8 Total
1 High severity
5 Medium severity
2 Low severity
Summary

This document establishes Nintendo's data collection and usage practices for users of Nintendo websites, Switch consoles, Nintendo Switch Online, mobile applications, and retail stores in the United States. Nintendo collects gameplay history, purchase history, device identifiers, location data, voice communications during online sessions, and payment information, with provisions authorizing sharing of certain data categories with advertising and analytics partners. The policy establishes parental consent requirements for accounts of users under 13 and grants California residents specific data access and deletion rights under applicable state law.

Technical / Legal Breakdown

This document is Nintendo of America's privacy policy governing data collection, use, and disclosure across Nintendo websites, hardware platforms (Nintendo Switch), online services (Nintendo Switch Online), mobile applications, and related retail and customer support interactions, with the stated legal basis being user consent and Nintendo's legitimate business interests. The policy states that Nintendo collects a broad range of personal information including name, address, payment card details, Nintendo Account credentials, device identifiers, gameplay and purchase history, voice communications during online play, location data, and information from third-party social accounts linked to Nintendo accounts; the terms authorize sharing this data with service providers, business partners, and affiliated Nintendo entities globally, as well as with advertising and analytics partners for targeted marketing purposes. The policy's treatment of children's data is operationally significant: it states that child accounts require parental consent and that Nintendo complies with COPPA, but the mechanism relies on parental supervision settings within the Nintendo Account family system, which may warrant independent verification of consent flow robustness. The policy engages GDPR and EU data protection frameworks for European users, COPPA for users under 13 in the United States, and the California Consumer Privacy Act (CCPA) for California residents, each of which confers distinct rights and obligations that the policy acknowledges in jurisdiction-specific sections. Material compliance considerations include the policy's use of interest-based advertising and its reliance on opt-out rather than opt-in mechanisms for certain data uses, which may require evaluation under GDPR's consent requirements for EU residents and CCPA's opt-out of sale rights for California residents.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial

3 important changes detected

3 versions captured · Last updated: April 2026

What changed Nintendo updated its privacy policy to clarify how it collects and uses data from children and shifted its third-party privacy certification from ESRB to CARU. The policy now explicitly states that persistent identifiers like IP addresses and device IDs are collected from child users for specific operational purposes, and parents can now see a named list of third-party apps authorized to access their child's account. The company also expanded its disclosure of location data use to include check-ins at Nintendo locations and events.
Why this matters Nintendo now explicitly discloses that it collects persistent identifiers (IP addresses, device IDs) from child users for operational, security, fraud prevention, and service improvement purposes, and states that contractual restrictions limit how service providers can use this data. Parents gain enhanced transparency by being able to view a named list of third-party games and applications authorized to access their child's account, rather than just managing access through settings. The policy also clarifies that location information may be used for check-ins at Nintendo locations and events in addition to location-based games. You can review and manage which third-party apps have access to your child's account through your Nintendo Account profile settings.
View full change record →

April 8, 2026

medium
What changed Nintendo updated its privacy policy to clarify how it collects error data, expanded where it uses location information to include checking into events and Nintendo locations, strengthened its data retention practices by specifying deletion or de-identification procedures, added detailed language about collecting persistent identifiers from child users for operational purposes, made parental controls more transparent by letting parents see which apps have access to their child's account, and switched its child privacy certification from ESRB to CARU (Children's Advertising Review Unit).
Why this matters Nintendo now discloses that it uses location data not only for location-based games and friend connections, but also to enable check-ins at specific events and Nintendo locations, which is a new explicit use case. The policy now details how child user data including persistent identifiers like IP addresses and device IDs are collected and retained, with commitments to delete or de-identify data based on sensitivity and account activity. Parents can now see which third-party apps have been authorized to access their child's account before deciding whether to allow continued access, giving more visibility into connected applications.
View full change record →

March 19, 2026 medium

Nintendo's privacy policy was updated on March 19, 2026 with several revisions to language describing data collection, retention practices, and third-party certifications. The policy now states it collects error information …

View change record →
High — 1 provision
Medium — 5 provisions
Low — 2 provisions

Monitoring

Nintendo has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle California CCPA/CPRA Privacy Rights and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

BIPA
Illinois, USA
View official text ↗
CCPA/CPRA
California, USA
View official text ↗
COPPA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
UK GDPR
United Kingdom
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured April 19, 2026 06:14 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000188
Version ID CA-V-000729
SHA-256 08c602b01bc20ce68b00c8f8914733f3a8367c9aa9dd499607c67822e3987487
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans