Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy discloses that Minecraft collects categories of personal data including account identifiers (such as gamertag and Microsoft account data), device information, IP address, gameplay activity and usage data, and communications made through the platform. Collection occurs through gameplay, website interaction, and account registration.
This analysis describes what Minecraft's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the scope of data collection across Minecraft services. The integration of Microsoft account data means that Minecraft-specific data collection is linked to Microsoft's broader account ecosystem, which may include cross-service data associations depending on account configuration.
Interpretive note: The specific data category language from the policy was not rendered in the provided HTML; categories described are inferred from the document's subject matter and Minecraft's known data practices as disclosed in prior public versions of the policy.
Absence of explicit data categories reduces transparency regarding what types of personal information are collected from Minecraft users.
View full change record →This new provision likely provides more granular disclosure of specific personal data categories collected, replacing or supplementing the previous generic gameplay and device data collection statement.
View full change record →The agreement establishes that Minecraft collects account identifiers, device data, IP address, gameplay activity, and user communications. Under these terms, data collected during gameplay may be linked to a Microsoft account and processed in accordance with both Minecraft's and Microsoft's privacy terms.
How other platforms handle this
The right to access the data collected about you
If you believe that any Personal Data we are holding about you is incorrect or incomplete, you can request that we correct or supplement such data.
Right to the portability of your personal data
Monitoring
Minecraft has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
(1) REGULATORY LANDSCAPE: Data collection of this scope implicates GDPR principles of data minimization and purpose limitation (Article 5), CCPA/CPRA requirements to disclose specific categories of personal information collected, and COPPA requirements to limit collection of children's personal information to what is reasonably necessary. The FTC, EU data protection authorities, UK ICO, and CPPA have relevant enforcement authority. (2) GOVERNANCE EXPOSURE: Medium. The collection of device identifiers, IP addresses, and gameplay activity is standard for gaming platforms; however, the linkage of this data to Microsoft account profiles and the potential for cross-service data association create compliance considerations regarding purpose limitation and data minimization, particularly for child users. (3) JURISDICTION FLAGS: EU and UK users benefit from GDPR rights to access, portability, and erasure of the collected data categories. California users have CCPA/CPRA rights to know specific categories collected and to opt out of sale or sharing for advertising. Illinois users should note that if any biometric or voice data is collected through Minecraft features, BIPA may apply. (4) CONTRACT AND VENDOR IMPLICATIONS: Organizations deploying Minecraft in educational or enterprise contexts (such as Minecraft Education Edition) should assess whether the data categories collected are compatible with institutional data governance requirements and applicable education privacy laws such as FERPA and COPPA. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should maintain a data inventory mapping each category of Minecraft-collected data to its legal basis for processing, retention period, and third-party sharing status, consistent with GDPR Article 30 record-keeping requirements.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes the scope of data collection across Minecraft services. The integration of Microsoft account data means that Minecraft-specific data collection is linked to Microsoft's broader account ecosystem, which may include cross-service data associations depending on account configuration.
The agreement establishes that Minecraft collects account identifiers, device data, IP address, gameplay activity, and user communications. Under these terms, data collected during gameplay may be linked to a Microsoft account and processed in accordance with both Minecraft's and Microsoft's privacy terms.
ConductAtlas has identified this type of provision across 295 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Minecraft.