If a child gives more Personal Information than needed, Roblox may delete it unless law requires keeping it
Roblox says it will only ask users under 13 for the information needed to set up or protect their account. If a child gives more Personal Information, Roblox lists responses that include deleting the additional information it collected, unless the law requires keeping it. The list continues with other options (cancelling the account or turning on age-appropriate protections), joined by "or", so deletion is one of several listed responses.
Supporting quotations
If you’re under 13 years old, we will only ask you to tell us the information we need to set up or protect your account. If you give us more of your Personal Information, we will:
delete any additional Personal Information we’ve collected from you (unless the law requires us to keep it),
Retention & Deletion · Company practice
Roblox keeps data only as long as reasonably necessary, but may keep it longer for legal reasons
Roblox says its retention policy is designed to limit retention to what is reasonably necessary for the purposes the information was collected for and to keep persistent identifiers from being retained indefinitely, backed by access controls, purpose-based tagging, employee training and data segregation. Persistent identifiers may be kept for different periods depending on Roblox's business needs. Roblox may also keep information longer when legal or regulatory compliance requires it. This appears in the part of the policy addressed to users under 13.
Supporting quotations
Roblox maintains a retention policy designed to limit data retention to what is reasonably necessary to fulfill the specific purposes for which we collected your information and to prevent persistent identifiers from being retained indefinitely.
Roblox may retain the persistent identifiers that we collect from you for different periods of time based on our specific business needs, which include:
Roblox may also retain information for longer periods if we are required to do so for legal or regulatory compliance.
Retention & Deletion · Company practice
Device and network identifiers are kept while you have an account and up to two years after deletion
To maintain your account, Roblox stores persistent identifiers for as long as you have an account. When you delete your account, Roblox starts permanent deletion of data in its systems, but for safety and security purposes, such as preventing bots, it may process persistent identifiers for up to two years after deletion.
Supporting quotations
Providing the Roblox Services, including account maintenance and security
In order to maintain your account (e.g., remember your account’s configuration and activity history), Roblox stores persistent identifiers for the amount of time you have an account. When you delete your account, Roblox initiates permanent deletion of data in our systems. For safety and security purposes (e.g., bot prevention), Roblox may process persistent identifiers for up to two years after account deletion.
Retention & Deletion · Company commitment
A parent's email given for account linking is deleted within 24 hours if linking is not completed
If you give Roblox your parent's email address to set up a parental account and your parent does not complete the linking process, Roblox deletes the parent's email within 24 hours.
Supporting quotations
If you provide Roblox with your parent’s email for the purposes of establishing a parental account, Roblox deletes your parent’s email within 24 hours if your parent does not complete the linking process.
Retention & Deletion · Company practice
Changing a 13+ account's birthday to under 13 makes Roblox keep only a hash of your emails
If you have a 13+ account and change your birthday to show you are under 13, Roblox saves a hash of your email address and any email addresses it previously collected from you. Roblox says the hash cannot be turned back into your email address or used to contact you, and will only be used to authenticate you in the future.
Supporting quotations
If you have a 13+ account and change your birthday to indicate you are under age 13, Roblox will save a hash of your email address and any email addresses previously collected from you. This hash cannot be reconstructed back into your email address or used to contact you, and will only be used to authenticate you in the future.
Not stated here
The policy does not say here what happens to the original email addresses after the hash is saved.
Retention & Deletion · Company practice
Roblox keeps data as long as needed for its purposes, even after you stop using Roblox, then deletes or de-identifies it
Roblox may keep your Personal Information for specific purposes as long as it needs it for those purposes, sometimes even after you stop using Roblox. When it no longer needs the information it will de-identify or delete it. Its stated reasons include keeping billing information and transaction histories to resolve billing disputes; keeping account history for customer service and to provide, improve and develop the service; keeping information that helps make the service safer, such as stopping bad actors; and keeping information for legal reasons such as legal defenses, audits, legitimate business purposes, enforcing agreements, exercising its rights or complying with legal obligations.
Supporting quotations
We may keep your Personal Information for specific purposes as long as we need it to fulfill those purposes, sometimes even if you’ve stopped using Roblox’s Services. When we no longer require your Personal Information, we will de-identify or delete the information.
We keep billing information and transaction histories so that we can resolve billing disputes or inquiries.
We keep user account history to solve any customer service issues and to provide, improve, and develop our service.
We may keep information if it will help us make our Service safer and more secure, such as to stop bad actors who try to misuse Roblox.
We may keep information for legal reasons, like establishing legal defenses, conducting audits, pursuing legitimate business purposes, enforcing our agreements, exercising our rights, or complying with legal obligations.
Not stated here
No specific retention periods are given here, apart from those stated elsewhere (for example persistent identifiers up to two years after deletion).
Retention & Deletion · Context
Content and virtual items you shared or sold can stay on Roblox with other users
Other users may keep publicly shared content and virtual items on the platform. For example, if you create a virtual shirt and sell it to another user, the shirt stays on the platform because that user now owns it.
Supporting quotations
Other users may keep publicly shared content and virtual items on our platform (e.g., if you create a virtual shirt and then sell it to another user, the virtual shirt will be kept on the platform because the other user now possesses it).