The use of an Epic subsidiary (KWS) to conduct parental verification for COPPA purposes raises questions about the independence and adequacy of the consent mechanism, and the upgrade pathway from Cabined to full account significantly expands data collection.
Consumer impact
Epic Games collects a wide range of personal data including gameplay behavior, device identifiers, IP address, payment details, voice chat snippets, and facial images, and shares this data with third-party ad partners, platform providers, and service vendors. Children are placed in restricted 'Cabined Accounts' with limited data collection, but parental consent unlocks a significantly broader data profile similar to adult accounts. You can manage your privacy rights, including data deletion and account closure, through Epic's Privacy Settings at epicgames.com or by submitting a request via the contact information in Section 12 of the policy.
What you can do
⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
Delete Your Data
Parents can submit a request to review or delete their child's personal information via the Epic Parent Support Request Form. Navigate to the linked form, select the appropriate request type, and provide account verification details.
Applicable agencies
FTC
The FTC is the primary enforcement authority for COPPA and has previously fined Epic $275 million for COPPA violations related to Fortnite, making this provision a high-priority compliance area.
State attorneys general have concurrent COPPA enforcement authority and may bring actions under state child privacy statutes including California's CCPA minor provisions.