consent decrees forcing us to modify our business practices. We could also experience loss of user or advertiser confidence in the security of our platform, additional reporting requirements or oversight, restrictions on processing sensitive information, claims by our partners or other relevant parties that we have failed to comply with contractual obligations or our policies, and indemnification obligations. We could also spend material resources to investigate or correct the incident and to prevent future incidents. Maintaining the trust of our users is important to sustain our growth, retention, and user engagement. Concerns over our privacy and security practices, whether actual or unfounded, could damage our reputation and brand and deter users, advertisers, and partners from using our products and services. Any of these occurrences could seriously harm our business.

Previous wording

Some of our demographic data may be incomplete or inaccurate. For example, because users self-report their dates of birth, our age-demographic data may differ from our users’ actual ages. And because users who signed up for Snapchat before June 2013 were not asked to supply their date of birth, we may exclude those users from age demographics or estimate their ages based on a sample of the self-reported ages we do have. If our users provide us with incorrect or incomplete information regarding their age or other attributes, then our estimates may prove inaccurate and fail to meet investor or advertiser expectations.

Current wording

Some of our demographic data may be incomplete or inaccurate. For example, because users self-report their dates of birth, our age-demographic data may differ from our users’ actual ages. And because users who signed up for Snapchat before June 2013 were not asked to supply their date of birth, we may exclude those users from age demographics or estimate their ages based on a sample of the self-reported ages we do have. If our users provide us with incorrect or incomplete information regarding their age or other attributes, then our estimates may prove inaccurate and fail to meet investor or advertiser expectations. In addition, our estimates for revenue by user location may also be affected by data limitations and other challenges in measuring user locations. Our data regarding the geographic location of our users is estimated based on a number of factors, such as the user’s IP address. If a user utilizes a proxy server or if there are other data limitations, we may not be able to accurately reflect the user’s actual location.

Previous wording

Errors or inaccuracies in our metrics or data could also result in incorrect business decisions and inefficiencies. For instance, if a significant understatement or overstatement of active users were to occur, we may expend resources to implement unnecessary business measures or fail to take required actions to attract a sufficient number of users to satisfy our growth strategies. We count a DAU when a user visits Snapchat through our applications or websites, and only once per user per day. We have multiple pipelines of user data that we use to determine whether a user has visited Snapchat through our applications or websites during a particular day, becoming a DAU. This provides redundancy in the event one pipeline of data were to become unavailable for technical reasons, and also gives us redundant data to help measure how users interact with our application. However, we believe that we do not capture all data regarding our active users, which has in the past and may in the future result in understated metrics. This generally occurs because of technical issues, for instance when our systems do not record data from a user’s application or when a user opens the Snapchat application and contacts our servers but is not recorded as an active user. We continually seek to address these technical issues and improve our measurement processes and accuracy, such as comparing our active users and other metrics with data received from other pipelines, including data recorded by our servers and systems. But given the complexity of the systems involved and the rapidly changing nature of mobile devices and systems, we expect these issues to continue, particularly if we continue to expand in parts of the world where mobile data systems and connections are less stable. If we fail to maintain an effective analytics platform, our metrics calculations may be inaccurate. We regularly review, have adjusted in the past, and are likely to adjust in the future our processes for calculating our internal metrics to improve their accuracy. As a result of such adjustments, our DAUs or other metrics may not be comparable to those in prior periods. Our measures of DAU may also differ from estimates published by third parties or from similarly titled metrics of our competitors due to differences in methodology or data used. If advertisers, partners, or investors do not perceive our user, geographic, other demographic metrics, or measurements of advertising effectiveness to be accurate, or if we discover material inaccuracies in our metrics, our reputation may be seriously harmed. Our advertisers and partners may also be less willing to allocate their budgets or resources to Snapchat, which could seriously harm our business. In addition, we calculate average DAUs for a particular quarter by adding the number of DAUs on each day of that quarter and dividing that sum by the number of days in that quarter. This calculation may mask any individual days or months within the quarter…

Excerpt shortened here; the source contains the full paragraph.

Current wording

Errors or inaccuracies in our metrics or data could also result in incorrect business decisions and inefficiencies. For instance, if a significant understatement or overstatement of active users were to occur, we may expend resources to implement unnecessary business measures or fail to take required actions to attract a sufficient number of users to satisfy our growth strategies. We count a DAU when a user visits Snapchat through our applications or websites, and only once per user per day. We have multiple pipelines of user data that we use to determine whether a user has visited Snapchat through our applications or websites during a particular day. This provides redundancy in the event one pipeline of data were to become unavailable for technical reasons, and also gives us redundant data to help measure how users interact with our application. However, we believe that we do not capture all data regarding our active users, which has in the past and may in the future result in understated metrics. This generally occurs because of technical issues, for instance when our systems do not record data from a user’s application or when a user opens the Snapchat application and contacts our servers but is not recorded as an active user. We continually seek to address these technical issues and improve our measurement processes and accuracy, such as comparing our active users and other metrics with data received from other pipelines, including data recorded by our servers and systems. But given the complexity of the systems involved and the rapidly changing nature of mobile devices and systems, we expect these issues to continue, particularly if we continue to expand in parts of the world where mobile data systems and connections are less stable. If we fail to maintain an effective analytics platform, our metrics calculations may be inaccurate. We regularly review, have adjusted in the past, and are likely to adjust in the future our processes for calculating our internal metrics to improve their accuracy. As a result of such adjustments, our DAUs or other metrics may not be comparable to those in prior periods. Our measures of DAU and other metrics may also differ from estimates published by third parties or from similarly titled metrics of our competitors due to differences in methodology, data used, data limitations, or other challenges in measuring large online and mobile populations. If advertisers, partners, or investors do not perceive our user, geographic, other demographic metrics, or measurements of advertising effectiveness to be accurate, or if we discover material inaccuracies in our metrics, our reputation may be seriously harmed. Our advertisers and partners may also be less willing to allocate their budgets or resources to Snapchat, which could seriously harm our business. In addition, we calculate average DAUs for a particular quarter by adding the number of DAUs on each day of that quarter and dividing that sum by the number of days in …

Excerpt shortened here; the source contains the full paragraph.

Previous wording

Because we store, process, and use data, some of which contains personal data, we are subject to complex and evolving federal, state, local and foreign laws, regulations, executive actions, rules, contractual obligations, policies, and other obligations regarding privacy, data protection, content, the use of AI, and other matters. Many of these obligations are subject to change and uncertain interpretation, and our actual or perceived failure to comply with such obligations could result in investigations, claims (including class actions), mass arbitration demands, changes to our business practices, increased cost of operations, and declines in user growth, retention, or engagement, or other adverse consequences, any of which could seriously harm our business.

Current wording

Because we store, process, and use data, some of which contains personal data, we are subject to complex and evolving federal, state, local and foreign laws, regulations, executive actions, rules, contractual obligations, policies, and other obligations regarding privacy, data protection, content regulation, and other matters. Many of these obligations are subject to change and to uncertain interpretation, and our actual or perceived failure to comply with such obligations could result in investigations, claims (including class actions), mass arbitration demands, changes to our business practices, increased cost of operations, and declines in user growth, retention, or engagement, or other adverse consequences, any of which could seriously harm our business.

Previous wording

In the ordinary course of business, we collect, store, use, and share personal data and other sensitive information, including proprietary and confidential business data, trade secrets, third-party sensitive information, and intellectual property. Accordingly, we are subject to a variety of laws, regulations, industry standards, policies, contractual requirements, executive actions, and other obligations relating to privacy, security, and data protection. We also are or may in the future be subject to many federal, state, local, and foreign laws and regulations, including those related to privacy, rights of publicity, content, data protection, AI, intellectual property, health and safety, competition, protection of minors, consumer protection, employment, money transmission, import and export restrictions, gift cards, electronic funds transfers, anti-money laundering, advertising, algorithms, encryption, and taxation.

Current wording

In the ordinary course of business, we collect, store, use, and share personal data and other sensitive information, including proprietary and confidential business data, trade secrets, third-party sensitive information, and intellectual property. Accordingly, we are subject to a variety of laws, regulations, industry standards, policies, contractual requirements, executive actions, and other obligations relating to privacy, security, and data protection. We also are and may in the future be subject to many federal, state, local, and foreign laws and regulations, including those related to privacy, rights of publicity, content, data protection, AI, intellectual property, health and safety, competition, protection of minors, consumer protection, employment, money transmission, import and export restrictions, gift cards, electronic funds transfers, anti-money laundering, advertising, algorithms, encryption, and taxation.

Previous wording

Under certain of these laws, we could face temporary or definitive bans on data processing and other corrective actions, substantial monetary fines, or private litigation related to processing of personal data brought by classes of data subjects or consumer protection organizations authorized to represent their interests. The transfer of personal data continues to be under increased regulatory attention and scrutiny, and certain jurisdictions in which we operate have significantly limited the lawful basis on which personal data can be transferred to other jurisdictions and increased the assessments required to do so. We have attempted to structure our operations, and the cross-border transfer mechanisms we rely on, in a manner designed to help us partially avoid some of these concerns. Some of these mechanisms are, or may in the future be, subject to legal challenges, and there is no assurance that we can satisfy or rely on these mechanisms to lawfully transfer personal data in the future. If there is no lawful manner for us to transfer personal data, or if the requirements for a legally compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors, and other third parties, and injunctions against our processing or transferring of personal data necessary to operate our business. Regulators may seek to restrict our data processing activities if they believe we have violated cross-border data transfer limitations, which would seriously harm our business. Additionally, companies like us that transfer personal data between jurisdictions, particularly to the United States, are subject to increased scrutiny from regulators, individual litigants, and activist groups.

Current wording

Under certain of these laws, we could face temporary or definitive bans on data processing and other corrective actions, substantial monetary fines, or private litigation related to processing of personal data brought by classes of data subjects or consumer protection organizations authorized to represent their interests. The transfer of personal data continues to be under increased regulatory attention and scrutiny, and certain jurisdictions in which we operate have significantly limited the lawful basis on which personal data can be transferred to other jurisdictions, enacted data export and localization requirements, and increased the assessments required to do so. We have attempted to structure our operations, and the cross-border transfer mechanisms we rely on, in a manner designed to help us partially avoid some of these concerns. Some of these mechanisms are, or may in the future be, subject to legal challenges, and there is no assurance that we can satisfy or rely on these mechanisms to lawfully transfer personal data in the future. If there is no lawful manner for us to transfer personal data, or if the requirements for a legally compliant transfer are too onerous, we could face significant adverse consequences, including the interruption or degradation of our operations, the need to relocate part of or all of our business or data processing activities to other jurisdictions at significant expense, increased exposure to regulatory actions, substantial fines and penalties, the inability to transfer data and work with partners, vendors, and other third parties, and injunctions against our processing or transferring of personal data necessary to operate our business. Regulators may seek to restrict our data processing activities if they believe we have violated cross-border data transfer limitations, which would seriously harm our business. Additionally, companies like us that transfer personal data between jurisdictions, particularly to the United States, are subject to increased scrutiny from regulators, individual litigants, and activist groups.

Previous wording

Legislation in certain of the countries in which we operate has imposed extensive obligations, and potential monetary fines, on entities like us that are categorized in various contexts as online service providers (including, as the case may be, social media platforms, electronic communications providers, or other similar categorizations) who enable the sharing of user‑generated content, to identify, mitigate, and manage the risks of harm to users from illegal and harmful content, such as terrorism, child sexual exploitation and abuse, and harassment or stalking. In addition, the privacy of teens’ personal data collected online, and use of commercial websites, applications, online services, or other interactive platforms, generally, are also becoming increasingly scrutinized. Regulations focused on online safety and protection of teens’ privacy online have and may in the future require us to change our services and incur costs to do so. Moreover, various laws to restrict or govern the use of commercial websites, applications, online services, or other interactive platforms by teens have passed or have been proposed, including laws prohibiting showing teens advertising, requiring age verification, limiting the use of minors’ personal data, and requiring parental consent or providing for other parental rights. These laws may be, or in some cases already have been, subject to legal challenges and changing interpretations, which may further complicate our efforts to comply with laws applicable to us. These new laws may result in restrictions on the use of certain of our products or services by teens, the inability to offer certain products and services to teens, decrease DAUs or user engagement in those jurisdictions, require changes to our products and services to achieve compliance, decrease our advertising and subscription revenue, and increase legal risk and compliance costs for us and our third-party partners, any of which could seriously harm our business.

Current wording

Legislation in certain of the countries in which we operate has imposed extensive obligations, and potential monetary fines, on entities like us that are categorized in various contexts as online service providers (including, as the case may be, social media platforms, electronic communications providers, or other similar categorizations) who enable the sharing of user‑generated content, to identify, mitigate, and manage the risks of harm to users from illegal and harmful content, such as terrorism, child sexual exploitation and abuse, and harassment or stalking. In addition, the privacy of teens’ personal data collected online, and use of commercial websites, applications, online services, or other interactive platforms, generally, are also becoming increasingly scrutinized. Regulations focused on online safety and protection of teens’ privacy online have and may in the future require us to materially change our services and incur costs to do so. Moreover, various laws to restrict or govern the use of commercial websites, applications, online services, or other interactive platforms by teens have passed or have been proposed, including laws prohibiting certain teen age groups from accessing online services, including social media, restricting advertising to teens, requiring age verification, requiring default safeguards and imposing an express or implied duty of care, requiring warning labels, limiting the use of minors’ personal data, and requiring parental consent or providing for other parental controls or rights. These laws may be, or in some cases already have been, subject to legal challenges and changing interpretations, which may further complicate our efforts to comply with laws applicable to us. These new laws may result in restrictions on the use of certain of our products or services by teens, the inability to offer certain products and services to teens, decrease DAUs or user engagement in those jurisdictions, require changes to our products and services to achieve compliance, require us to use and incur the costs of certain age assurance and verified parental consent providers, decrease our advertising and subscription revenue, and increase legal risk and compliance costs for us and our third-party partners, any of which could seriously harm our business. These laws also allow for substantial statutory fines for noncompliance and, in some instances, provide for civil penalties and a private right of action for violations, which may increase the likelihood and cost of regulatory actions and litigation under these laws, and could seriously harm our business.

Previous wording

Laws and regulations focused on privacy, security, and data protection, including data breach notification laws, personal data privacy laws, consumer protection laws, wiretapping laws, invasion of privacy laws, and other similar laws have imposed obligations on companies that collect personal data from users, including providing specific disclosures in privacy notices, expanding the requirements for handling personal data, requiring consents to process personal data in certain circumstances, and affording residents with certain rights concerning their personal data. Such rights may include the right to access, correct, or delete certain personal data, and to opt-out of certain data processing activities, such as targeted advertising, profiling, and automated decision-making. The exercise of these rights may impact our business and ability to provide our products and services, and our inability or failure to obtain consent or otherwise identify a lawful basis for data processing that is acceptable to a regulator, where required, could result in adverse consequences, including class-action litigation, regulatory enforcement, and mass arbitration demands. Certain of these laws also impose stricter requirements for processing certain personal data, including sensitive information, such as conducting data privacy impact assessments. These laws also allow for statutory fines for noncompliance and, in some instances, provide for civil penalties for violations and a private right of action for data breaches, which may increase the likelihood and cost of data breach litigation, and could seriously harm our business.

Current wording

Laws and regulations focused on privacy, security, and data protection, including data breach notification laws, personal data privacy laws, consumer protection laws, wiretapping laws, invasion of privacy laws, and other similar laws have imposed obligations on companies that collect personal data from users, including providing specific disclosures in privacy notices, expanding the requirements for handling personal data, requiring consents to process personal data in certain circumstances, and affording residents with certain rights concerning their personal data. Such rights include the right to access, correct, or delete certain personal data, appeal the denial of a right, and to opt-out of or limit certain data processing activities, such as targeted advertising, profiling, and artificial intelligence, including automated decision-making. The exercise of these rights impact our business and ability to provide our products and services, and our inability or failure to obtain consent or otherwise identify a lawful basis for data processing that is acceptable to a regulator, where required, could result in adverse consequences, including class-action litigation, regulatory enforcement, and mass arbitration demands. Certain of these laws also impose stricter requirements for processing certain personal data, including sensitive information, such as conducting data privacy impact assessments.

Previous wording

Additionally, several jurisdictions in which we operate have enacted statutes banning or restricting the collection of biometric information. Certain of these laws provide for substantial penalties and statutory damages and have generated significant class-action activity. Although we maintain the position that our technologies do not collect any biometric information, we have in the past, and may in the future, settle these disputes to avoid potentially costly litigation and have in certain instances made changes to our products in an abundance of caution.

Current wording

Additionally, several jurisdictions in which we operate have enacted statutes banning or restricting the collection of biometric information. Certain of these laws provide for substantial penalties and statutory damages and have generated significant class-action activity. Although we maintain the position that our technologies do not collect any biometric information that is used to identify individuals, we have in the past, and may in the future, settle these disputes to avoid potentially costly litigation and have in certain instances made changes to our products in an abundance of caution.

Previous wording

The implementation and enforcement, including through private rights of action, of these increasingly complex, onerous, or divergent laws and regulations, and the introduction, interpretation, or revision of any new such laws or regulations, with respect to privacy, security, data protection, and our industry are uncertain and may further complicate compliance efforts, lead to fragmentation of the service, increase legal risk and compliance costs for us and our third-party partners, or decrease the perceived usefulness of our service to our users and advertisers. For example, some federal privacy laws are currently being challenged, and litigation in this space could impact the privacy rights of our community, including modifying the ability of third parties to obtain private communications between users, which in turn may negatively impact users’ experience, trust, and satisfaction and decrease their engagement with our products. Many of these obligations are becoming increasingly stringent and subject to rapid change and uncertain interpretation. Preparing for and complying with these obligations requires us to devote significant resources, and there is no guarantee that our compliance efforts to date, or in the future, will be deemed compliant or sufficient. These obligations may necessitate changes to our products and services, information technologies, systems, and practices and to those of any third parties that process personal data on our behalf. In addition, these obligations may require us to change our business model. Our business model materially depends on our ability to process personal data in connection with our advertising offerings, so we are particularly exposed to the risks associated with the rapidly changing legal landscape regarding privacy, security, and data protection. For example, privacy regulators have targeted us and some of our competitors, including by investigating data processing activities and in the past have issued large fines to our competitors. Such enforcement actions may cause us to revise our business plans and operations. Moreover, we believe a number of investigations into other technology companies are currently being conducted by federal, state, and foreign legislative and regulatory bodies. We therefore may be at heightened risk of regulatory scrutiny, as regulators focus their attention on data processing activities of companies like us, and any changes in the regulatory framework or enforcement actions, whether against us or our competitors, could require us to fundamentally change our business model, and seriously harm our business.

Current wording

The implementation and enforcement, including through private rights of action, of these increasingly complex, onerous, or divergent laws and regulations, and the introduction, interpretation, or revision of any new such laws or regulations, with respect to privacy, security, data protection, and our industry are uncertain and may further complicate compliance efforts, lead to fragmentation of the service, increase legal risk and compliance costs for us and our third-party partners, or decrease the perceived usefulness of our service to our users and advertisers. For example, some federal privacy laws are currently being challenged, and litigation in this space could impact the privacy rights of our community, including modifying the ability of third parties (such as government agencies and civil litigants) to obtain private communications between users, which in turn may negatively impact users’ experience, trust, and satisfaction and decrease their engagement with our products. Many of these obligations are becoming increasingly stringent and subject to rapid change and uncertain interpretation. Preparing for and complying with these obligations requires us to devote significant resources, and there is no guarantee that our compliance efforts to date, or in the future, will be deemed compliant or sufficient. These obligations may necessitate changes to our products and services, information technologies, systems, and practices and to those of any third parties that process personal data on our behalf. In addition, these obligations may require us to change our business model. Our business model materially depends on our ability to process personal data in connection with our advertising offerings, so we are particularly exposed to the risks associated with the rapidly changing legal landscape regarding privacy, security, and data protection. For example, privacy regulators have targeted us and some of our competitors, including by investigating data processing activities and in the past have issued large fines to our competitors. Such enforcement actions may cause us to revise our business plans and operations. Moreover, we believe a number of investigations into other technology companies are currently being conducted by federal, state, and foreign legislative and regulatory bodies. We therefore are at heightened risk of regulatory scrutiny, as regulators focus their attention on data processing activities of companies like us, and any changes in the regulatory framework or enforcement actions, whether against us or our competitors, could require us to fundamentally change our business model, and seriously harm our business.

Previous wording

We have in the past been subject to enforcement actions, investigations, proceedings, orders, or various government inquiries regarding our data privacy and security practices and processing. For example, in December 2014, the Federal Trade Commission, or FTC, resolved an investigation into some of our early practices by issuing a final order. That order requires, among other things, that we establish a robust privacy program to govern how we treat user data. During the 20-year term of the order, we must complete biennial independent privacy audits. Violating existing or future regulatory orders or consent decrees could subject us to substantial monetary fines and other penalties that could seriously harm our business.

Current wording

We have in the past been subject to enforcement actions, investigations, proceedings, orders, or various government inquiries regarding our data privacy and security practices and processing. For example, in December 2014, the FTC resolved an investigation into some of our early practices by issuing a final order. That order requires, among other things, that we establish a robust privacy program to govern how we treat user data. During the 20-year term of the order, we must complete biennial independent privacy audits. The FTC has continued to review our practices and in January 2025, announced the referral of a complaint to the Department of Justice, or DOJ, pertaining to our deployment of our My AI feature and the allegedly resulting risk of harm to young users. While we believe we have meritorious defenses to any legal proceedings that may arise out of this complaint, we will continue to cooperate with regulatory authorities. Any enforcement action related to this matter, or any violation of existing or future regulatory orders or consent decrees could subject us to substantial monetary fines and other penalties that could seriously harm our business.

Previous wording

We use AI, including generative AI, in consumer-facing features of our products and services, such My AI, and in the operation of our business. The development and use of AI presents various privacy and security risks that may impact our business. AI is subject to privacy and data security laws, as well as increasing regulation and scrutiny. Several countries in which we operate or have users have proposed or enacted, or are considering, laws governing AI, which we are or may be subject to. The legal landscape around intellectual property rights in AI, and the use, training, implementation, privacy, and safety of AI, is evolving, including ongoing litigation against our peers relating to the use of data protected by global intellectual property and privacy laws. These obligations may make it harder for us to use AI in our products or services, lead to regulatory fines or penalties, or require us to change our business practices, retrain our AI, or prevent or limit our use of AI. We are subject to regulatory inquiries relating to the use and operation of My AI. Given the current unsettled nature of the legal and regulatory environment surrounding AI, our or our partners’ AI features and use, training, and implementation of AI could subject us to regulatory action, product restrictions, fines, litigation, and reputational harm, and require us to expend significant resources, all of which may seriously harm our business. Additionally, if our AI products fail to perform as intended, or produce outputs that are harmful, misleading, inaccurate, or biased, in addition to the risks above, our reputation and user engagement may be harmed, and we may be required to change our business practices, retrain our AI, or limit our use of AI. Furthermore, certain enacted and proposed regulations related to AI could impose onerous obligations on our business, products, and services, including restrictions or transparency obligations on the training and use of AI-related systems, and obligations relating to labeling and provenance of AI-generated content, all of which may require us to change our products or business practices to comply with such obligations if they are applicable.

Current wording

AI development, deployment, training, use, safety, and personal data processing is subject to new and evolving privacy and data security laws, as well as increasing AI laws and review by various governmental and regulatory agencies. We are, have been, and could in the future be subject to regulatory inquiries relating to the use and operation of AI. While such regulatory inquiries have not adversely impacted our business to date, given the current unsettled nature of the legal and regulatory environment surrounding AI, our or our partners’ AI development, deployment, training, use, safety, and personal data processing of AI could subject us to further regulatory inquiries or actions, which could result in product restrictions, fines and penalties, equitable remedies such as requirements to retrain or disgorge our AI, as well as litigation and reputational harm, any of which could seriously harm our business and require us to expend significant resources. Such consequences, if imposed, may also make it harder for us to use AI in our product and services, or internally in our business operations, which could seriously harm our business. Furthermore, certain enacted and proposed regulations related to AI could impose onerous obligations on our business, products, and services, including restrictions on or transparency obligations with respect to the training and use of AI-related systems, and obligations relating to labeling and provenance of AI-generated content. If applicable, such obligations may, and in the case of the EU AI Act will, require us to change our products or business practices in order to comply. Individuals are also increasingly aware of and resistant to the use of their personal data in AI systems and for AI training, which could limit our ability to develop, deploy, train, and ensure the safety of our AI products and services, and if we fail to provide adequate transparency to users, we could lose the trust of our users, be subject to litigation or regulatory enforcement, or other harms to our business. Additionally, if our AI products fail to perform as intended, or produce outputs that are harmful, misleading, inaccurate, or biased, in addition to the risks above, our business may be harmed.

Previous wording

•seasonal or other fluctuations in spending by our advertisers and product usage by our users, each of which may change as our product offerings evolve or as our business grows or as a result of unpredictable events such as labor shortages and disruptions, supply chain disruptions, banking instability, inflationary pressures, or geo-political conflicts;

Current wording

•seasonal or other fluctuations in spending by our advertisers and product usage by our users, each of which may change as our product offerings evolve or as our business grows or as a result of unpredictable events such as labor shortages and disruptions, supply chain disruptions, banking instability, inflationary pressures, fluctuating interest rates, or geo-political conflicts;

Previous wording

•changes in the legislative or regulatory environment, including with respect to privacy, rights of publicity, content, data protection, intellectual property, health and safety, competition, protection of minors, consumer protection, employment, money transmission, import and export restrictions, gift cards, electronic funds transfers, anti-money laundering, advertising, algorithms, encryption, and taxation, enforcement by government regulators, including fines, orders, sanctions, or consent decrees, or the issuance of executive orders or other similar executive actions that may adversely affect our revenues or restrict our business;

Current wording

•changes in the legislative or regulatory environment, including with respect to privacy, rights of publicity, content, data protection, intellectual property, communication, health and safety, competition, protection of minors, consumer protection, employment, money transmission, import and export restrictions, gift cards, electronic funds transfers, anti-money laundering, advertising, algorithms, encryption, and taxation, enforcement by government regulators, including fines, orders, sanctions, tariffs and retaliatory countermeasures, or consent decrees, or the issuance of executive orders or other similar executive actions that may adversely affect our revenues or restrict our business;