Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that users who opt into the Contact Importer feature share their mobile address book contents, including first and last names and phone numbers of all contacts, with Roblox, and that Roblox automatically accesses and syncs this data periodically. Data from non-matching contacts is not retained.
This analysis describes what Roblox's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes ongoing, automatic collection of third-party contact data (individuals who are not Roblox users and have not consented to data collection) from the address books of users who activate the feature, which may require evaluation under GDPR, CCPA, and other privacy frameworks with respect to the rights of non-user data subjects.
Under this clause, activating the Contact Importer feature initiates ongoing periodic collection of all contacts' first and last names and phone numbers from a user's mobile address book. The policy states retention is limited to contacts who match existing Roblox users, and notes the feature is only available to users 13 and older and may not be available in all locations.
Cross-platform context
See how other platforms handle Contact Book Import with Automatic Sync and similar clauses.
Compare across platforms →Monitoring
Roblox has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you opt-in to the Contact Importer feature, you will share the first and last names and phone numbers of your contacts in your address book on your mobile phone with Roblox. This feature helps connect with your friends on our Service. If you use the feature, we will automatically access and collect information in your address book from time to time in order to sync your contacts. Such information will only be retained in case of matches with existing Roblox users.Excerpt from Roblox's Privacy Policy
1. REGULATORY LANDSCAPE: Collection of third-party contact data (non-Roblox users) implicates GDPR Articles 13 and 14 regarding notice to data subjects whose data is collected from third parties, CCPA provisions on personal information collected from third parties, and potentially applicable laws in jurisdictions that restrict collection of data about individuals who have not consented. The FTC has jurisdiction over unfair data collection practices; EU data protection authorities enforce GDPR transparency obligations. 2. GOVERNANCE EXPOSURE: Medium. The automatic and periodic sync of address book data creates ongoing collection obligations and potential exposure with respect to the privacy rights of non-user contacts whose data is collected and temporarily processed. The policy does not describe how Roblox provides GDPR Article 14 notice to non-user contacts whose data is collected. 3. JURISDICTION FLAGS: EEA residents' contact data collected by Roblox from address books of other users may trigger GDPR Article 14 obligations. California residents may have CCPA rights with respect to personal information collected about them from third parties. The feature is described as unavailable in certain locations, suggesting jurisdiction-specific restrictions may already apply. 4. CONTRACT AND VENDOR IMPLICATIONS: If contact matching is performed by a third-party identity resolution or matching service, Data Processing Agreements must address the handling of non-user contact data and deletion timelines for non-matching records. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether the opt-in mechanism for the Contact Importer feature constitutes adequate informed consent under applicable law, evaluate whether GDPR Article 14 notice obligations for non-user contacts are met, and verify that technical deletion of non-matching contact data occurs as stated in the policy.
This provision establishes ongoing, automatic collection of third-party contact data (individuals who are not Roblox users and have not consented to data collection) from the address books of users who activate the feature, which may require evaluation under GDPR, CCPA, and other privacy frameworks with respect to the rights of non-user data subjects.
Under this clause, activating the Contact Importer feature initiates ongoing periodic collection of all contacts' first and last names and phone numbers from a user's mobile address book. The policy states retention is limited to contacts who match existing Roblox users, and notes the feature is only available to users 13 and older and may not be available in all …
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Roblox.