{"registry_version":"2026.1025.387","generated_at":"2026-10-25T06:27:00Z","content_sha256":"089d16f627d9365e3d0663cc8069203706d7cb23a76c332226e29686968811a5","signed":true,"signature":{"key_id":"ed25519:74ca19268e364242","algorithm":"ed25519","expires_at":"2026-11-24T06:27:09Z","expired":false,"manifest":"/registry/manifest.json"},"id":"meta/facebook-login","name":"Facebook Login","status":"researched","last_verified":null,"last_researched":"2026-10-25","disclaimer":"Plain-English summary of the provider’s rules and of what people report. Not legal advice.","terms":[{"kind":"rules_say","kind_label":"The rules say","severity":"red","severity_label":"Can get you banned","title":"Never expose the app secret","text":"The Platform Terms require you to protect and never transfer, share or solicit access tokens or app secrets. Keep the App Secret server-side only. Plain-English summary, not legal advice.","source_url":"https://developers.facebook.com/terms/","source_title":"Meta Platform Terms","accessed":"2026-10-25"},{"kind":"rules_say","kind_label":"The rules say","severity":"red","severity_label":"Can get you banned","title":"Data deletion and privacy policy are mandatory","text":"Apps that access user data must keep a privacy policy, delete Platform Data on request, and give users a deletion route (callback or instructions URL). Breaches can lead to app suspension or removal.","source_url":"https://developers.facebook.com/terms/","source_title":"Meta Platform Terms","accessed":"2026-10-25"},{"kind":"rules_say","kind_label":"The rules say","severity":"amber","severity_label":"Can cost money","title":"Data access lapses after 90 days of inactivity","text":"Even while login still works, access to a user's data expires 90 days after they were last active; the app must prompt them to reauthorize.","source_url":"https://developers.facebook.com/docs/facebook-login/auth-vs-data/","source_title":"Facebook Login – Authentication versus data access","accessed":"2026-10-25"},{"kind":"rules_say","kind_label":"The rules say","severity":"amber","severity_label":"Can cost money","title":"Annual Data Use Checkup","text":"Apps with Advanced Access must recertify their data use every year or lose access to those features.","source_url":"https://developers.facebook.com/blog/post/2020/09/10/data-use-checkup-rolling-out-broadly-facebook-platform-developers/","source_title":"Meta for Developers blog – Data Use Checkup rolling out broadly","accessed":"2026-10-25"}],"renewals":[{"what":"Long-lived user access token (SDKs refresh it on use; server flows must re-exchange)","every":"about 60 days","source_url":"https://developers.facebook.com/docs/facebook-login/guides/access-tokens"},{"what":"Data access reauthorization if the user has been inactive","every":"90 days","source_url":"https://developers.facebook.com/docs/facebook-login/auth-vs-data/"},{"what":"Data Use Checkup for apps with Advanced Access","every":"1 year","source_url":"https://developers.facebook.com/blog/post/2020/09/10/data-use-checkup-rolling-out-broadly-facebook-platform-developers/"}],"pricing_notes":null,"guide_url":"https://verapli.com/guides/meta/facebook-login"}