The policy states that Epic collects personal information not only from users directly and through automated means, but also from third parties. The specific categories of third parties and the types of information obtained from them are described in Section 3 of the policy.
This analysis describes what Unreal Engine's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that personal information about users may be received from third-party sources, which is operationally significant for data mapping, GDPR Article 14 transparency obligations (which require notice to data subjects about information obtained from third parties), and CCPA's requirements to disclose categories of sources from which personal information is collected.
Interpretive note: The full list of third-party data sources is referenced in Section 3 but the document was truncated before those details could be reviewed, limiting assessment of the complete disclosure scope.
Under this provision, Epic may collect personal information about users from third-party sources in addition to information provided directly by users or collected automatically. The specific categories of third-party sources are addressed in Section 3 of the policy.
How other platforms handle this
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services.
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
"Generally speaking, we collect information in three ways: A) when you provide it to us, B) automatically when you use the Epic Services, and C) from third parties.Excerpt from Unreal Engine's Epic Games Privacy Policy
1) REGULATORY LANDSCAPE: Collection of personal information from third parties engages GDPR Article 14 (which requires notice to data subjects when data is obtained from sources other than the data subject), CCPA's requirement to disclose …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that personal information about users may be received from third-party sources, which is operationally significant for data mapping, GDPR Article 14 transparency obligations (which require notice to data subjects about information obtained from third parties), and CCPA's requirements to disclose categories of sources from which personal information is collected.
Under this provision, Epic may collect personal information about users from third-party sources in addition to information provided directly by users or collected automatically. The specific categories of third-party sources are addressed in Section 3 of the policy.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Unreal Engine.