Riot retains your personal data for as long as your account is active or as needed to provide services, and may keep certain data for longer periods for legal, business, or security reasons.
This analysis describes what Riot Games's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the operational framework governing how long Riot Games maintains user personal data across multiple institutional functions including legal compliance, fraud prevention, and dispute resolution, creating a retention standard tied to service provision and legitimate business purposes rather than fixed time intervals.
Riot Games has restructured how it presents information about data collection and use in its privacy notice. The company narrowed its third-party disclaimer by removing the phrase 'we don't own or control,' replacing it with 'we don't control'—a distinction that may affect which entities the company is claiming it has no privacy responsibility for. For California residents, the notice now consolidates information about categories of personal information and their purposes into a single section rather than splitting them across the document. The practical implication depends on how Riot Games operationally interprets 'control' in relation to its business relationships and how California regulators view this language under CCPA notice requirements.
View change record →Your data may be retained well beyond your active use of Riot's services, potentially for years, unless you proactively request deletion. You can request account deletion and data erasure through the Riot privacy portal at https://www.riotgames.com/en/privacy-notice.
How other platforms handle this
Affirm will retain your information in accordance with our Privacy Policy and any applicable state or federal law, rule or regulation.
We collect and keep personal data only as needed or allowed for the purposes set out in this Statement, based on the reason we collected the personal data in the first instance and what is permitted under the laws that apply to the processing.
Mistral AI shall retain the Customer Exportable Data and Assets for a period of thirty (30) days from the earlier between (a) the expiration of the Transitional Period or (b) Customer's notification under Section 2.2.2 (b) of these Additional Terms.
"We generally retain the related personal info as long as your account is active or as is otherwise necessary to provide the Riot Services, operate our business (including for legitimate purposes like complying with our legal obligations, managing internal books and records, preventing fraud, resolving disputes, and enforcing our contracts and terms, such as this Notice and the Terms of Service), or to achieve the purposes set out in this Notice, unless a longer retention period is permitted or required by law.Excerpt from Riot Games's Privacy Notice
Vague retention periods may conflict with GDPR Article 5(1)(e)'s storage limitation principle, which requires data to be kept no longer than necessary for its stated purpose.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the operational framework governing how long Riot Games maintains user personal data across multiple institutional functions including legal compliance, fraud prevention, and dispute resolution, creating a retention standard tied to service provision and legitimate business purposes rather than fixed time intervals.
Your data may be retained well beyond your active use of Riot's services, potentially for years, unless you proactively request deletion. You can request account deletion and data erasure through the Riot privacy portal at https://www.riotgames.com/en/privacy-notice.
ConductAtlas has identified this type of provision across 274 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Riot Games.