Riot Games · Riot Games Privacy Notice · View original document ↗

Third-Party Advertising Data Sharing

High severity Uncommon · 28 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Riot Games Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Riot shares your personal data — including gameplay behavior, device identifiers, and usage patterns — with third-party advertising and analytics companies to serve targeted ads and measure campaign performance.

This analysis describes what Riot Games's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes Riot Games' operational approach to third-party advertising data sharing by limiting the scope and purpose restrictions placed on advertising partners in regulated states. The clause creates a contractual requirement that advertising partners function as processors rather than independent users of personal information, which affects the compliance framework governing data flows to ad partners.

Recent Activity

This document changed recently

Medium Apr 14, 2026

Riot Games has restructured how it presents information about data collection and use in its privacy notice. The company narrowed its third-party disclaimer by removing the phrase 'we don't own or control,' replacing it with 'we don't control'—a distinction that may affect which entities the company is claiming it has no privacy responsibility for. For California residents, the notice now consolidates information about categories of personal information and their purposes into a single section rather than splitting them across the document. The practical implication depends on how Riot Games operationally interprets 'control' in relation to its business relationships and how California regulators view this language under CCPA notice requirements.

View change record →

Consumer impact (what this means for users)

Data shared with advertising partners may be used for cross-platform tracking and targeted advertising beyond the Riot ecosystem. California residents have the right to opt out of this sharing under CCPA/CPRA.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    Visit Riot's privacy notice page and use the Cookie Preferences tool or privacy request form to opt out of data sharing with advertising partners. California residents can submit a 'Do Not Sell or Share My Personal Information' request via the same portal.

How other platforms handle this

LinkedIn Medium

We do not share your personal data with any third-party advertisers or ad networks for their advertising except for: (i) hashed or device identifiers (to the extent they are personal data in some countries), (ii) with your separate permission (e.g., in a lead generation form) or (iii) data already v...

Notion Medium

We may share your personal information with third-party vendors and service providers that perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, customer service, and marketing assistance. We may also share your personal information with busines...

Waze Medium

We may share your information with third-party partners, including advertising and analytics companies, to help us understand how you use our services and to show you more relevant ads. These third parties may use cookies, web beacons, and other tracking technologies to collect information about you...

See all platforms with this clause type →

Monitoring

Riot Games has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We have chosen not to use advertising services that constitute a 'sale,' 'share' or use of personal info of consumers for 'targeted advertising' purposes in those U.S. states that require these defined activities to be subject to an opt-out. For those U.S. states that require an opt-out, we require the ad partners we work with to process the personal info they receive only as permitted by a service provider or processor under state privacy law, and only to provide the services.

— Excerpt from Riot Games's Riot Games Privacy Notice

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

Sharing personal data with advertising partners for targeted advertising likely constitutes 'selling' or 'sharing' personal information under CCPA/CPRA, requiring a Do Not Sell/Share opt-out mechanism. Under GDPR, this processing requires a valid lawful basis — typically consent — and must meet transparency requirements under Articles 13 and 14.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC oversees consumer protection related to data sharing and targeted advertising practices, including deceptive or unfair data brokerage.
    File a complaint →
  • State AG
    California's Attorney General enforces CCPA/CPRA opt-out rights related to the sale or sharing of personal data with advertising partners.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
COPPA
United States Federal
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
Riot Games Privacy Notice
Entity
Riot Games
Document last updated
May 5, 2026
Tracking information
First tracked
March 20, 2026
Last verified
March 20, 2026
Record ID
CA-P-001563
Document ID
CA-D-00310
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
39702142b1ff9de41afd68c3620684a1be0bc3bef47100050658a43adbd5eca3
Analysis generated
March 20, 2026 11:13 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Riot Games
Document: Riot Games Privacy Notice
Record ID: CA-P-001563
Captured: 2026-03-20 11:13:03 UTC
SHA-256: 39702142b1ff9de4…
URL: https://conductatlas.com/platform/riot-games/riot-games-privacy-notice/third-party-advertising-data-sharing/
Accessed: May 20, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Riot Games's Third-Party Advertising Data Sharing clause do?

This provision establishes Riot Games' operational approach to third-party advertising data sharing by limiting the scope and purpose restrictions placed on advertising partners in regulated states. The clause creates a contractual requirement that advertising partners function as processors rather than independent users of personal information, which affects the compliance framework governing data flows to ad partners.

How does this clause affect you?

Data shared with advertising partners may be used for cross-platform tracking and targeted advertising beyond the Riot ecosystem. California residents have the right to opt out of this sharing under CCPA/CPRA.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 28 platforms. See the full comparison.

Is ConductAtlas affiliated with Riot Games?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Riot Games.