Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
This analysis describes what Riot Games's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Visitors do not need to manually adjust consent settings if their browser already broadcasts a recognized privacy signal; the effect is automatic.
Riot Games has restructured how it presents information about data collection and use in its privacy notice. The company narrowed its third-party disclaimer by removing the phrase 'we don't own or control,' replacing it with 'we don't control'—a distinction that may affect which entities the company is claiming it has no privacy responsibility for. For California residents, the notice now consolidates information about categories of personal information and their purposes into a single section rather than splitting them across the document. The practical implication depends on how Riot Games operationally interprets 'control' in relation to its business relationships and how California regulators view this language under CCPA notice requirements.
View change record →Readers whose browsers emit DNT or GPC signals have those signals automatically reflected in their consent settings without any additional action required.
How other platforms handle this
You may make a verifiable consumer request related to your personal information twice per 12-month period.
You can choose to what extent we will use your personal information to personalize your Discord experience.
where the EU GDPR or UK GDPR applies, we will respond within one calendar month of receiving a verifiable request, and where your request is complex...we may extend that period by up to a further two months.
Monitoring
Riot Games has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Website visitors who are using a browser that sends a Do Not Track signal or a browser that is Global Privacy Control compliant will have their signals automatically applied to their consent settings on Riot Games websites.Excerpt from Riot Games's Privacy Notice
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
Visitors do not need to manually adjust consent settings if their browser already broadcasts a recognized privacy signal; the effect is automatic.
Readers whose browsers emit DNT or GPC signals have those signals automatically reflected in their consent settings without any additional action required.
ConductAtlas has identified this type of provision across 294 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Riot Games.