Nintendo can update this privacy policy at any time by posting a new version online; users are responsible for checking the page periodically rather than receiving direct notification of every change.
This analysis describes what Nintendo's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause establishes the mechanism by which Nintendo's privacy practices may evolve over the service term. The unilateral modification authority permits operational changes to data handling procedures without requiring advance user consent or opt-in approval.
Nintendo now explicitly discloses that it collects persistent identifiers (IP addresses, device IDs) from child users for operational, security, fraud prevention, and service improvement purposes, and states that contractual restrictions limit how service providers can use this data. Parents gain enhanced transparency by being able to view a named list of third-party games and applications authorized to access their child's account, rather than just managing access through settings. The policy also clarifies that location information may be used for check-ins at Nintendo locations and events in addition to location-based games. You can review and manage which third-party apps have access to your child's account through your Nintendo Account profile settings.
View change record →Nintendo now discloses that it uses location data not only for location-based games and friend connections, but also to enable check-ins at specific events and Nintendo locations, which is a new explicit use case. The policy now details how child user data including persistent identifiers like IP addresses and device IDs are collected and retained, with commitments to delete or de-identify data based on sensitivity and account activity. Parents can now see which third-party apps have been authorized to access their child's account before deciding whether to allow continued access, giving more visibility into connected applications.
View change record →The revised policy simplifies how Nintendo describes data retention, now stating information is retained only as long as reasonably necessary in accordance with applicable law, without prior detail about sensitivity-based retention practices. For child users, the policy no longer explicitly lists persistent identifiers (IP addresses, device identifiers) that Nintendo and service providers collect, removing specific disclosure language that previously detailed collection purposes for child accounts. The policy now indicates it collects error information from both users and devices, broadening the prior language focused on device errors only. The privacy certification body changed from CARU to ESRB, meaning independent audits and enforcement are now administered by the Entertainment Software Rating Board rather than the Children's Advertising Review Unit.
View change record →If Nintendo changes how it collects or uses your data, it may update this policy online without sending you a direct notification, so it is worth periodically reviewing the policy at nintendo.com/us/privacy-policy.
How other platforms handle this
We will tell you about any changes to these Terms at least 2 months before they take effect by sending you a notification in the Revolut app. If you don't tell us that you disagree with the changes before they take effect, you'll be treated as accepting them. If you do tell us you disagree, we will ...
We may update these Terms from time to time. If we make changes that we believe will materially affect your rights or obligations, we will notify you by email or through our developer channels. Your continued use of the Platform after we post updated Terms constitutes your acceptance of those change...
Shopify reserves the right to modify this Acceptable Use Policy at any time. Changes will be effective upon posting to the website. Your continued use of the Shopify Services following the posting of changes will constitute your acceptance of such changes.
Monitoring
Nintendo has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We may update this Privacy Policy from time to time. When we make changes, we will update the date of this Privacy Policy and post the updated policy on this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.— Excerpt from Nintendo's Nintendo Privacy Policy
REGULATORY LANDSCAPE: Unilateral policy update mechanisms are common but may face regulatory scrutiny under GDPR (which requires re-obtaining consent if the basis for processing changes materially) and FTC Act Section 5 (which prohibits retroactive application of materially changed data practices without adequate notice and consent). CCPA requires that changes to the policy accurately reflect current data practices and that users be notified of material changes. Some state laws require affirmative notice of material changes to privacy policies. GOVERNANCE EXPOSURE: Low. Periodic update clauses are standard across the industry. However, if a future update materially expands data collection or sharing without active user notification, this could create regulatory exposure under GDPR (consent must be re-obtained) or CCPA (material changes must be disclosed). JURISDICTION FLAGS: GDPR users may have a stronger claim to affirmative re-consent if material changes affect the lawful basis for processing. California law requires that privacy policies accurately reflect current practices at all times. The adequacy of 'posting on this page' as notice depends on jurisdiction and the materiality of the change. CONTRACT AND VENDOR IMPLICATIONS: Vendor agreements should specify how policy changes affecting data flows are communicated to data processors and service providers, and whether changes require contract amendments or re-execution of data processing agreements. COMPLIANCE CONSIDERATIONS: Legal teams should implement a policy change review process that assesses whether any update constitutes a material change requiring active user notification, re-consent under GDPR, or updated CCPA disclosures. A version history of the policy should be maintained for audit purposes. Consider whether proactive email notification for material changes would reduce regulatory risk.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Buried in Robinhood's customer agreement is broad authority to close your positions, suspend your account, and force arbitration. Here is what it actually says.
Stripe's terms authorize fund reserves, payout withholding, and account termination. Here is what the agreement states and what business owners should review.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This clause establishes the mechanism by which Nintendo's privacy practices may evolve over the service term. The unilateral modification authority permits operational changes to data handling procedures without requiring advance user consent or opt-in approval.
If Nintendo changes how it collects or uses your data, it may update this policy online without sending you a direct notification, so it is worth periodically reviewing the policy at nintendo.com/us/privacy-policy.
ConductAtlas has identified this type of provision across 9 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Nintendo.