EA keeps your data for as long as it needs to provide services, and can keep it longer for legal or business reasons, with no specific time limits stated. Anonymized data may be kept and used indefinitely.
This analysis describes what EA's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The absence of defined retention periods means users cannot predict when their data will be deleted, and the broad 'operational or other legitimate reasons' exception could support extended retention well beyond what users might expect.
Interpretive note: The practical scope of 'legal, operational, or other legitimate reasons' for extended retention is not defined, creating uncertainty about whether EA's actual retention practices align with GDPR storage limitation principles.
EA does not commit to specific data retention timelines, meaning personal data including gameplay history, communications, and account information could be retained indefinitely as long as EA identifies a legitimate reason. Consumers can request data deletion through EA's privacy request process, but EA may decline where retention is claimed as legally or operationally necessary.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"Retention. We retain the information we collect for as long as necessary to provide our Services, and we may retain that information beyond that period if necessary for legal, operational, or other legitimate reasons. Where possible, we may also de-identify, anonymize, or aggregate the information we collect, or collect it in a way that does not directly identify you. We may use and share such information as necessary for our business purposes and as permitted by applicable law.Excerpt from EA's Privacy and Cookie Policy
REGULATORY LANDSCAPE: GDPR Article 5(1)(e) requires personal data to be kept in a form which permits identification of data subjects for no longer than necessary for the purposes for which the data is processed (storage …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The absence of defined retention periods means users cannot predict when their data will be deleted, and the broad 'operational or other legitimate reasons' exception could support extended retention well beyond what users might expect.
EA does not commit to specific data retention timelines, meaning personal data including gameplay history, communications, and account information could be retained indefinitely as long as EA identifies a legitimate reason. Consumers can request data deletion through EA's privacy request process, but EA may decline where retention is claimed as legally or operationally necessary.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by EA.