For players under 13, Roblox states it collects limited information and requires parent permission before collecting more. Parents can ask Roblox to show them, fix, or delete their child's data.
This analysis describes what Roblox's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
COPPA requires verifiable parental consent before collecting personal data from children under 13; the adequacy of Roblox's consent and age-verification mechanisms directly affects the legal compliance of data collection from its youngest users.
Interpretive note: The operational adequacy of the age-gating and parental consent verification mechanism cannot be assessed from the policy text alone; enforcement depends on technical implementation.
Previous version stated only necessary information was collected with parental consent; current version now explicitly includes persistent identifiers (IP address, device identifiers) collected from users under 13 without mentioning parental consent requirement.
View full change record →Added explicit mention of parental consent requirements, email address collection, and parent rights to review/correct/delete child data; removed incomplete excerpt text.
View full change record →The policy states that Roblox limits data collection for under-13 users to username, password, date of birth, and optionally an email address, and asserts that additional data collection requires parental consent. Parents who want to review or delete their child's data can do so by contacting privacy@roblox.com.
How other platforms handle this
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
"For users under 13, we collect only the information necessary to create and maintain their Roblox account, including a username, password, date of birth, and, if provided by the parent or user, an email address. We obtain verifiable parental consent before collecting additional personal information from users under 13. Parents can review, correct, or request deletion of their child's personal information by contacting us at privacy@roblox.com.Excerpt from Roblox's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision directly implicates COPPA, enforced by the FTC, which requires verifiable parental consent before collecting, using, or disclosing personal information from children under 13.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
COPPA requires verifiable parental consent before collecting personal data from children under 13; the adequacy of Roblox's consent and age-verification mechanisms directly affects the legal compliance of data collection from its youngest users.
The policy states that Roblox limits data collection for under-13 users to username, password, date of birth, and optionally an email address, and asserts that additional data collection requires parental consent. Parents who want to review or delete their child's data can do so by contacting privacy@roblox.com.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Roblox.