Text:
I consent to Plex to: (i) sell certain personal information (hashed emails, advertising identifiers) to third-parties for advertising and marketing purposes; and (ii) store and/or access certain personal information (advertising identifiers, IP address, content being watched) on my device(s) and share that information with Plex’s advertising partners. This data is used to deliver personalised ads and content, ad and content measurement, audience insights and product development. Your consent applies to all devices on which you have Plex installed. You can withdraw your consent at any time in Account Settings or using this page.
Soure: https://www.plex.tv/vendors/ (Might have to clear cache)
Can also read about the changes here: https://www.plex.tv/about/privacy-legal/
One of the security upsides to plex is that any number of people can log in with the same credential.
That means that while Plex can harvest information- what account, what's being watched, IP address, device and player identifier- It doesn't know who to attach that information to. So you can get dozens or maybe hundreds of users polluting the same account with watch information. Less useful information to be sure.