Nintendo updated its privacy policy to clarify how it collects error data, expanded where it uses location information to include checking into events and Nintendo locations, strengthened its data retention practices by specifying deletion or de-identification procedures, added detailed language about collecting persistent identifiers from child users for operational purposes, made parental controls more transparent by letting parents see which apps have access to their child's account, and switched its child privacy certification from ESRB to CARU (Children's Advertising Review Unit).
Parents: You now get to see which apps have permission to use your child's Nintendo account before you decide whether to allow them to keep using it.
Consumers: Nintendo now explicitly discloses it collects your child's IP address and device ID for operational, security, and advertising purposes.
Consumers: Nintendo says it has created internal rules and vendor contracts to make sure child data is only used for the purposes listed in the policy.
Nintendo now discloses that it uses location data not only for location-based games and friend connections, but also to enable check-ins at specific events and Nintendo locations, which is a new explicit use case. The policy now details how child user data including persistent identifiers like IP addresses and device IDs are collected and retained, with commitments to delete or de-identify data based on sensitivity and account activity. Parents can now see which third-party apps have been authorized to access their child's account before deciding whether to allow continued access, giving more visibility into connected applications.
→ Review the named list of third-party apps authorized to access your child's Nintendo account through your account profile settings to understand which apps have access.
→ Consider disabling access for any third-party apps you no longer want connected to your child's account.
ConductAtlas has recorded 2 material changes to this document (since March 2026).
Added explicit disclosure that Nintendo collects IP addresses and device IDs from child users for nine specified purposes including fraud prevention, service improvements, advertising, and legal compliance, with commitment to internal policies and contractual restrictions limiting use.
Expanded parental controls to require Nintendo to show parents a named list of authorized third-party apps before parents decide whether to allow continued access.
Added event check-in and Nintendo location check-in as explicit location data use cases alongside existing location-based games and friend connections.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
Nintendo clarified and expanded several provisions affecting child user data handling and parental controls. The addition of explicit persistent identifier collection disclosures for child users, coupled with internal policy commitments around use limitation, may engage …
Regulatory exposure, obligation change, escalation trigger, board-ready language, and recommended action for legal and compliance teams.
Unlock the full institutional analysis — InsightConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-001245.
Nintendo updated its privacy policy to clarify how it collects and uses data from children and shifted its third-party privacy …
Nintendo's privacy policy was updated on March 19, 2026 with several revisions to language describing data collection, retention practices, and …
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Get alerted when this policy changes again, including what changed and why it matters.