Service providers may process children's persistent identifiers under contract
Roblox uses service providers to support those internal operations, and in some cases they may process persistent identifiers from users under 13. Roblox says that processing is subject to contractual requirements and other measures to protect the security, confidentiality and integrity of the information.
Supporting quotations
Roblox relies on service providers to support the internal operations described above. In some cases, these entities may process persistent identifiers from users under the age of 13. Service providers’ processing of persistent identifiers to support these internal operations is subject to contractual requirements and other measures to protect the security, confidentiality, and integrity of the information.
Not stated here
The specific service providers for under-13 identifiers are not named in this part.
Sharing & Disclosure · User right or choice
With your consent, your phone number can be used to suggest you as a friend, possibly under your real name
Only with your explicit and informed consent, Roblox may use your phone number to recommend you as a friend to other Roblox users. You are shown under the contact name your friends saved on their devices, which may include your real name. You can avoid this by not turning the feature on, or turn it off at any time. The Discoverability feature may not be available in some locations.
Supporting quotations
Additionally, with your explicit and informed consent, we may use your phone number to recommend you as a friend to others using Roblox. You will be recommended with your contact name as stored on your friends’ devices, which may also include your real name. If you do not want us to use your phone number to be found by your friends on Roblox, please do not activate this feature or deactivate it at any time. Please note that the Discoverability feature may not be available in certain locations.
Sharing & Disclosure · Company practice
Payment processors such as PayPal handle transactions under their own privacy policies
Payment processors, for example PayPal, manage transactions under their own terms and privacy policies, which govern what Personal Information they keep and use; they may keep billing information, transaction details and purchase history to handle billing problems. Roblox receives certain purchase information to meet its legal obligations and support platform integrity, and may also collect your billing address for payment and integrity purposes.
Supporting quotations
Our payment processors (for example, PayPal) manage the transactions, which are subject to their terms and conditions and privacy policies.
Roblox receives certain information about purchases in order to fulfill our legal obligations and support the integrity of our platform. Roblox may also collect your billing address for payment and integrity purposes.
Not stated here
The processors' own privacy policies are not supplied.
Sharing & Disclosure · Company practice
Joining a Creator's virtual event (13 and older) shares your username, email and user ID with the event host
Creator Events are only for users 13 or older. If you join a virtual event hosted by a Creator, data such as your username, email and Roblox user ID may be shared with the company that hosts the event so you can log in. Your activity there is subject to that third-party platform's privacy policy as well as the Roblox Community Standards.
Supporting quotations
Creator Events (users 13 and older)
If you join a virtual event hosted by a Creator, data such as your username, email, and Roblox user ID may be shared with the company that hosts the events. This is done to allow you to log in to the experience. Your activity during a Creator Event is subject to the third party platform’s privacy policy as well as the Roblox Community Standards. Creator events are only available if you are 13 or older.
Not stated here
The event host's privacy policy is not supplied.
Sharing & Disclosure · Company practice
Trading or buying user-made items can share your username and transaction details with the creator or later owners
If you acquire a limited item, or purchase, share, trade or otherwise transact in user-generated content (UGC), Roblox may share information such as your username and transaction details with the UGC creator or subsequent owners.
Supporting quotations
share information like your username and transaction details to the UGC creator or subsequent owners, if you acquire a limited item if you purchase, share, trade, or otherwise engage in a transaction involving UGC,
Sharing & Disclosure · Company practice
Contests and promotions may need your contact details, and some laws require naming winners publicly
Competitions and promotions such as contests, sweepstakes, giveaways or prize draws may require contact information such as your name, email or phone number to be eligible for discounts or prizes. If you receive a gift card from a third-party provider, certain contact information may be shared with that provider and used under this policy and the provider's terms. In some places the law requires Roblox to publicly share information about winners.
Supporting quotations
If you take part in competitions or promotions, for example, contests, sweepstakes, giveaways or prize draws, those activities may require contact information such as your name, email, or phone number, to be eligible for discounts or prizes. If you receive a gift card provided by a third party provider, certain contact information may be shared with the provider and used in accordance with this Policy and the terms listed on the provider’s website. In some places in the world, the law requires us to publicly share information about the winners.
Sharing & Disclosure · Company commitment
Service providers get your data only to do work for Roblox and may not sell it
Roblox may share your information, including Personal Information, with companies it hires to perform services for it (third-party agents, contractors or service providers). Roblox says they may only use the information to complete the relevant tasks and not for any other purpose, including selling Personal Information, and that it makes sure they can look after the information properly. Personal Information collected through the SMS program will not be shared, sold or rented to third parties.
Supporting quotations
We may share your information, including Personal Information, with other companies (known as third-party agents, contractors, or service providers). We hire these companies to perform services for us. These companies are only allowed to use the information we share to complete the relevant tasks. They are not allowed to use the information we share for any other purpose, including selling Personal Information. We make sure that all companies that we share information with are capable of looking after the information properly. Personal Information collected through the SMS program, won’t be shared, sold or rented to third parties.
Sharing & Disclosure · Company practice
Named providers include Persona, Google, AppsFlyer, PayPal, console stores and AWS
Examples of services Roblox may rely on other companies for, with example companies: account integrity and security (Persona); analytics (Google LLC); user acquisition (AppsFlyer); community filtering and moderation; customer support; surveys and promotions (Reach3); billing and payment (Kount, Worldpay, PayPal, Incomm, Blackhawk, Google, Apple, Amazon, Windows Store, Xbox, PlayStation, Meta Quest, Xsolla); and hosting and content delivery (AWS, Equinix, CenturyLink, YouTube, Vimeo). These are examples, not a complete list.
Supporting quotations
Here are examples of the services that we might rely on other companies to provide, and examples of the companies that we are likely to share information with.
Account integrity and security services (e.g., Persona);
Analytics services (e.g., Google LLC);
User acquisition services (e.g., AppsFlyer);
Community filtering and moderation services;
Customer support services;
Surveys and promotions (e.g., Reach3);
Billing and payment services (e.g., Kount, Worldpay, PayPal, Incomm, Blackhawk, Google, Apple, Amazon, Windows Store, Xbox, Playstation, Meta Quest, Xsolla)
Experience creators see your username, user ID, game metrics, item transactions and region, but not your IP
Creators of the experiences you use or content you interact with will have access to your username, display name, user ID, game metrics, UGC transaction details and your regional location, which Roblox derives from your IP address. Roblox says it does not share your IP address itself with creators.
Supporting quotations
The creators of the experiences you use or content you interact with will have access to your username, display name, user ID, game metrics, UGC transaction details, and your regional location (which we base on your IP address). We do not share your IP address with the creators.
Sharing & Disclosure · Company practice
Creators get players' regional location to size their audience and meet local legal requirements
Roblox gives experience creators the regional location of players (derived from IP address, without sharing the IP address itself) so they can determine their player base and make sure their experiences meet the legal requirements of the country you live in.
Supporting quotations
your regional location (which we base on your IP address). We do not share your IP address with the creators.
We provide creators with the regional location of players to determine their player base and make sure their experiences meet the legal requirements of the country you live in.
Sharing & Disclosure · Permission or license
Roblox may share your data for court orders, agency requests including schools, crime prevention or legal rights
As permitted or required by law, Roblox may share your Personal Information if needed to comply with a judicial proceeding, court order or other legal process served on Roblox; if law enforcement, regulators or other public agencies (including schools or children's services) request it; if Roblox believes disclosure may prevent a crime; if Roblox believes it is necessary to protect its own or others' legal rights; or if a law requires it.
Supporting quotations
We may share your Personal Information, as permitted or required by law, if:
necessary to comply with a judicial proceeding, court order, or other legal process served on Roblox
law enforcement agencies, regulators, or other public agencies (including schools or children's services) request that we share it
we believe that disclosing the information may prevent a crime
we believe it is necessary to protect our legal rights or the legal rights of others
a law requires us to share it
Qualifications & exceptions
A request from an agency is listed as a ground on its own; the text does not say a legal order is needed for that ground, only that sharing must be permitted or required by law.
Sharing & Disclosure · Permission or license
Roblox may give your message contents to authorities for threats to life or under online safety laws
As permitted or required by law, Roblox may also share the contents of your communications: with law enforcement or judicial authorities to address a threat to a person's life or safety, including (but not limited to) where consistent with its obligations under Article 18 of the Digital Services Act; when required by law in response to governmental regulatory requests, such as information notices under the UK Online Safety Act; and when required by online safety laws such as the Australian Online Safety Act.
Supporting quotations
We may also share the contents of your communications as permitted or required by law:
to law enforcement or judicial authorities to address a threat to life or safety of a person, including (but not limited to) where consistent with Roblox's obligations under the Digital Services Act, Article 18
when required by law in response to governmental regulatory requests, such as Information notices issued under the UK Online Safety Act
when required by laws governing online safety, such as the Australian Online Safety Act
Qualifications & exceptions
The named laws are cited by Roblox; their content is not supplied here.
Sharing & Disclosure · Permission or license
Roblox may share your data or message contents when it believes this helps safety or a Terms investigation
Roblox may share your Personal Information or the contents of your communications if it believes sharing would help an investigation into public safety or a violation of its Terms of Use, protect the safety of Roblox users or others, reduce risk to user safety or security (or where collaborating with others is necessary to protect users), or help protect the security or integrity of its Services. This ground depends on Roblox's own belief and is not limited here to legal requests.
Supporting quotations
We may share your Personal Information or the contents of your communications if we believe that sharing would:
help an investigation into public safety or a violation of our Terms of Use
protect the safety of Roblox users or others
reduce risk to user safety or security, or if collaborating with others is necessary to protect users
help to protect the security or integrity of our Services
Not stated here
Who receives the information under this ground is not specified.
Sharing & Disclosure · Permission or license
Roblox may share your information to protect itself from legal liability
Roblox may share your information if it believes disclosure will let it take precautions against legal responsibility (liability) or protect its rights.
Supporting quotations
We may share your information if we believe that disclosing the information will allow us to take precautions against taking legal responsibility (liability) or to protect our rights.
Sharing & Disclosure · Permission or license
Your data can pass to a buyer in a merger or sale, or in bankruptcy
Roblox may hand over rights to access your information, including Personal Information, as part of a merger, acquisition, sale of assets or similar transaction, or as a business asset in an insolvency, bankruptcy or receivership. Where the law requires it, Roblox will notify you and ask for your consent to such sharing.
Supporting quotations
We may hand over rights to access your information, including Personal Information:
as part of a merger, acquisition, sale of assets, or similar transaction
if information is handed over as a business asset in an insolvency, bankruptcy, or receivership
Where required by law, we will notify you and ask you to consent to such sharing.
Sharing & Disclosure · Company practice
Roblox discloses contact and device identifiers and demographics to ad companies, but not for under-18 personalized ads
Roblox may disclose information collected from or about you to third-party advertising and ad measurement companies to select and display ads to you on Roblox or to measure and improve ad effectiveness. The data includes contact identifiers, characteristics or demographics, and device identifiers. In line with applicable law, Roblox gives users choices about this disclosure, which you can exercise in your account's privacy settings; depending on where you live you may have additional rights (see Section 7). Roblox says it does not disclose Personal Information of users under 18 to direct personalized advertising. When you interact with an ad on Roblox, it works with partners to produce aggregated measurement information.
Supporting quotations
Roblox may disclose information collected from or about you with third-party advertising companies and/or advertising measurement companies to select and display advertisements to you on Roblox, or measure and improve advertising effectiveness. In accordance with applicable law, we provide our users with choices about whether data is disclosed for this purpose. Data disclosed for this purpose includes:
Contact identifiers
Characteristics or demographics
Device identifiers
You can exercise choices about data processing for this purpose by visiting your account’s
Depending on where you live, you may have additional rights that apply. For region-specific information, please visit Section 7 of this policy. We do not disclose any Personal Information from users under 18 years old for the purposes of directing personalized advertising. When you interact with an ad on Roblox, we work with partners to produce aggregated measurement information.
Qualifications & exceptions
The under-18 limit covers disclosure for directing personalized advertising; it does not say no data of under-18 users reaches ad measurement partners.
Sharing & Disclosure · Company practice
If you reach Roblox through an ad elsewhere, ad companies may receive your IP address or device ID
Roblox partners with ad servers and ad networks to advertise Roblox on other websites and services. If you interact with content or reach Roblox through a link in an ad, Roblox or its service providers may give those advertising companies identifiers from your device, such as IP address or device ID.
Supporting quotations
We also partner with third-party advertising companies such as ad server companies and ad networks to advertise Roblox on other websites and services. If you interact with content or reach Roblox through a link in an advertisement, we or our service providers may give these third-party advertising companies identifiers from your device, such as an IP address or device ID.
Sharing & Disclosure · Company practice
Buying from a Commerce Provider on Roblox shares purchase details, and what you give them follows their policies
If you buy a Commerce Product directly from a Commerce Provider on Roblox, Roblox and the provider may exchange information about the purchase to fulfill it, including a transaction identifier that lets each confirm details such as whether the purchase was completed. Information you give directly to the Commerce Provider is collected independently by that provider and is governed by its own terms and policies.
Supporting quotations
If you directly interact with a Commerce Provider to purchase a Commerce Product(s) on Roblox, Roblox and the Commerce Provider may need to exchange information about your purchase in order to fulfill the transaction. This involves Roblox or the Commerce Provider creating a transaction identifier that allows each party to confirm certain information about the transaction, such as whether a purchase has been completed. Any information you provide directly to the Commerce Provider in order to complete a transaction is independently collected by the Commerce Provider and will be subject to the Commerce Provider’s applicable terms and policies.
Not stated here
"Commerce Provider" and "Commerce Product" are not defined in this text (undefined capitalized terms point to the separate Roblox Dictionary).
Sharing & Disclosure · Permission or license
Roblox may share data that does not identify you, from users of any age, for any business purpose
Roblox shares data that does not identify you in some circumstances, for example to comply with reporting requirements, for any business or marketing purpose, and to help it and others understand how, when and why users visit its sites and use Roblox. It may share such non-identifying data for all users regardless of age.
Supporting quotations
In some circumstances, we share data that doesn’t identify you, for example:
To comply with reporting requirements
For any business or marketing purposes
To help us and others understand how, when, and why users visit our sites and use Roblox.
We may share non-identifying data of all users regardless of their age.
Not stated here
The policy does not explain how data is made non-identifying.
Sharing & Disclosure · Company practice
Your data is stored in the US and may go to other countries with weaker privacy laws
Roblox is based in the United States and sends the information it collects to its servers in the US, where it stores and uses it. It may also transfer information to its other offices and to the third parties described in Section 4 ("When we share your information"), which may be outside your region, and its agents or contractors may use it. The data protection laws of the US or other countries may not be equivalent to yours. Roblox says it will take reasonable steps so your privacy rights stay protected and, where applicable law requires, relies on a valid international data transfer mechanism.
Supporting quotations
Roblox is based in the United States. We send information we collect from you to our secure servers in the U.S. where we store and use it.
We may also transfer information that we collect from you to our other offices and to the third parties mentioned in Section 4 of this Policy – these might be outside your region. Our agents or contractors may also use your information. The data protection laws of the U.S. or other countries may not be equivalent to those where you live.
Wherever we transfer your Personal Information, we will take reasonable steps so that your privacy rights continue to be protected. If required by applicable legislation, we rely on a valid international data transfer mechanism to enable cross-border data transfers.
Qualifications & exceptions
Section 4 is read as the fourth top-level part, "When we share your information"; numbers are not printed in this saved text.
Not stated here
The specific transfer mechanism is not named here.
Sharing & Disclosure · Company practice
EEA/UK/Swiss: Creator event hosts receive your username, email and user ID
For users in the EEA, UK or Switzerland, joining a Creator-hosted virtual event may share your username, email and Roblox user ID with the third-party platform hosting it so you can log in. Your activity there is subject to that platform's privacy policy and the Roblox Community Standards. The bases are contract (to join) and Roblox's legitimate interest in the security and integrity of its service.
Supporting quotations
If you join a virtual event hosted by a Creator, data such as your username, email, and Roblox user ID may be shared with the third-party platform that hosts events. Such data is used to allow you to log in to the experience. Your activity during a Creator Event is subject to the third party platform’s privacy policy as well as the
The bases for processing this Personal Information are Article 6 sec. 1 sent. 1 lit. b (“performance of a contract”) to join an event and f (“legitimate interest”) GDPR to support the security and integrity of our service.
Qualifications & exceptions
Applies to users in the EEA, UK or Switzerland (Section 7).
Sharing & Disclosure · Company practice
EEA/UK/Swiss: billing details and usernames may go to named service providers acting for Roblox
For users in the EEA, UK or Switzerland, Roblox may share users' information, including Personal Information such as billing information or usernames, with third-party agents, contractors or service providers hired to perform services on its behalf. Its illustrative list: account integrity and security (Persona), analytics (Google LLC), user acquisition (AppsFlyer), community filtering and moderation, customer support, surveys and promotions (Reach3), and billing and payment gateways (Kount, Worldpay, PayPal, Incomm, Blackhawk, Google, Apple, Amazon, Windows Store, Xbox, PlayStation, Meta Quest, Xsolla), followed by hosting and content delivery.
Supporting quotations
Roblox may share users’ information, including Personal Information like billing information or usernames, with our third-party agents, contractors, or service providers who are hired to perform services on Roblox’s behalf.
These providers may operate or support certain functions of the Service. Below is an illustrative list of functions for which we may use third party service providers and the names of the providers we may use to perform these functions:
Account Integrity and Security (e.g., Persona);
Analytics services (e.g., Google LLC);
User Acquisition services (e.g., AppsFlyer);
Community filtering and moderation services;
Customer support services;
Surveys and promotions (e.g., Reach3);
Billing services and payment gateway providers (e.g., Kount, Worldpay, PayPal, Incomm, Blackhawk, Google, Apple, Amazon, Windows Store, Xbox, Playstation, Meta Quest, Xsolla); and
Qualifications & exceptions
Applies to users in the EEA, UK or Switzerland (Section 7).
The list is illustrative, not complete.
Sharing & Disclosure · Company commitment
EEA/UK/Swiss: service providers, including hosting, act under data processing agreements and only for their tasks
For users in the EEA, UK or Switzerland, Roblox's service providers also include hosting and content delivery networks (for example AWS, Equinix, CenturyLink, YouTube, Vimeo). Transfers to and processing by service providers rest on GDPR Article 28 together with data processing agreements Roblox concluded with them. They may use the information only for the specific tasks they were hired for, consistent with this policy, and for no other purpose, and Roblox takes steps so that providers with access can protect it.
The legal basis for this data transfer and processing activity is Article 28 of GDPR in conjunction with the data processing agreements we concluded with respective third-party agents. These agents and contractors are only allowed to use the information shared with them only for the specific tasks they’ve been hired to do and consistent with this Privacy Policy, and for no other purposes. Roblox takes steps such that all service providers with access to Personal Information are capable of protecting the information we share with them.
Qualifications & exceptions
Applies to users in the EEA, UK or Switzerland (Section 7).
Sharing & Disclosure · Company practice
EEA/UK/Swiss: creators get your username, metrics and region partly so they can meet non-EEA legal duties
For users in the EEA, UK or Switzerland, creators of experiences and content you interact with can access your username, display name, user ID, game metrics, UGC transaction details and regional location (based on IP address, without the IP address itself), so they can determine their player base and meet the legal requirements of your country. The stated bases are contract, compliance with a legal obligation under EEA or Member State law, and legitimate interest; Roblox says it is the creators' legitimate interest to comply with non-EEA legal obligations.
Supporting quotations
Further, the creators of the experiences you use or content you interact with will have access to your username, display name, user ID, game metrics, UGC transaction details, and your regional location (which we base on your IP address). We do not share your IP address with the creators.
The legal basis for this processing activity is Article 6 sec. 1 sent. 1 lit. b (“performance of a contract”), Article 6 sec. 1 sent. 1 lit. c (“compliance with legal obligation”) in compliance with the respective EEA or Member State law and lit. f (“legitimate interest”) GDPR. It is the creators’ legitimate interest to comply with non-EEA legal obligations.
Qualifications & exceptions
Applies to users in the EEA, UK or Switzerland (Section 7).
Sharing & Disclosure · Company practice
EEA/UK/Swiss: Roblox discloses your data to advertisers only with consent; measurement uses identifiers on its interest
For users in the EEA, UK or Switzerland, Roblox may, in accordance with applicable law, disclose information collected from or about you to advertisers or ad measurement companies to select ads or measure and improve ad effectiveness. Disclosure to third-party advertising partners relies on your consent. Data disclosed for ad measurement includes contact identifiers and device identifiers and relies on Roblox's legitimate interest.
Supporting quotations
In accordance with applicable laws, Roblox may disclose information collected from or about you with advertisers and/or advertising measurement companies to select advertisements for you, or measure and improve advertising effectiveness. The legal basis for disclosing information to third party advertising partners is Article 6 sec. 1 sent. 1 lit. a(“consent”). Data disclosed for advertising measurement purposes includes contact identifiers and device identifiers. The legal basis for this processing activity is Article 6 sec. sent. 1 lit. f (“legitimate interest”).
Qualifications & exceptions
Applies to users in the EEA, UK or Switzerland (Section 7).
The general section describes this disclosure as subject to choices "in accordance with applicable law"; for these regions the stated basis is consent, except for measurement.
EEA/UK/Swiss: purchase details exchanged with Commerce Providers rest on contract
For users in the EEA, UK or Switzerland, when you buy a Commerce Product directly from a Commerce Provider on Roblox, Roblox and the provider may exchange purchase information, including a transaction identifier, to fulfil the transaction; the legal basis is performance of a contract.
Supporting quotations
If you directly interact with a Commerce Provider to purchase a Commerce Product(s) on Roblox, Roblox and the Commerce Provider may need to exchange information about your purchase in order to fulfill the transaction.
The legal basis for data sharing required to facilitate a purchase you make through a fulfillment partner is Article 6 sec. 1 sent. 1 lit. b (“performance of a contract”).
Qualifications & exceptions
Applies to users in the EEA, UK or Switzerland (Section 7).
Sharing & Disclosure · Permission or license
EEA/UK/Swiss: Roblox may give your data and messages to authorities on legal process or on its own safety assessment
For users in the EEA, UK or Switzerland, Roblox may disclose Personal Information, including the content of your communications, to comply with legal process such as court orders and subpoenas, for example under its obligations in Article 18 of the Digital Services Act and information notices under the UK Online Safety Act. It may also disclose Personal Information and content in response to requests from law enforcement, regulators or other public agencies (including schools or children's services) if it believes there is a risk to user safety or security, for legal reasons, or to prevent a crime, as described in Section 4. The stated bases are legal obligation under EEA or Member State law and legitimate interest, including Roblox's interest in complying with US law.
Supporting quotations
Legal disclosure
We may disclose Personal Information about you, including the content of your communications on the Service, to comply with legal process, including court orders and subpoenas, served on our Service, for example, where consistent with Roblox's obligations under the Digital Services Act, Article 18 and Information notices issued under the UK Online Safety Act. In addition, we also may disclose Personal Information about you, including content, in response to a request from law enforcement agencies, regulators, or other public agencies (including schools or children services), if we believe that there is a risk to user safety or security, for legal reasons, or to prevent a crime, in accordance with Section 4 of the Roblox Privacy and Cookie Policy. The legal basis for such disclosure is Article 6 sec. 1 sent. 1 lit. c (“compliance with legal obligation”) in compliance with the respective EEA or Member State law and lit. f (“legitimate interest”) GDPR. It is our legitimate interest to comply with the legal requirements of U.S. law.
Qualifications & exceptions
Applies to users in the EEA, UK or Switzerland (Section 7).
Section 4 is read as "When we share your information"; numbers are not printed in this saved text.
Sharing & Disclosure · Company commitment
EEA/UK/Swiss: your data is stored in the US, with Standard Contractual Clauses as an example safeguard
For users in the EEA, UK or Switzerland, Personal Information is sent to and stored on servers in the United States, and some agents and service providers are outside the EEA. US or other countries' data protection laws may not be as comprehensive as yours. Roblox says it will take reasonable steps to keep your privacy rights protected wherever it transfers data, for example by concluding the EU Standard Contractual Clauses with third parties.
Supporting quotations
Roblox is based in the U.S. Your Personal Information that we collect is sent to and stored on secure servers located in the United States of America. Such storage is necessary in order to process the information. Some of our agents and third-party service providers are located outside the European Economic Area, e.g. the United States. The data protection laws of the United States or other countries may not be as comprehensive or equivalent to those in your country of residence. Wherever we transfer your Personal Information, we will take reasonable steps so that your privacy rights continue to be protected, e.g. conclude the
with third parties.
Qualifications & exceptions
Applies to users in the EEA, UK or Switzerland (Section 7).
Sharing & Disclosure · Company commitment
Brazil: billing details and usernames may go to named service providers limited to their tasks
For users in Brazil, Roblox may share information, including Personal Information such as billing information or usernames, with third-party agents, contractors or service providers hired to work on its behalf. The illustrative list matches the other sections: account integrity and security (Persona), analytics (Google LLC), user acquisition (AppsFlyer), community filtering and moderation, customer support, surveys and promotions (Reach3), billing and payment gateways (Kount, Worldpay, PayPal, Incomm, Blackhawk, Google, Apple, Amazon, Windows Store, Xbox, PlayStation, Meta Quest, Xsolla) and hosting and content delivery (AWS, Equinix, CenturyLink, YouTube, Vimeo). They may use the information only for their specific tasks, consistent with this policy, and Roblox takes steps so they can protect it.
Supporting quotations
Roblox may share users’ information, including Personal Information like billing information or usernames, with our third-party agents, contractors, or service providers who are hired to perform services on Roblox’s behalf.
Below is an illustrative list of functions for which we may use third party service providers and the names of the providers we may use to perform these functions:
Account Integrity and Security (e.g., Persona);
Analytics services (e.g., Google LLC);
User Acquisition services (e.g., AppsFlyer);
Community filtering and moderation services;
Customer support services;
Surveys and promotions (e.g., Reach3);
Billing services and payment gateway providers (e.g., Kount, Worldpay, PayPal, Incomm, Blackhawk, Google, Apple, Amazon, Windows Store, Xbox, Playstation, Meta Quest, Xsolla); and
These agents and contractors are only allowed to use the information shared with them only for the specific tasks they’ve been hired to do and consistent with this Privacy Policy, and for no other purposes. Roblox takes steps such that all service providers with access to Personal Information are capable of protecting the information we share with them.
Qualifications & exceptions
Applies to users in Brazil (Section 7).
The list is illustrative, not complete.
Sharing & Disclosure · Company practice
Brazil: creators see your username, metrics and region; advertisers may get contact and device identifiers
For users in Brazil, creators of experiences you use can access your username, display name, user ID, game metrics, UGC transaction details and regional location (from your IP address, without the IP itself), to size their player base and meet your country's legal requirements. In accordance with applicable laws, Roblox may disclose information to advertisers and ad measurement companies to select ads or measure their effectiveness, including contact identifiers and device identifiers. Buying from a Commerce Provider on Roblox may involve exchanging purchase details and a transaction identifier.
Supporting quotations
Further, the creators of the experiences you use or content you interact with will have access to your username, display name, user ID, game metrics, UGC transaction details, and your regional location (which we base on your IP address). We do not share your IP address with the creators.
In accordance with applicable laws, Roblox may disclose information collected from or about you with advertisers and/or advertising measurement companies to select advertisements for you, or measure and improve advertising effectiveness. Data disclosed for this purpose includes contact identifiers and device identifiers.
If you directly interact with a Commerce Provider to purchase a Commerce Product(s) on Roblox, Roblox and the Commerce Provider may need to exchange information about your purchase in order to fulfill the transaction.
Qualifications & exceptions
Applies to users in Brazil (Section 7).
Unlike the EEA text, this Brazil text does not state that disclosure to advertisers requires consent.
Sharing & Disclosure · Permission or license
Brazil: Roblox may give your data and messages to authorities on legal process or its own safety assessment
For users in Brazil, Roblox may disclose Personal Information, including the content of your communications, to comply with legal process such as court orders and subpoenas, and in response to requests from law enforcement, regulators or other public agencies (including schools or children's services) if it believes there is a risk to user safety or security, for legal reasons, or to prevent a crime, as described in Section 4.
Supporting quotations
Legal disclosure
We may disclose Personal Information about you, including the content of your communications on the Service, to comply with legal process, including court orders and subpoenas, served on our Service. In addition, we also may disclose Personal Information about you, including content, in response to a request from law enforcement agencies, regulators, or other public agencies (including schools or children services), if we believe that there is a risk to user safety or security, for legal reasons, or to prevent a crime, in accordance with Section 4 of the Roblox Privacy and Cookie Policy.
Qualifications & exceptions
Applies to users in Brazil (Section 7).
Section 4 is read as "When we share your information"; numbers are not printed in this saved text.
Sharing & Disclosure · Company commitment
Brazil: your data is stored in the US under a transfer mechanism recognized by Brazilian law
For users in Brazil, Personal Information is sent to and stored on servers in the United States, and some agents and service providers are outside Brazil. US or other countries' data protection laws may not be as comprehensive as Brazil's. Roblox says it will take reasonable steps to rely on a legitimate international transfer mechanism as set out in Brazilian data protection laws.
Supporting quotations
Roblox is based in the U.S. Your Personal Information that we collect is sent to and stored on secure servers located in the United States of America.
Some of our agents and third-party service providers are located outside of Brazil, e.g. the United States. The data protection laws of the United States or other countries may not be as comprehensive or equivalent to those in Brazil. Wherever we transfer your Personal Information, we will take reasonable steps so that we rely on a legitimate international transfer mechanism, as set out in Brazilian data protection laws.