[privacylawthrow]

You asked the wrong lawyers, at least for the US. The FTC's case against Sears in 2009 made it clear that consent to a privacy notice isn't valid if the privacy notice is buried deep in a licensing agreement, even if the notice is correct.

[3np]

They are referring to GDPR. I do not see how any US ruling applies to that.