Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that if a child provides a parent's email address to link a parental account and the parent does not complete the linking process, Roblox will delete that email address within 24 hours.
This analysis describes what Roblox's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a specific 24-hour data minimization practice for parental email addresses that are not acted upon, which reflects a COPPA-aligned data minimization commitment and reduces the retention of personal information beyond the purpose for which it was collected.
This new provision specifies data handling for parental account setup failures, ensuring unused parental contact information is promptly deleted.
View full change record →Under this clause, if a child enters a parent's email address during the account setup or parental linking process and the parent does not complete the account linking, the email address will be deleted within 24 hours as stated in the policy. This practice is described as applying specifically to the parental account linking flow.
How other platforms handle this
We may also collect and use personal information with your consent...You can revoke your consent at any time (mostly through our services directly), though note that you might not be able to use any service or feature...
The right to notice. You have the right to be notified which categories of Personal Data are being collected and the purposes for which the Personal Data is being used.
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
Monitoring
Roblox has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"If you provide Roblox with your parent's email for the purposes of establishing a parental account, Roblox deletes your parent's email within 24 hours if your parent does not complete the linking process.Excerpt from Roblox's Privacy Policy
REGULATORY LANDSCAPE: This provision reflects data minimization and purpose limitation principles under COPPA, GDPR, and CCPA, all of which require that personal information not be retained beyond the purpose for which it was collected. The FTC enforces COPPA's requirements regarding parental contact information and the conditions under which it may be retained. GOVERNANCE EXPOSURE: Low. The 24-hour deletion commitment for unlinked parental emails represents a specific, bounded data minimization practice that aligns with regulatory expectations for handling children's account data. JURISDICTION FLAGS: GDPR's data minimization principle under Article 5(1)(c) and COPPA's parental contact information provisions are both relevant; the provision appears consistent with requirements in both frameworks for this specific use case. CONTRACT AND VENDOR IMPLICATIONS: Email service providers or identity verification vendors involved in the parental account linking flow should be subject to data processing agreements that include deletion obligations consistent with the 24-hour window stated in this provision. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the 24-hour deletion workflow for unlinked parental emails is operationally implemented and auditable, and that no downstream retention of these addresses occurs in backup systems, logs, or vendor systems beyond the stated window.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision establishes a specific 24-hour data minimization practice for parental email addresses that are not acted upon, which reflects a COPPA-aligned data minimization commitment and reduces the retention of personal information beyond the purpose for which it was collected.
Under this clause, if a child enters a parent's email address during the account setup or parental linking process and the parent does not complete the account linking, the email address will be deleted within 24 hours as stated in the policy. This practice is described as applying specifically to the parental account linking flow.
ConductAtlas has identified this type of provision across 295 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Roblox.