9 Total
3 High severity
6 Medium severity
0 Low severity
Summary

This document establishes Roblox's policies governing collection, use, sharing, and protection of personal information from platform users. Roblox collects personal identifiers, device identifiers, location-related data, in-game behavioral data, chat content, and payment information, and authorizes sharing this data with advertising, analytics, and business partners. The policy establishes parental request procedures for users under 13 and specifies data rights available to users in applicable jurisdictions.

Technical / Legal Breakdown

This document is Roblox's Privacy and Cookie Policy, effective April 30, 2026, governing the collection, use, storage, and disclosure of personal information for users of the Roblox platform globally, with stated legal bases including consent, contractual necessity, legitimate interests, and legal obligation depending on jurisdiction. The policy states that Roblox collects identifiers, account credentials, device and hardware information, IP addresses, location-related data, in-game activity and behavioral data, communications content, payment information, biometric identifiers in certain jurisdictions, and inferences drawn from user activity; it authorizes sharing this data with service providers, advertising and analytics partners, business partners, and third parties in the context of corporate transactions. A notable provision authorizes the collection and use of data from users under 13 under a COPPA-compliant framework, restricting behavioral advertising for this group, while the policy also discloses the use of advertising technologies including pixels, SDKs, and cross-context behavioral advertising for users above the applicable age threshold; the policy asserts broad rights to process user-generated content and communications for safety and moderation purposes. The policy engages COPPA (enforced by the FTC) given Roblox's substantial under-13 user base, GDPR and UK GDPR for EU and UK residents respectively, CCPA and CPRA for California residents, and various other jurisdictional frameworks; compliance exposure is heightened given the platform's global reach, its mixed-age user population, and its in-platform economy involving virtual currency.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial

13 important changes detected

13 versions captured · Last updated: May 2026

What changed Roblox restructured its Privacy and Cookie Policy on May 15, 2026, replacing a brief effective-date notice with an expanded table of contents and organizational framework. The updated policy now opens with a dedicated privacy policy header, navigation categories for specific data collection scenarios (account setup, purchases, content posting, developer information), and jurisdiction-specific sections. The operational change is primarily structural: the policy reorganizes how privacy disclosures are presented and navigated rather than substantively altering collection practices or user rights.
Why this matters The updated privacy policy reorganizes how information is presented and indexed, adding a structured table of contents with sections for account creation, purchases, content posting, developer activities, and jurisdiction-specific privacy rights. The change is primarily structural: it groups related disclosures into clearer sections rather than modifying the substantive policies governing data collection or use. Users now have more granular navigation to find information relevant to their specific activities on the platform.
View full change record →
What changed On May 14, 2026, Roblox added Hindi language support to its published privacy policy document listings. The policy documentation now includes a Hindi version (Roblox की प्राइवेसी और कुकी पॉलिसी 20260430.pdf, 1 MB) alongside the 16 other language versions previously available. The substantive privacy terms themselves remain unchanged; this update only expands the languages in which the policy documentation is accessible.
Why this matters This change does not modify the substantive terms of Roblox's privacy policy. The addition of Hindi language documentation makes the policy more accessible to Hindi-speaking users who may prefer to review the terms in their native language. No changes to data collection, processing, rights, or obligations have occurred; the English and other existing language versions remain in effect and govern all users regardless of which language version they consult.
View full change record →

May 6, 2026 low

Roblox updated its Privacy and Cookie Policy on May 6, 2026, effective April 30, 2026. The updated policy now includes a new 'Effective Date' header and a 'Summary of Recent …

View change record →
May 6, 2026 low

Roblox restructured its Privacy and Cookie Policy on May 6, 2026, removing references to an earlier pending update notice and adding a new table-of-contents structure with expanded sections covering data …

View change record →
May 1, 2026 low

On May 1, 2026, Roblox updated its Privacy and Cookie Policy to reflect changes being made on the platform. The updated policy now begins with an explicit effective date of …

View change record →
May 1, 2026 medium

Roblox updated its privacy policy on May 1, 2026 to restrict personalized advertising for users under 18. The previous policy stated the platform personalizes ads for all users; the updated …

View change record →
April 29, 2026 low

Roblox updated its privacy policy on April 29, 2026 to add three new disclosures: clarification of who can see personalized versus non-personalized ads, description of information-sharing practices with authorities, and …

View change record →
April 23, 2026 medium

Roblox updated its Privacy and Cookie Policy effective April 23, 2026 to add detailed language about how it collects and uses persistent identifiers (IP addresses and device identifiers) from all …

View change record →
April 22, 2026 low

Roblox restructured the presentation of its Privacy and Cookie Policy on April 22, 2026, adding a welcome section and reorganizing the table of contents. The document now opens with a …

View change record →
April 21, 2026 low

Roblox updated its privacy policy publication on April 21, 2026, with an effective date of April 30, 2026. The updated policy reorganized its table of contents and added an explicit …

View change record →
April 19, 2026 low

Roblox restructured its privacy policy on April 19, 2026, adding a table of contents and reorganizing content into sections covering when information is collected, how it is shared, security measures, …

View change record →
April 16, 2026 low

Roblox updated its Privacy and Cookie Policy effective April 30, 2026, adding three substantive sections: clarification of who sees personalized versus non-personalized ads, disclosure of practices for sharing information with …

View change record →
March 8, 2026 medium

Roblox removed detailed explanations of how and why it collects user data, streamlined its privacy policy structure, and made specific clarifications about data practices for child accounts. The policy now …

View change record →
High — 3 provisions
Medium — 6 provisions

Monitoring

Roblox has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle AI and Machine Learning Training Use of Content and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

BIPA
Illinois, USA
View official text ↗
CCPA/CPRA
California, USA
View official text ↗
COPPA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
UK GDPR
United Kingdom
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 15, 2026 00:07 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000073
Version ID CA-V-002631
SHA-256 606290cc424bb1c1f25e2d811b5ba4dcece5cff5e8b8ea854c6e4110253c79a9
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans