When a child creates an Epic account, Epic emails the parent or guardian to let them review privacy practices and optionally consent to unlocking more features, but full access requires completing a verification process.
This analysis describes what Unreal Engine's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The consent flow gates significant features including voice chat and real money purchases behind parental approval, and the verification requirement is intended to ensure consent is obtained from an actual parent rather than the child providing a fake email.
Parents will receive an email when their child creates an Epic account, and must complete a verification process to consent to additional features; until they do, the child's account remains restricted with limited gameplay access and no real money purchases.
How other platforms handle this
YOU MUST BE AND HEREBY AFFIRM THAT YOU ARE AN ADULT OF THE LEGAL AGE OF MAJORITY IN YOUR COUNTRY OR STATE OF RESIDENCE. If you are under the legal age of majority, your parent or legal guardian must consent to this agreement.
The Service is not directed to children under the age of 16. If you are under the age of 16, you may only use the Service with the involvement and consent of a parent or guardian. If you are a parent or guardian and you are aware that your child has provided us with personal information without your...
The Service is not directed to children under the age of 13. If you are under 13 years of age, please do not use or access the Service at any time or in any manner. If we learn that personally identifiable information has been collected on the Service from persons under 13 years of age and without v...
Monitoring
Unreal Engine has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We collect a parent/guardian's email address from a child to send the parent/guardian an email notice that their child has created a Cabined Account. This notice also lets them review our privacy practices for non-Cabined Accounts, provide consent to a non-Cabined Account for their child to enable additional features, and set up parental controls. Please note that parents/guardians must complete our parent verification process to provide consent for a non-Cabined Account.— Excerpt from Unreal Engine's Epic Games Privacy Policy
REGULATORY LANDSCAPE: The parental notification and verifiable parental consent mechanism directly implicates COPPA (16 CFR 312.5), which requires operators to obtain verifiable parental consent before collecting personal information from children beyond what is necessary for the child to participate in an activity. Epic's use of Kids Web Services (KWS), a subsidiary, for verification purposes is disclosed. The FTC evaluates whether the verification method constitutes 'verifiable' consent under COPPA. GDPR Article 8 and national implementations require consent from the holder of parental responsibility for children's data processing in the EEA. GOVERNANCE EXPOSURE: Medium. Reliance on a subsidiary (KWS) for the verification process is an operationally notable design. While vertical integration may simplify compliance, it also means that the adequacy of the verification mechanism is an internal rather than independent assessment. The FTC's COPPA guidance specifies acceptable verification methods, and any gap between KWS's method and those standards would create compliance exposure. The 14-day parent email retention window (after which unresponsive parent email addresses are deleted) is a defined and reasonable operational parameter. JURISDICTION FLAGS: United States (COPPA, FTC enforcement), EU/EEA (GDPR Article 8, national age of digital consent varying by member state from 13 to 16), United Kingdom (UK Children's Code, ICO enforcement), Brazil (LGPD children's consent requirements), South Korea (PIPA). The age threshold varies by jurisdiction (under 13 in the US, up to 16 in some EU member states), and Epic's policy accounts for this by referencing 'the age of digital consent in the user's region, whichever is higher.' CONTRACT AND VENDOR IMPLICATIONS: The KWS verification service, while a subsidiary, should be subject to a documented data processing arrangement that ensures COPPA and GDPR compliance for personal information processed during verification. The cross-recognition of verified parent email addresses across other KWS-powered games or services is a notable feature that may require assessment under applicable data protection frameworks. COMPLIANCE CONSIDERATIONS: Compliance teams should (1) document and periodically review the KWS verification method against FTC guidance on acceptable COPPA verification methods; (2) assess whether the cross-service recognition of verified parent emails by KWS satisfies consent specificity requirements under GDPR and COPPA; (3) confirm that the 14-day parent email retention and deletion process is operationally implemented; and (4) verify that the jurisdiction-specific age thresholds are accurately applied in Epic's age-gating systems.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The consent flow gates significant features including voice chat and real money purchases behind parental approval, and the verification requirement is intended to ensure consent is obtained from an actual parent rather than the child providing a fake email.
Parents will receive an email when their child creates an Epic account, and must complete a verification process to consent to additional features; until they do, the child's account remains restricted with limited gameplay access and no real money purchases.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Unreal Engine.