Roblox and its partners use cookies, pixels, SDKs, and similar tools to track your activity on Roblox and other websites, including for targeted advertising. You can control some cookies through your browser, and Roblox states it honors Global Privacy Control signals where required by law.
This analysis describes what Roblox's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The provision establishes the operational basis for data collection infrastructure that enables the service's analytics, personalization, and advertising functions. It specifies that tracking occurs across multiple platforms and partners, creating a multi-entity data collection framework.
The updated policy restricts personalized advertising based on age. Users under 18 will see only nonpersonalized ads on the platform, while users 18 and older may see personalized ads if they provide consent where required. The revised language also removes the previous statement that the platform collects personal information from under-13 accounts for advertising purposes, clarifying that such data is not used for marketing. Users 18 or older can control whether they see personalized ads through Roblox account settings.
View change record →The updated policy adds explicit language disclosing that Roblox collects persistent identifiers (IP addresses and unique device identifiers) from all users, including children, for purposes including account authentication, ad frequency capping, network communications, and security. The policy states Roblox implements technical, contractual, and other measures to ensure these identifiers are not used for purposes outside the listed scope. This represents a clarification and formalization of practices rather than a change to what data is collected, but it does establish contractual limits on how that data may be used. You can review the full updated Privacy Policy to understand which persistent identifiers are collected and the specific operational purposes for which they are retained.
View change record →The updated policy clarifies that parent email addresses constitute the only personal information collected from child accounts under COPPA, rather than listing persistent identifiers. The policy now states that personalized ads are not enabled until age 18, rather than leaving this ambiguous when a child turns 13. These clarifications affect how parents and children understand what data Roblox collects and when advertising becomes personalized; however, the underlying data practices do not appear to have changed operationally. The policy removed detailed descriptions of collection purposes (such as internal operations), which means parents now have less granular explanation of data uses, though stated practices remain.
View change record →Roblox and its partners deploy cookies, pixels, and SDKs to collect behavioral and activity data across the platform and other websites for analytics and targeted advertising; users can control cookies through browser settings and, in applicable jurisdictions, use Global Privacy Control signals to limit data sharing.
How other platforms handle this
We use cookies, web beacons, pixel tags, and other tracking technologies on our websites to recognize you and your preferences, authenticate users, analyze website traffic and usage patterns, and to deliver personalized content and advertisements. We may use both session cookies and persistent cooki...
We use various technologies to collect information, including cookies and web beacons. Cookies are small data files stored on your hard drive or in device memory that help us improve our Services and your experience, see which areas and features of our Services are popular, and count visits. Web bea...
We use cookies, web beacons, pixel tags, and similar tracking technologies on our websites and in our communications to collect information about your browsing activities, your preferences, and your device. This may include information such as your IP address, browser type, operating system, referri...
Monitoring
Roblox has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We and our third-party partners use cookies, pixel tags, local storage, software development kits (SDKs), and similar tracking technologies to collect information about your use of our Services and other websites and apps. These technologies help us provide our Services, analyze usage, personalize your experience, and deliver targeted advertising. You may be able to control cookies through your browser settings, but disabling certain cookies may affect the functionality of our Services. We also honor certain browser-based opt-out signals, such as Global Privacy Control (GPC), where required by applicable law.— Excerpt from Roblox's Roblox Privacy and Cookie Policy
(1) REGULATORY LANDSCAPE: This provision engages the EU ePrivacy Directive (requiring prior informed consent for non-essential cookies), UK ICO cookie guidance, and CCPA/CPRA (requiring recognition of GPC signals as opt-out of sale/sharing in California). The FTC has issued guidance on the use of tracking technologies and their relationship to unfair or deceptive practices. (2) GOVERNANCE EXPOSURE: Medium. The policy's statement that GPC signals are honored 'where required by applicable law' is consistent with CCPA obligations but leaves open whether GPC is honored in jurisdictions where it is not yet legally mandated; compliance teams should verify the technical implementation of GPC recognition. (3) JURISDICTION FLAGS: EU/EEA users require a consent management platform meeting the ePrivacy Directive standard; California users have a statutory right to have GPC signals treated as opt-out requests; UK users are subject to ICO cookie guidance requiring clear consent for analytics and advertising cookies. (4) CONTRACT AND VENDOR IMPLICATIONS: Third-party partners deploying tracking technologies through the Roblox platform must be disclosed and governed by appropriate data processing agreements; the list of cookie partners should be maintained and updated in the cookie disclosure. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should audit the consent management platform to confirm it blocks non-essential cookies prior to consent for EU/UK users; verify that the GPC signal recognition is implemented at the technical level and tested across browsers; review the third-party cookie/SDK inventory for any partners not disclosed in the policy; and assess whether cookie disclosures on the platform are sufficiently granular to satisfy GDPR transparency requirements.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The provision establishes the operational basis for data collection infrastructure that enables the service's analytics, personalization, and advertising functions. It specifies that tracking occurs across multiple platforms and partners, creating a multi-entity data collection framework.
Roblox and its partners deploy cookies, pixels, and SDKs to collect behavioral and activity data across the platform and other websites for analytics and targeted advertising; users can control cookies through browser settings and, in applicable jurisdictions, use Global Privacy Control signals to limit data sharing.
ConductAtlas has identified this type of provision across 24 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Roblox.