Riot shares your personal data — including gameplay behavior, device identifiers, and usage patterns — with third-party advertising and analytics companies to serve targeted ads and measure campaign performance.
This analysis describes what Riot Games's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes Riot Games' operational approach to third-party advertising data sharing by limiting the scope and purpose restrictions placed on advertising partners in regulated states. The clause creates a contractual requirement that advertising partners function as processors rather than independent users of personal information, which affects the compliance framework governing data flows to ad partners.
Riot Games has restructured how it presents information about data collection and use in its privacy notice. The company narrowed its third-party disclaimer by removing the phrase 'we don't own or control,' replacing it with 'we don't control'—a distinction that may affect which entities the company is claiming it has no privacy responsibility for. For California residents, the notice now consolidates information about categories of personal information and their purposes into a single section rather than splitting them across the document. The practical implication depends on how Riot Games operationally interprets 'control' in relation to its business relationships and how California regulators view this language under CCPA notice requirements.
View change record →Data shared with advertising partners may be used for cross-platform tracking and targeted advertising beyond the Riot ecosystem. California residents have the right to opt out of this sharing under CCPA/CPRA.
How other platforms handle this
Protect us, our business, our users, and others, for example to enforce our terms of service, prevent spam or other unwanted communications, and investigate or protect against fraud
we may use, retain or share information with law enforcement or others in circumstances where a person's vital interests require protection, such as in the case of emergencies.
Third-party apps use data from Gemini consistent with their own privacy policies and terms.
"We have chosen not to use advertising services that constitute a 'sale,' 'share' or use of personal info of consumers for 'targeted advertising' purposes in those U.S. states that require these defined activities to be subject to an opt-out. For those U.S. states that require an opt-out, we require the ad partners we work with to process the personal info they receive only as permitted by a service provider or processor under state privacy law, and only to provide the services.Excerpt from Riot Games's Privacy Notice
Sharing personal data with advertising partners for targeted advertising likely constitutes 'selling' or 'sharing' personal information under CCPA/CPRA, requiring a Do Not Sell/Share opt-out mechanism.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them to separate documents.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes Riot Games' operational approach to third-party advertising data sharing by limiting the scope and purpose restrictions placed on advertising partners in regulated states. The clause creates a contractual requirement that advertising partners function as processors rather than independent users of personal information, which affects the compliance framework governing data flows to ad partners.
Data shared with advertising partners may be used for cross-platform tracking and targeted advertising beyond the Riot ecosystem. California residents have the right to opt out of this sharing under CCPA/CPRA.
ConductAtlas has identified this type of provision across 288 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Riot Games.