The policy establishes a Cabined Account structure for users identified as children, collecting date of birth, hashed email address, parent/guardian email, and persistent identifiers including IP address, device IDs, platform account IDs, and tracking technology data. These identifiers are used for service provision, analytics, authentication, security, legal compliance, personalization, and user preference maintenance.
This analysis describes what Unreal Engine's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes collection of persistent identifiers from users identified as children for purposes including analytics and personalization, which requires evaluation against COPPA's restrictions on data use for child-directed services and equivalent national youth privacy frameworks. The policy states that technical and organizational measures are in place to prevent use of Cabined Account identifiers for other purposes, but the breadth of stated collection purposes may warrant review by compliance teams assessing COPPA and GDPR Article 8 alignment.
Under this provision, children identified through age-gating are placed in Cabined Accounts where Epic collects persistent identifiers including IP address, device IDs, and platform account IDs for analytics, personalization, and service operation. Parents and guardians can review these practices and exercise deletion or access rights via the Parent Support Request Form at https://www.epicgames.com/help/contact-us-parent.
How other platforms handle this
You and your organization's administrator can access several types of Service Data directly from Google Cloud, including your account information, billing contact information, payment and transaction information, as well as product and communication settings and configurations.
to request that your data be transferred to a third party (data portability)
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
"When a user indicates they are a child, they are placed in a "Cabined Account" until they are no longer a child as defined above or until their parent/guardian provides additional privacy permissions and enables parental controls. Cabined Accounts can play Epic's games (e.g., Fortnite, Rocket League, or Fall Guys), but features like voice chat and real money purchases are disabled. Epic collects limited personal information from Cabined Accounts to operate them, in each case according to applicable youth privacy and protection laws: child's date of birth and country to determine age and apply appropriate settings; child's email address for sign-in (which is only stored in an unreadable hashed and salted form); parent/guardian's email address to provide notice and seek their consent for additional features; and persistent identifiers of the child like IP address, Epic account ID, gaming platform account IDs, device IDs, and similar data collected with website tracking technologies to provide and maintain the Epic Services (including analytics to improve them), authenticate users, protect the security and integrity of users and the Epic Services, comply with legal and regulatory requirements, facilitate personalization, and maintain user driven preferences.Excerpt from Unreal Engine's Epic Games Privacy Policy
1) REGULATORY LANDSCAPE: This provision directly implicates COPPA (15 U.S.C.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision authorizes collection of persistent identifiers from users identified as children for purposes including analytics and personalization, which requires evaluation against COPPA's restrictions on data use for child-directed services and equivalent national youth privacy frameworks. The policy states that technical and organizational measures are in place to prevent use of Cabined Account identifiers for other purposes, but the breadth …
Under this provision, children identified through age-gating are placed in Cabined Accounts where Epic collects persistent identifiers including IP address, device IDs, and platform account IDs for analytics, personalization, and service operation. Parents and guardians can review these practices and exercise deletion or access rights via the Parent Support Request Form at https://www.epicgames.com/help/contact-us-parent.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Unreal Engine.