This analysis describes what Riot Games's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Riot Games has restructured how it presents information about data collection and use in its privacy notice. The company narrowed its third-party disclaimer by removing the phrase 'we don't own or control,' replacing it with 'we don't control'—a distinction that may affect which entities the company is claiming it has no privacy responsibility for. For California residents, the notice now consolidates information about categories of personal information and their purposes into a single section rather than splitting them across the document. The practical implication depends on how Riot Games operationally interprets 'control' in relation to its business relationships and how California regulators view this language under CCPA notice requirements.
View change record →How other platforms handle this
to lodge a complaint with the data protection authority in your jurisdiction.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority. If you are in the EEA, you may contact your local data protection authority.
"If you're in the EEA or UK, you may lodge a complaint with an EEA or UK data protection authority for your country or region where an alleged infringement of applicable data protection law occurs.Excerpt from Riot Games's Privacy Notice
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The clause states: “If you're in the EEA or UK, you may lodge a complaint with an EEA or UK data protection authority for your country or region where an alleged infringement of applicable data protection law occurs.”
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Riot Games.