Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This privacy notice establishes Riot Games' data collection and processing practices across its game and service portfolio, including League of Legends, Valorant, and related products. The notice authorizes collection of voice communications, in-game behavioral data, hardware identifiers, and approximate location information, with specified sharing of certain data categories to advertising partners for targeted marketing purposes. The document establishes data subject rights for EU, UK, and California residents, including access, deletion, and opt-out requests administered through Riot's privacy request portal.
This document is Riot Games' global Privacy Notice, governing the collection, use, storage, and sharing of personal data across all Riot Games products and services, with stated legal bases including contractual necessity, legitimate interests, consent, and legal obligation depending on jurisdiction. The notice states that Riot collects a broad range of data categories including account information, payment data, device and hardware identifiers, gameplay and behavioral data, voice and text communications, and location information, and the terms authorize sharing this data with affiliates, service providers, advertising partners, and in connection with business transactions such as mergers or acquisitions. Notable provisions include the collection and potential recording of voice and text chat content for safety and moderation purposes, the use of anti-cheat software (Vanguard) that operates at a kernel level and collects hardware and software information, and the use of behavioral and gameplay data for targeted advertising, which together represent a meaningful scope of data collection that users may not fully anticipate. The notice engages GDPR for EU/EEA users (with Riot Games Ltd. identified as the data controller for those users), CCPA/CPRA for California residents, COPPA and equivalent frameworks for minors, and references compliance with LGPD for Brazilian users and PDPA for relevant Asian jurisdictions; the enforceability and scope of certain data practices may vary significantly by jurisdiction, particularly regarding children's data, advertising profiling, and communications monitoring.
Institutional analysis available with Professional
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.
Start Professional free trial3 important changes detected
4 versions captured · Last updated: May 2026
Riot Games reorganized and updated their privacy notice on April 14, 2026, consolidating sections and clarifying how personal information is collected and used. The main structural change combines collection and …
View change record →Monitoring
Riot Games has updated this document before.
Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
Professional Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Professional free trialCross-platform context
See how other platforms handle Children's and Minors' Data and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.