Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This is Roblox's privacy policy, explaining what personal information Roblox collects from players and how it is used, shared, and protected. Roblox collects your name, email address, date of birth, device identifiers, location data, chat messages, gameplay activity, and purchase history, and the policy authorizes sharing this data with advertising and analytics partners for targeted advertising, including for users who are teens aged 13-17. If you are a parent of a child under 13, you can review and request deletion of your child's personal data by contacting Roblox at privacy@roblox.com or through the privacy request form at https://www.roblox.com/my/account.
This document is Roblox's Privacy and Cookie Policy, effective April 30, 2026, governing the collection, use, storage, and sharing of personal data from users of the Roblox platform globally, with stated legal bases including consent, legitimate interests, contractual necessity, and legal obligation depending on jurisdiction. The policy states that Roblox collects identifiers (name, username, email, phone number, date of birth), device and technical data (IP address, browser type, operating system, device identifiers), usage and behavioral data (game activity, chat logs, purchase history, search queries), location data, user-generated content, and in some regions biometric or voice data; the terms authorize sharing this data with service providers, advertising and analytics partners, business partners, and in connection with corporate transactions. The policy asserts broad rights to use collected data for advertising personalization, product development, safety enforcement, and cross-context behavioral advertising, while also disclosing data collection practices from users under 13 subject to COPPA requirements, a distinction that is operationally significant given Roblox's substantial user base of minors. The policy engages COPPA (US), GDPR and UK GDPR (EU/EEA and UK users), CCPA/CPRA (California residents), and various other regional frameworks including Brazil's LGPD and South Korea's PIPA; enforcement authorities include the FTC, state attorneys general, the UK ICO, and EU data protection authorities. Material compliance considerations include the adequacy of parental consent mechanisms for under-13 users, the sufficiency of opt-out mechanisms for cross-context behavioral advertising under CPRA, and the lawfulness of data transfers from the EU/EEA to the United States under post-Schrems II transfer frameworks.
Institutional analysis available with Professional
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.
Start Professional free trial3 important changes detected
4 versions captured · Last updated: May 2026
Roblox's privacy policy was updated on May 5, 2026 to reflect changes being made on the platform, with an effective date of April 30, 2026. The updated policy adds a …
View change record →Monitoring
Roblox has updated this document before.
Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
Professional Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Professional free trialCross-platform context
See how other platforms handle Age-Tiered Advertising Restrictions and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.