Provision record
Roblox · Roblox Terms of Use · View original document ↗

Biometric Data Collection via Facial Features

High severity High confidence Explicit document language Common · 296 of 352 platforms
Stay ahead of the changes
Track Roblox and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

The terms disclose that Roblox collects biometric data, including facial geometry, through optional features including age verification, facial media capture, and facial animation tools. Separate privacy notices govern the collection, use, sharing, retention, and destruction of this biometric data.

This analysis describes what Roblox's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The collection of biometric data, including facial geometry, through consumer-facing features triggers state biometric privacy statutes including Illinois BIPA, Texas CUBI, and Washington's biometric data law, as well as GDPR Article 9 special category data obligations for EU users. Separate notices governing retention and destruction schedules are referenced but not reproduced in the main terms.

Recent Activity

This document changed recently

High Apr 23, 2026

Roblox removed substantial portions of its Terms of Use, including sections covering dispute resolution, arbitration agreements, and class action waivers, which historically limited user remedies in disputes. The removal of language governing payments, refunds, user accounts, and intellectual property rights creates uncertainty about what protections or obligations currently apply, as replacements have not been provided in the change summary. Users should review the updated full terms when available to understand how disputes will be handled, what account protections exist, and how refunds and payments are governed.

View change record →
Medium Apr 9, 2026

The updated terms reorganize and clarify existing policies rather than imposing new restrictions. Roblox consolidated AI-related terms from supplemental documents into the main Terms of Use, added clarifying language about how creator content may be used in marketing and advertising, expanded disclosures about ad personalization and targeting practices, and provided additional detail on moderation procedures and group/community owner responsibilities. Practically, users and creators will find AI feature terms more prominently disclosed in the main agreement rather than in supplemental annexes, and the platform provides expanded transparency around advertiser eligibility and how ads are targeted based on personalization preferences.

View change record →
Medium Mar 8, 2026

The updated Terms of Use incorporate previously separate AI tool disclosures and advertising policies directly into the main user and creator agreement sections. The document now includes regional appendices addressing compliance requirements for the EU/EEA, UK, Australia, China, Japan, and Vietnam, which may apply different terms or restrictions based on your location. The restructuring removes the standalone change summary that previously explained these updates in plain language, relocating that information throughout the terms document itself.

View change record →

Clause Stability Stable

0
Changes
5
Months Monitored
May 7, 2026
First Seen
Jul 9, 2026
Last Seen
This clause type exists across 4186 other provisions on other platforms.

Consumer impact (what this means for users)

Users who activate optional facial animation, facial media capture, or age verification features consent to Roblox collecting biometric data including facial geometry. The terms state that separate notices govern how that data is collected, used, shared, retained, and destroyed.

How other platforms handle this

ZipRecruiter Medium

You may give us your Identity Data, Contact Data, Financial Data, Profile Data, and other information by filling in forms or by corresponding with us by post, phone, e-mail or otherwise.

Baseten Medium

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Service.

NVIDIA NIM Medium

NIM container releases that collect data, collect it for the following purposes: (a) to properly configure and optimize products for use with Software; and (b) to improve NVIDIA products and services.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
The Facial Media Capture Privacy Notice applies to any User who uses additional features on Roblox that require the use of one's camera or the uploading of files that contain an individual's facial geometry (including age verification) and explains how Roblox collects, uses, shares, retains, and destroys your Biometric Data when you use the Services. The Facial Animation Privacy Notice applies to any User who activates and enables tools on the Service, including Animation Capture-Face or Chat, that capture and animate facial movements and explains how Roblox collects, uses, shares, retains, and destroys the data collected when you use the Services.

Excerpt from Roblox's Terms of Use

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

(1) REGULATORY LANDSCAPE: Collection of facial geometry and biometric identifiers engages Illinois BIPA (740 ILCS 14), Texas Capture or Use of Biometric Identifier Act (CUBI), Washington My Health MY Data Act, and California's CCPA biometric …

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • Federal Trade Commission (ftc)
    Oversees unfair or deceptive business practices and can investigate companies that mislead consumers about data collection, sharing, or use.
    Who can file: Anyone affected by the company's practices (US or international)
    What you need: Your account details, a timeline of relevant events, and a description of the specific issue
    What to expect: Complaints inform FTC enforcement priorities and investigations but do not result in individual resolution or compensation
    File a complaint →
  • State Attorney General
    State AGs in California, New York, Texas, and other states can investigate violations of state consumer protection and privacy laws, including CCPA (California), SHIELD Act (New York), and equivalents.
    Who can file: Residents of states with comprehensive privacy laws — primarily California, Virginia, Colorado, Connecticut, and Utah
    What you need: Evidence of the violation, explanation of how your state rights were affected, and your account or contact information with the company
    What to expect: Outcomes vary by state. May result in investigation, enforcement action, or requirement for the company to change practices. No direct individual compensation in most cases.

    Search "[your state] attorney general consumer complaint" to find your state's direct complaint form

Applicable regulations

BIPA
Illinois, USA
CCPA/CPRA
California, USA
COPPA
United States Federal
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Roblox Terms of Use
Entity
Roblox
Document last updated
May 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-005118
Document ID
CA-D-00072
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
e143a1bab17ed0e00bf158d339726c725cfc496b1f3aa5bace5565865a9c992e
Analysis generated
July 9, 2026 05:13 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Roblox
Document: Roblox Terms of Use
Record ID: CA-P-005118
Captured: 2026-07-09 05:13:22 UTC
SHA-256: e143a1bab17ed0e0…
URL: https://conductatlas.com/platform/roblox/roblox-terms-of-use/provision/CA-P-005118/biometric-data-collection-via-facial-features/
Accessed: Aug. 18, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Roblox's Biometric Data Collection via Facial Features clause do?

The collection of biometric data, including facial geometry, through consumer-facing features triggers state biometric privacy statutes including Illinois BIPA, Texas CUBI, and Washington's biometric data law, as well as GDPR Article 9 special category data obligations for EU users. Separate notices governing retention and destruction schedules are referenced but not reproduced in the main terms.

How does this clause affect you?

Users who activate optional facial animation, facial media capture, or age verification features consent to Roblox collecting biometric data including facial geometry. The terms state that separate notices govern how that data is collected, used, shared, retained, and destroyed.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 296 platforms. See the full comparison.

Is ConductAtlas affiliated with Roblox?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Roblox.