Riot's services are not intended for users under 16 (or 13 in the US), and if Riot discovers it has collected data from a child below the threshold without parental consent, it says it will delete that data.
This analysis describes what Riot Games's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Riot's games are widely played by players under 16, and the age-based data practices and parental consent requirements are legally significant. The policy's reliance on users self-reporting their age, without verified age-gating mechanisms, may create practical compliance gaps.
Interpretive note: The notice does not describe the specific mechanisms used to verify parental consent or to enforce age restrictions at registration, making it difficult to assess whether the stated practices satisfy COPPA's verifiable parental consent standard.
Riot Games has restructured how it presents information about data collection and use in its privacy notice. The company narrowed its third-party disclaimer by removing the phrase 'we don't own or control,' replacing it with 'we don't control'—a distinction that may affect which entities the company is claiming it has no privacy responsibility for. For California residents, the notice now consolidates information about categories of personal information and their purposes into a single section rather than splitting them across the document. The practical implication depends on how Riot Games operationally interprets 'control' in relation to its business relationships and how California regulators view this language under CCPA notice requirements.
View change record →Children under 13 in the US (or 16 in the EU) are technically not permitted to use Riot services without parental consent, but the practical enforcement of this restriction depends on self-reported age at registration. Parents of underage players should be aware that their child's gameplay, behavioral, and communication data may have been collected.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"Our Services are not directed to children under the age of 16 (or under the age of 13 in the United States). We do not knowingly collect personal data from children under these ages without obtaining verifiable parental consent where required by applicable law. If we become aware that we have collected personal data from a child under the applicable age limit without parental consent, we will take steps to delete that information.Excerpt from Riot Games's Privacy Notice
REGULATORY LANDSCAPE: COPPA (Children's Online Privacy Protection Act), enforced by the FTC, applies to online services that knowingly collect personal information from children under 13 in the US.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Riot's games are widely played by players under 16, and the age-based data practices and parental consent requirements are legally significant. The policy's reliance on users self-reporting their age, without verified age-gating mechanisms, may create practical compliance gaps.
Children under 13 in the US (or 16 in the EU) are technically not permitted to use Riot services without parental consent, but the practical enforcement of this restriction depends on self-reported age at registration. Parents of underage players should be aware that their child's gameplay, behavioral, and communication data may have been collected.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Riot Games.