The policy states that third-party experience creators automatically receive users' usernames, display names, user IDs, game metrics, UGC transaction details, and regional location derived from IP addresses, without any opt-out mechanism described for this sharing.
This analysis describes what Roblox's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes automatic data sharing with third-party creators as an inherent condition of using any Roblox experience, creating downstream data controller or processor relationships that may require contractual documentation under GDPR Article 28 and equivalent frameworks in other jurisdictions.
New provision clarifying data sharing with game developers/creators including regional location and game metrics, establishing new third-party data access rights.
View full change record →Under this clause, any third-party creator whose experience or content a user interacts with automatically receives the user's username, display name, user ID, game metrics, UGC transaction details, and regionally derived location without a separate opt-in. The policy does not describe an opt-out mechanism for this specific sharing.
Cross-platform context
See how other platforms handle Data Sharing with Experience Creators and similar clauses.
Compare across platforms →"The creators of the experiences you use or content you interact with will have access to your username, display name, user ID, game metrics, UGC transaction details, and your regional location (which we base on your IP address). We do not share your IP address with the creators. We provide creators with the regional location of players to determine their player base and make sure their experiences meet the legal requirements of the country you live in.Excerpt from Roblox's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes automatic data sharing with third-party creators as an inherent condition of using any Roblox experience, creating downstream data controller or processor relationships that may require contractual documentation under GDPR Article 28 and equivalent frameworks in other jurisdictions.
Under this clause, any third-party creator whose experience or content a user interacts with automatically receives the user's username, display name, user ID, game metrics, UGC transaction details, and regionally derived location without a separate opt-in. The policy does not describe an opt-out mechanism for this specific sharing.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Roblox.