Epic Games Privacy Policy

This is the Epic Games Privacy Policy, which governs the collection, use, retention, disclosure, and processing of personal information across all Epic Services, including Fortnite, Rocket League, Unreal Engine, the Epic Games Store, and affiliated products, with Epic Games, Inc. acting as data controller. The policy states that Epic collects information users provide directly (such as name, email, payment details, voice chat snippets, and biometric-adjacent facial images for MetaHuman), information collected automatically (IP address, device identifiers, gameplay telemetry, and location inferred from IP), and information received from third parties such as gaming consoles and linked social platforms. Notably, the policy authorizes collection of facial images for MetaHuman character generation, voice chat snippet retention and transmission to Epic upon policy violation reports, and persistent identifier collection from children in Cabined Accounts, including IP address, device IDs, and gaming platform account IDs, which engages age-gating frameworks globally; the policy asserts these identifiers are not used for other purposes via technical and organizational controls, though independent verification of that assertion is not possible from the document alone. The policy expressly engages GDPR, UK GDPR, CCPA/CPRA, COPPA, and associated frameworks, identifying lawful bases for EEA, UK, and Swiss users in each processing section, and provides region-specific rights disclosures for California residents, Brazilian users under LGPD, and Korean users under PIPA. Material compliance considerations include the adequacy of Cabined Account controls under COPPA and equivalent national laws, the scope of third-party data sharing with gaming console operators and advertising platforms, and the operational sufficiency of the 18-month inactivity deletion commitment introduced in April 2026.