What are the institutional and regulatory implications of this document?

This notice engages GDPR (EU/EEA), UK GDPR, and CCPA/CPRA compliance obligations, including requirements around lawful bases for processing, data subject rights fulfillment, and international data transfer mechanisms (such as Standard Contractual Clauses). Compliance teams should note the deployment of kernel-level anti-cheat software (Vanguard) as a potential privacy and security risk requiring due diligence review. The sharing of personal data with advertising and analytics partners creates C…

How does Riot Games's Riot Games Privacy Notice affect users?

Riot Games collects extensive personal data including gameplay telemetry, device identifiers, purchase history, and communications, which are shared with third-party advertising and analytics partners. Users in the EU, UK, and California have legally enforceable rights including the ability to access, delete, or export their personal data. You can submit a data access or deletion request through Riot's privacy request portal at https://www.riotgames.com/en/privacy-notice.

How often is Riot Games's Riot Games Privacy Notice updated?

ConductAtlas monitors this document daily and captures every version with cryptographic hashing and timestamp verification. Update frequency varies — see the change timeline on this page for complete version history.

Can I get alerted when Riot Games updates this document?

Yes. Watcher subscribers ($9.99/month) can add Riot Games to their watchlist and receive same-day email alerts whenever this document or any other Riot Games document changes.

Riot Games Privacy Notice — Riot Games

8 Total

3 High severity

5 Medium severity

0 Low severity

Summary

This is Riot Games' privacy policy — it explains what personal information they collect when you play their games (like League of Legends or Valorant), how they use it, and who they share it with. Riot collects a wide range of data including your account details, gameplay behavior, device information, and even payment data. Depending on where you live, you may have rights to access, delete, or correct your personal data.

Technical Summary

This document is Riot Games' Privacy Notice governing the collection, use, storage, and disclosure of personal data from users of its games, websites, and related services. It establishes Riot's obligations as a data controller under applicable frameworks including GDPR (for EU/EEA users) and CCPA (for California residents), detailing lawful bases for processing, data subject rights, international data transfers, and retention periods. Notable provisions include the collection of device and gameplay telemetry, use of anti-cheat software with elevated system access, sharing of personal data with third-party service providers and advertising partners, and specific rights afforded to users in jurisdictions with enhanced privacy protections. The notice also addresses the treatment of minors' data and provides mechanisms for data access, deletion, correction, and portability requests.

Evidence Provenance

Captured April 19, 2026 06:28 UTC

Document ID CA-D-000310

Version ID CA-V-000806

Source URL https://www.riotgames.com/en/privacy-notice

Wayback Machine View archived versions →

SHA-256 c9eec5cddfb430d09cf7ac9b21efe8b6a8875fae1b7e755b926667f7434ceb87

✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed

Institutional Analysis

🔒 Institutional analysis locked

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Upgrade to Professional — $149/mo

Change Timeline

April 14, 2026 — Document updated medium

Riot Games updated their Privacy Notice on April 14, 2026, making significant structural and language changes including reorganizing how data collection and use purposes are presented, consolidating sections, and simplifying terminology. The previous notice separated 'personal information collection' and 'how we use and disclose personal info' into distinct numbered sections, while the new version combines them into a single section called 'Personal Info We Collect and Use.' These structural changes affect how clearly users can find information about what data is collected and why, which may make it slightly harder to navigate specific disclosure requirements.

124 added · 126 removed · 123 modified
View diff → View full record →
916a8591…
March 19, 2026 — Initial capture

Initial snapshot — monitoring begins

f7c0c364…

View full version history (0 captures) →

Analyzed Changes

1 change analyzed since monitoring began.

Updated April 14, 2026

medium

What changed Riot Games updated their Riot Games Privacy Notice on April 14, 2026. Change detected: 124 sentence(s) added, 126 sentence(s) removed, 123 sentence(s) modified. Document contained 328 sentences after update.

Consumer impact Riot Games has substantially revised its Privacy Notice, merging the section explaining why data is collected with the section describing what data is collected, which changes how users navigate their data rights disclosures. California residents may notice that the Notice at Collection structure has changed, with collection purposes now listed alongside the categories of data rather than in a separate section. You can review the updated Privacy Notice directly on Riot Games' website to understand how your personal information is collected and used under the new structure.

Why it matters The restructuring of how Riot Games discloses data collection and usage purposes affects how easily users — especially California residents with specific legal rights — can locate and understand their privacy protections. The scale of changes across the document means there may be substantive shifts in data practices that are not captured in the available diff excerpt.

Recent Clause-Level Changes Apr 14, 2026

8 provisions unchanged.

View full change record →

High Severity — 3 provisions

Kernel-Level Anti-Cheat Data Collection

Riot's Vanguard anti-cheat software runs at the kernel level of your operating system, giving it deep access to your device hardware and software to detect cheating. This means Riot can collect detailed system information beyond what typical apps access.

Added March 20, 2026
Third-Party Advertising Data Sharing

Riot shares your personal data — including gameplay behavior, device identifiers, and usage patterns — with third-party advertising and analytics companies to serve targeted ads and measure campaign performance.

Added March 20, 2026
Children's and Minors' Data

Riot states it does not knowingly collect personal data from children below the age of digital consent in their country, and takes steps to restrict account creation and data collection for minors.

Added March 20, 2026

Medium Severity — 5 provisions

International Data Transfers

Riot may transfer your personal data to countries outside your home region, including the United States, which may have different or weaker privacy protections than your home country.

Added March 20, 2026
Data Subject Rights (EU/UK/California)

If you live in the EU, UK, or California, you have the right to access, correct, delete, or export your personal data, and in some cases to object to or restrict how it is processed.

Added March 20, 2026
Gameplay Telemetry and Behavioral Data Collection

Riot collects detailed data about how you play their games, including your in-game actions, match history, communication logs, and interaction patterns, to improve services and for other business purposes.

Added March 20, 2026
Data Retention Policy

Riot retains your personal data for as long as your account is active or as needed to provide services, and may keep certain data for longer periods for legal, business, or security reasons.

Added March 20, 2026
Cookie and Tracking Technologies

Riot uses cookies and similar tracking technologies on its websites and in its games to collect data about your browsing and gameplay behavior, and to serve personalized advertising.

Added March 20, 2026