Users who indicate they are children are placed in a 'Cabined Account' with restricted features and limited data collection until a parent provides consent for a full account, verified through Epic's subsidiary Kids Web Services (KWS).
This analysis describes what Unreal Engine's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The use of an Epic subsidiary (KWS) to conduct parental verification for COPPA purposes raises questions about the independence and adequacy of the consent mechanism, and the upgrade pathway from Cabined to full account significantly expands data collection.
Children in Cabined Accounts have their data limited to essential identifiers including email hash, IP address, and device IDs, but once a parent grants consent through KWS, Epic's full data collection practices — including advertising data sharing — apply to the child's account, which parents may not fully appreciate when clicking through the consent flow.
How other platforms handle this
Your use of the Services is also governed by our Privacy Policy, which is incorporated into these Terms by reference. By using the Services, you consent to the collection, use, and disclosure of your information as described in our Privacy Policy.
Only to the extent Customer cannot reasonably be satisfied with Mistral AI's compliance with this DPA through the exercise of the audit set out in Section 9.1 (Document Audit) of this DPA, Customer may conduct up to one (1) on-site audit per year to verify Mistral AI's compliance with this DPA, unde...
When you visit the Careers portion of our websites, we collect the information that you provide to us in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history and other in...
Monitoring
Unreal Engine has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"When a user indicates they are a child, they are placed in a "Cabined Account" until they are no longer a child as defined above or until their parent/guardian provides additional privacy permissions and enables parental controls. Cabined Accounts can play Epic's games (e.g., Fortnite, Rocket League, or Fall Guys), but features like voice chat and real money purchases are disabled.— Excerpt from Unreal Engine's Epic Games Privacy Policy
REGULATORY FRAMEWORK: This provision directly implicates COPPA (15 U.S.C. §6501 et seq., 16 C.F.R. Part 312), which requires verifiable parental consent before collecting personal information from children under 13, enforced by the FTC with civil penalties up to $51,744 per violation; GDPR Article 8 (age of digital consent, minimum 13, up to 16 depending on member state), enforced by EU DPAs; UK GDPR and the Age Appropriate Design Code (Children's Code) enforced by the ICO; and CCPA/CPRA which extends special protections to minors under 16 (opt-in consent for sale/sharing of data for users 13–15).
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The use of an Epic subsidiary (KWS) to conduct parental verification for COPPA purposes raises questions about the independence and adequacy of the consent mechanism, and the upgrade pathway from Cabined to full account significantly expands data collection.
Children in Cabined Accounts have their data limited to essential identifiers including email hash, IP address, and device IDs, but once a parent grants consent through KWS, Epic's full data collection practices — including advertising data sharing — apply to the child's account, which parents may not fully appreciate when clicking through the consent flow.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Unreal Engine.