https://myaccount.google.com/purchases
If you didn't yet know, Google is datamining GMail etc for purchase confirmation emails amongst other things and aggregating it for their own purposes in an extremely detailed way.
(Everything you purchased with order ids, detailed billing details, VAT, including subscriptions etc)
Do not believe a single word about how this information is kept private. There is zero reason to build a system to aggregate this and then not use it to make money out of.
@szbalint While I dont doubt this is the case, do you have a source that backs up this assertion or is it more of something you just suspect but cant confirm?
@freemo well an EULA can be easily sidestepped aswell.
Facebook did this, they leaked data "by proxy", meaning that they made partnership agreements, then allowed api access to data and relied on the good will / promises of any third party to limit data vacuuming.