When a child creates an Epic account, Epic emails the parent or guardian to let them review privacy practices and optionally consent to unlocking more features, but full access requires completing a verification process.
This analysis describes what Unreal Engine's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The consent flow gates significant features including voice chat and real money purchases behind parental approval, and the verification requirement is intended to ensure consent is obtained from an actual parent rather than the child providing a fake email.
Parents will receive an email when their child creates an Epic account, and must complete a verification process to consent to additional features; until they do, the child's account remains restricted with limited gameplay access and no real money purchases.
How other platforms handle this
If you consent to receive calls and SMS text messages from Redfin, that consent is exclusive to Redfin and its partners and affiliates, and is collected solely for the purpose of obtaining your permission to call or text you as part of providing you with the Services or to send you marketing message...
By creating an Affirm account or using the Services, you consent to receive electronically all communications, agreements, documents, notices and disclosures (collectively, 'Communications') that Affirm provides in connection with your Affirm account and use of the Services. Communications include, ...
If you choose to open an Account, Afterpay may send you SMS messages. You agree to receive SMS messages at any time of day to each telephone number provided by you to Afterpay, regardless of whether such telephone number is on a corporate, state or federal do-not-call registry. You certify, represen...
Monitoring
Unreal Engine has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We collect a parent/guardian's email address from a child to send the parent/guardian an email notice that their child has created a Cabined Account. This notice also lets them review our privacy practices for non-Cabined Accounts, provide consent to a non-Cabined Account for their child to enable additional features, and set up parental controls. Please note that parents/guardians must complete our parent verification process to provide consent for a non-Cabined Account.— Excerpt from Unreal Engine's Epic Games Privacy Policy
REGULATORY LANDSCAPE: The parental notification and verifiable parental consent mechanism directly implicates COPPA (16 CFR 312.5), which requires operators to obtain verifiable parental consent before collecting personal information from children beyond what is necessary for the child to participate in an activity. Epic's use of Kids Web Services (KWS), a subsidiary, for verification purposes is disclosed. The FTC evaluates whether the verification method constitutes 'verifiable' consent under COPPA. GDPR Article 8 and national implementations require consent from the holder of parental responsibility for children's data processing in the EEA. GOVERNANCE EXPOSURE: Medium. Reliance on a subsidiary (KWS) for the verification process is an operationally notable design. While vertical integration may simplify compliance, it also means that the adequacy of the verification mechanism is an internal rather than independent assessment. The FTC's COPPA guidance specifies acceptable verification methods, and any gap between KWS's method and those standards would create compliance exposure. The 14-day parent email retention window (after which unresponsive parent email addresses are deleted) is a defined and reasonable operational parameter. JURISDICTION FLAGS: United States (COPPA, FTC enforcement), EU/EEA (GDPR Article 8, national age of digital consent varying by member state from 13 to 16), United Kingdom (UK Children's Code, ICO enforcement), Brazil (LGPD children's consent requirements), South Korea (PIPA). The age threshold varies by jurisdiction (under 13 in the US, up to 16 in some EU member states), and Epic's policy accounts for this by referencing 'the age of digital consent in the user's region, whichever is higher.' CONTRACT AND VENDOR IMPLICATIONS: The KWS verification service, while a subsidiary, should be subject to a documented data processing arrangement that ensures COPPA and GDPR compliance for personal information processed during verification. The cross-recognition of verified parent email addresses across other KWS-powered games or services is a notable feature that may require assessment under applicable data protection frameworks. COMPLIANCE CONSIDERATIONS: Compliance teams should (1) document and periodically review the KWS verification method against FTC guidance on acceptable COPPA verification methods; (2) assess whether the cross-service recognition of verified parent emails by KWS satisfies consent specificity requirements under GDPR and COPPA; (3) confirm that the 14-day parent email retention and deletion process is operationally implemented; and (4) verify that the jurisdiction-specific age thresholds are accurately applied in Epic's age-gating systems.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The consent flow gates significant features including voice chat and real money purchases behind parental approval, and the verification requirement is intended to ensure consent is obtained from an actual parent rather than the child providing a fake email.
Parents will receive an email when their child creates an Epic account, and must complete a verification process to consent to additional features; until they do, the child's account remains restricted with limited gameplay access and no real money purchases.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Unreal Engine.