116 Total
34 High severity
56 Medium severity
26 Low severity

Key Facts

What does Riot Games require its ad partners to process personal information they receive only as?
Riot Games requires its ad partners to process personal information they receive only as permitted for a service provider or processor under state privacy law, and only to provide the services.
What may Riot Games use anti-cheat and fraud prevention technologies to do?
Riot Games may use anti-cheat and fraud prevention technologies, including software that may run in the background of a user's device, that may make automated decisions such as temporary or permanent account suspensions.
May Riot Games use anti-cheat and fraud prevention technologies that make automated decisions such as temporary or permanent account suspensions?
Riot Games may use anti-cheat and fraud prevention technologies, including software that may run in the background of a user's device, that may make automated decisions such as temporary or permanent account suspensions.
How does Riot Games use an automated grading system?
Riot Games uses an automated grading system to compare a user's behavior over time against patterns of inappropriate behavior and, if it determines the user has engaged in inappropriate behavior, to make a decision as to the consequences.
Does Riot Games compare a user's behavior over time against patterns of inappropriate behavior?
Riot Games uses an automated grading system to compare a user's behavior over time against patterns of inappropriate behavior and, if it determines the user has engaged in inappropriate behavior, to make a decision as to the consequences.
What does Riot Games use advanced tools to automatically scan?
Riot Games uses advanced tools to automatically scan certain content, including communications through social features like voice and text chat, and to monitor activity such as patterns of behavior.
Does Riot Games automatically scan content including communications through social features like voice and text chat?
Riot Games uses advanced tools to automatically scan certain content, including communications through social features like voice and text chat, and to monitor activity such as patterns of behavior.
What may prevent a user from accessing certain Riot Services or taking advantage of their full functionality?
Riot Games states that failure to provide requested information may prevent a user from accessing certain Riot Services or taking advantage of their full functionality.
What may failure to provide prevent?
Riot Games states that failure to provide requested information may prevent a user from accessing certain Riot Services or taking advantage of their full functionality.
Can Riot Games guarantee the security of personal information transmitted through the Riot Services?
Riot Games cannot guarantee the security of personal information transmitted through the Riot Services.
Stay ahead of the changes
Track Riot Games and get the diff the day its terms change.
Summary

This document explains what personal information Riot Games collects, how it is used, and what rights users have over it. Riot Games uses automated tools to scan your in-game communications and behavior and can suspend your account based on those findings, though an appeal and human review option may be available. Riot Games does not sell your personal information for targeted advertising, and if your browser sends a Do Not Track or Global Privacy Control signal, Riot Games automatically applies it to your consent settings.

Analysis

Riot Games' Privacy Notice establishes how Riot Games collects, uses, retains, and shares personal information in connection with the Riot Services. The notice commits that personal information shared with ad partners is restricted to a service-provider or processor role under applicable state privacy law, and that Riot Games does not sell or share personal information for cross-context behavioral advertising. Automated systems scan voice and text chat, grade behavioral patterns over time, and may impose consequences including account suspension, with an appeal pathway that may culminate in final human review. Voice chat is retained for 24 hours post-match, extendable to 7 days upon an unactioned report, and Riot Games cannot guarantee the security of personal information transmitted through the Riot Services.

What this means for you

As a Riot Games user, your voice and text chat are recorded and stored, your behavior is continuously graded by automated systems, and those systems can impose consequences—including permanent account suspension—without direct human review at the point of decision. If an automated behavior decision is made against you, Riot Games' complaints procedure may allow you to appeal and ultimately request a final manual review by a human agent. Riot Games does not sell or share your personal information for cross-context behavioral advertising, and it does not collect sensitive personal information as defined under the CCPA and GDPR. If you withhold requested information, you may lose access to certain Riot Services or their full functionality. As a concrete action: if your browser supports Global Privacy Control, enabling that signal will automatically be applied to your consent settings on Riot Games websites without any manual adjustment on your part.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

3 important changes detected

4 versions captured · Last updated: May 2026

What changed Riot Games updated its privacy notice on May 6, 2026 to clarify that its U.S. entity is now called 'Riot Games U.S.' instead of 'Riot Games, Inc.' throughout the document. This is a naming clarification change that affects references to which company entity handles your data under the EU-U.S. Data Privacy Framework and related international data transfer rules. The substantive data protection commitments remain the same; this is primarily a corporate structure clarification.
Why this matters The updated privacy notice clarifies that Riot Games U.S. (formerly referred to as Riot Games, Inc.) is the entity responsible for handling your personal data under international data privacy frameworks, including the EU-U.S. Data Privacy Framework. This is a naming and entity clarification rather than a substantive change to data protection practices. The commitments to comply with Data Privacy Framework Principles and FTC regulatory oversight remain unchanged.
View full change record →
What changed Riot Games restructured its Privacy Notice on April 19, 2026, reorganizing how it describes data collection, use, and retention. The notice now consolidates sections, changes cross-references from section letters and numbers to a new numbering system, and clarifies that California residents can find both the categories of personal information collected and the purposes for their collection and use in a single location rather than across multiple sections. The core privacy practices do not appear to have fundamentally changed, but the organizational restructuring means consumers may need to navigate the updated layout to find specific information.
Why this matters Riot Games restructured how its Privacy Notice is organized, consolidating sections and updating internal cross-references. For California residents, the notice now explicitly states that both the categories of personal information collected and the purposes for collection and use can be found in a single section, improving clarity. The practical impact on what data Riot Games collects, uses, or retains does not appear to have changed; this is primarily an organizational and navigational update to the existing privacy disclosure.
View full change record →

April 14, 2026 medium

Riot Games reorganized and updated their privacy notice on April 14, 2026, consolidating sections and clarifying how personal information is collected and used. The main structural change combines collection and …

View change record →
Featured, High severity
Featured, Medium severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

116 provisions
12 featured
19 clause types
34 high severity
Data Sharing 24 9 high
Show all 24 data sharing provisions
Acceptable Use Restrictions 1 1 high
General Contract Terms 1 1 high
Platform Discretion 1 1 high
Targeting and Audience Restrictions 1 1 high
Disclosure and Transparency Requirements 1
Developer / API Restrictions 1
Stay ahead of the changes

Monitoring

Riot Games has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Ad Partners Must Process Data Only as Service Providers and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
COPPA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 6, 2026 21:27 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000310
Version ID CA-V-002311
SHA-256 d1eadebcfb5952a54b0b6120d5a696464a0eb15d95197e75908a437f84480861
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans