The policy states that if a child provides a parent's email address to link a parental account and the parent does not complete the linking process, Roblox will delete that email address within 24 hours.
This analysis describes what Roblox's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a specific 24-hour data minimization practice for parental email addresses that are not acted upon, which reflects a COPPA-aligned data minimization commitment and reduces the retention of personal information beyond the purpose for which it was collected.
Removal of specific 24-hour deletion guarantee for non-linked parent emails eliminates transparency around parental contact data handling.
View full change record →This new provision specifies data handling for parental account setup failures, ensuring unused parental contact information is promptly deleted.
View full change record →Under this clause, if a child enters a parent's email address during the account setup or parental linking process and the parent does not complete the account linking, the email address will be deleted within 24 hours as stated in the policy. This practice is described as applying specifically to the parental account linking flow.
How other platforms handle this
You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.
Request Deletion of your information, subject to certain exceptions prescribed by law.
If you would like to access/download, delete, your data, please submit your request through our automated, self-service system.
"If you provide Roblox with your parent's email for the purposes of establishing a parental account, Roblox deletes your parent's email within 24 hours if your parent does not complete the linking process.Excerpt from Roblox's Privacy Policy
REGULATORY LANDSCAPE: This provision reflects data minimization and purpose limitation principles under COPPA, GDPR, and CCPA, all of which require that personal information not be retained beyond the purpose for which it was collected.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes a specific 24-hour data minimization practice for parental email addresses that are not acted upon, which reflects a COPPA-aligned data minimization commitment and reduces the retention of personal information beyond the purpose for which it was collected.
Under this clause, if a child enters a parent's email address during the account setup or parental linking process and the parent does not complete the account linking, the email address will be deleted within 24 hours as stated in the policy. This practice is described as applying specifically to the parental account linking flow.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Roblox.