Riot shares your data with a wide range of outside companies including analytics providers, customer support vendors, advertising partners, and potentially acquirers in a business transaction.
This analysis describes what Riot Games's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Data shared in connection with a business transaction such as a merger or acquisition may reach new parties under different privacy frameworks, and users typically have limited ability to prevent this type of transfer.
Riot Games has restructured how it presents information about data collection and use in its privacy notice. The company narrowed its third-party disclaimer by removing the phrase 'we don't own or co…
Your personal data may be shared with a broad range of third parties beyond Riot itself, including external advertising and analytics companies, and could be transferred to a new owner if Riot is acquired. Users have limited practical control over business transaction transfers, though they retain deletion and access rights under applicable law.
How other platforms handle this
We may share your personal data with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. We may also share your personal data with advertising partners to display relevant advertising to y...
We may share your personal information with third-party vendors and service providers that perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance.
In order to provide you with services, Valve needs to share some data with the publisher or developer of the game (for example to verify your ownership of the game and register your Steam ID with the publisher), or with other third parties that Valve works with to provide services to you. Valve will...
Monitoring
Riot Games has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We share your personal data with third parties in the following circumstances: with service providers who help us deliver our Services, such as hosting, analytics, customer support, and fraud prevention; with advertising and marketing partners to help us deliver relevant advertisements; with other companies in the Riot group of companies; in connection with a merger, acquisition, or sale of assets; and when required by law or to protect rights and safety.— Excerpt from Riot Games's Riot Games Privacy Notice
REGULATORY LANDSCAPE: Third-party data sharing engages GDPR Article 28 (processor relationships) and Article 26 (joint controllers) depending on the nature of the relationship. CCPA/CPRA regulates 'selling' and 'sharing' personal information with third parties for commercial purposes. FTC guidance on data broker practices applies to analytics and advertising partners receiving Riot user data. M&A data transfers may require regulatory notification or consent mechanisms in some jurisdictions. GOVERNANCE EXPOSURE: Medium. The notice provides a categorical rather than specific enumeration of third parties, which is common industry practice but may not satisfy GDPR's transparency requirements for processor and sub-processor disclosure. The inclusion of M&A transfers without a consent mechanism or opt-out right is standard but limits consumer control in a material transaction scenario. JURISDICTION FLAGS: California residents have CPRA rights to know which categories of third parties receive their data. EU users have rights to obtain information about recipients under GDPR Article 15. The breadth of sharing with advertising partners may require evaluation under the ePrivacy Directive in EU jurisdictions. CONTRACT AND VENDOR IMPLICATIONS: Organizations integrating Riot services into enterprise environments should assess whether Riot's data processor agreements with sub-processors are available and adequate. M&A due diligence should account for Riot's data sharing obligations and whether acquirer privacy practices are compatible with Riot's stated commitments. COMPLIANCE CONSIDERATIONS: A vendor risk assessment covering the third-party ecosystem referenced in the notice is recommended. CCPA compliance teams should verify whether the opt-out of sale and sharing mechanism covers all advertising partner relationships. Legal teams should assess whether M&A transfer provisions include privacy continuity commitments for existing users.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Data shared in connection with a business transaction such as a merger or acquisition may reach new parties under different privacy frameworks, and users typically have limited ability to prevent this type of transfer.
Your personal data may be shared with a broad range of third parties beyond Riot itself, including external advertising and analytics companies, and could be transferred to a new owner if Riot is acquired. Users have limited practical control over business transaction transfers, though they retain deletion and access rights under applicable law.
ConductAtlas has identified this type of provision across 2 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Riot Games.