The policy states that users have the right to request access, correction, or deletion of their information, and that Nintendo will not discriminate against users for exercising these rights, though some service features may change or become unavailable as a result.
This analysis describes what Nintendo's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The non-discrimination commitment is consistent with CCPA and CPRA requirements, but the policy's qualification that service features 'may change, or no longer be available' upon exercise of data rights should be evaluated to confirm it reflects operationally necessary limitations rather than practical disincentives to rights exercise.
Interpretive note: Whether the policy's qualification that service features 'may change or no longer be available' upon rights exercise constitutes a permissible operational limitation or a practical deterrent to rights exercise under CCPA and CPRA non-discrimination standards depends on the specific features affected and regulatory interpretation.
Nintendo now explicitly discloses that it collects persistent identifiers (IP addresses, device IDs) from child users for operational, security, fraud prevention, and service improvement purposes, and states that contractual restrictions limit how service providers can use this data. Parents gain enhanced transparency by being able to view a named list of third-party games and applications authorized to access their child's account, rather than just managing access through settings. The policy also clarifies that location information may be used for check-ins at Nintendo locations and events in addition to location-based games. You can review and manage which third-party apps have access to your child's account through your Nintendo Account profile settings.
View change record →Nintendo now discloses that it uses location data not only for location-based games and friend connections, but also to enable check-ins at specific events and Nintendo locations, which is a new explicit use case. The policy now details how child user data including persistent identifiers like IP addresses and device IDs are collected and retained, with commitments to delete or de-identify data based on sensitivity and account activity. Parents can now see which third-party apps have been authorized to access their child's account before deciding whether to allow continued access, giving more visibility into connected applications.
View change record →The revised policy simplifies how Nintendo describes data retention, now stating information is retained only as long as reasonably necessary in accordance with applicable law, without prior detail about sensitivity-based retention practices. For child users, the policy no longer explicitly lists persistent identifiers (IP addresses, device identifiers) that Nintendo and service providers collect, removing specific disclosure language that previously detailed collection purposes for child accounts. The policy now indicates it collects error information from both users and devices, broadening the prior language focused on device errors only. The privacy certification body changed from CARU to ESRB, meaning independent audits and enforcement are now administered by the Entertainment Software Rating Board rather than the Children's Advertising Review Unit.
View change record →Under this provision, users may submit requests to access, correct, or delete their personal information using the instructions provided in the policy. The policy states Nintendo will not discriminate against users who exercise these rights, while noting that certain service features may be affected by data deletion or correction requests.
Cross-platform context
See how other platforms handle User Data Rights and Non-Discrimination and similar clauses.
Compare across platforms →"You have the right to request access to, correction, or deletion of your information. For instructions on how to submit such a request go here. We will not discriminate against you for exercising your rights and choices, however some of the functionality and features of our services may change, or no longer be available to you.Excerpt from Nintendo's Privacy Policy
REGULATORY LANDSCAPE: The non-discrimination requirement for exercising data rights is mandated by CCPA and CPRA, enforced by the California Privacy Protection Agency and California Attorney General.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The non-discrimination commitment is consistent with CCPA and CPRA requirements, but the policy's qualification that service features 'may change, or no longer be available' upon exercise of data rights should be evaluated to confirm it reflects operationally necessary limitations rather than practical disincentives to rights exercise.
Under this provision, users may submit requests to access, correct, or delete their personal information using the instructions provided in the policy. The policy states Nintendo will not discriminate against users who exercise these rights, while noting that certain service features may be affected by data deletion or correction requests.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Nintendo.