Roblox Privacy and Cookie Policy

Roblox · agreement dated November 1, 2026 · Official agreement

Read the agreement

141 of 141 cards

Legal Rights & Agreement Rules · Context

This text is dated effective November 1, 2026, after it was captured

The page is headed with an effective date of November 1, 2026 and says Roblox is updating its Privacy and Cookie Policy effective that date. It also links separately to "the upcoming changes" and to "the full Privacy Policy". This copy was saved on October 5, 2026, before that date, so the text describes the policy as Roblox says it applies from November 1, 2026; whether every part of it was already in force when saved is not established.

Supporting quotations

Effective Date: November 1, 2026
effective November 1, 2026, to reflect certain changes we are making on Roblox.
to review the upcoming changes.
You can also find the full Privacy Policy here.

Qualifications & exceptions

  • The linked pages for the upcoming changes and the full policy are not part of this saved copy.

Not stated here

  • Whether the body text below is the version in force before November 1, 2026 or only from that date.

Legal Rights & Agreement Rules · Context

The November 2026 update adds regional feature limits, researcher data and sharing with authorities

Roblox summarizes its November 1, 2026 update as three additions: language about regional variation in access to certain features, information about collecting data from researchers, and language about its practices for sharing information with authorities. This is Roblox's own high-level summary; the details appear (if at all) in the policy body.

Supporting quotations

Summary of Recent Changes
We added language describing regional variation for access to certain features.
We added information about data collection from researchers.
We added language describing our practices for sharing information with authorities.

Legal Rights & Agreement Rules · Context

The policy covers all Roblox players and creators of any age, and parents of users under 13

Roblox says this policy applies to anyone who makes or plays games in Roblox experiences, whatever their age and wherever they live, and to parents or guardians of users under 13. It covers use of roblox.com websites, Roblox mobile, virtual reality and console apps, the Roblox Player and Roblox Studio, and other Roblox features the policy describes.

Supporting quotations

If you make or play games in Roblox experiences, this Privacy Policy is for you, whatever your age and wherever you live. It’s also for parents or guardians of users under 13 years old.
websites with a roblox.com address
our mobile, virtual reality and console apps
the Roblox Player and the Roblox Studio
Other Roblox features described in this policy

Legal Rights & Agreement Rules · Restriction or exception

Location-specific terms in Section 7 override the general sections when they conflict

Your rights and choices over your Personal Information can differ depending on where you live. If the general information in Sections 1-5 conflicts with the location-specific information in Section 7 ("Additional information based on where you live"), Section 7 controls. So a general statement elsewhere in the policy may not be the rule that applies to you in a region Section 7 covers.

Supporting quotations

Depending on where you live, you may have different rights or choices for managing your Personal Information, which this Policy will describe later on. In the event of a conflict between the information in Sections 1-5 of this Policy and the location-specific information in Section 7, the information in Section 7 shall prevail.

Qualifications & exceptions

  • Section numbers are not printed in this saved text; Section 7 is read as the seventh top-level part, "Additional information based on where you live".

Cross-references

Use & Processing · Context

The policy explains how Roblox collects, stores and shares information that identifies you

Roblox says the policy describes your rights over your Personal Information and explains when and how Roblox uses information about you, including how it collects, records, organizes, stores and shares it. It frames this as information that can identify you, such as your name, where you live and your email address.

Supporting quotations

This policy describes the rights you have regarding your Personal Information.
In this Privacy Policy, we’ll also tell you when and how we use your information about you – including how we collect, record, organize, store and share it.

Qualifications & exceptions

  • The page also says "you can control what happens to the information"; the specific controls available depend on the later sections and on where you live.

Legal Rights & Agreement Rules · Restriction or exception

The policy stops applying on other sites or apps, even ones linked from Roblox

Once you leave Roblox services this policy no longer applies. Roblox says it is not responsible for what you see on other websites or apps or for their privacy policies, even if you reached them through a link on Roblox. Roblox may, but is not promised to, show a message telling you that you are leaving Roblox.

Supporting quotations

But if you leave our services, this Privacy Policy no longer applies. We’re not responsible for what you see on other websites or apps or for their privacy policies, even if you’ve linked to them from our website or app. When you go to another site or app, we may show you a message telling you that you’re leaving Roblox.

Account & Service Control · Procedure

Privacy questions go through the support form, phone, mail or privacy@roblox.com; parents file for under-13s

You can send privacy questions or requests about your Personal Information through Roblox's Customer Support Form. If you are under 13, your parent or guardian should fill out the form. In the US you can also phone (888) 858-BLOX, write to the Roblox Privacy Manager at 3150 S. Delaware St., San Mateo, California 94403, or email privacy@roblox.com.

Supporting quotations

To reach us with questions or requests regarding your Personal Information, our information about how to contact us is included below.
If you’re under 13 years old, please have your parent or guardian fill out the form.
US: Phone: (888) 858 - BLOX Write to us at: Roblox Corporation Attn: Roblox Privacy Manager Address: 3150 S. Delaware St. San Mateo, California, 94403 privacy@roblox.com

Legal Rights & Agreement Rules · Procedure

EEA, UK, Swiss and Brazilian users have named representatives and data protection officers

If you are in the EEA, the UK or Switzerland, you can contact Roblox's GDPR representative at roblox@gdpr-rep.com (DP-Dock GmbH in Hamburg for the EEA; DP Data Protection Services UK Ltd. in London for the UK). Roblox's EU data protection officer is DP Dock DPO Services GmbH in Kiel, reachable at roblox@dp-officer.com. Users in Brazil can email Roblox's Brazilian Data Protection Officer at dpo.roblox@leonardi.adv.br.

Supporting quotations

If you’re in the European Economic Area (EEA), the United Kingdom, or Switzerland: contact roblox@gdpr-rep.com
EEA: DP-Dock GmbH Attn: Roblox Corporation Ballindamm 39 / Ecke Jungfernstieg 20095 Hamburg, Germany
UK: DP Data Protection Services UK Ltd. Attn: Roblox Corporation 16 Great Queen Street Covent Garden, London, WC2B 5AH, United Kingdom
Our data protection officer in the EU according to Art. 37 GDPR can be reached via: DP Dock DPO Services GmbH
Grüffkamp 10 24159 Kiel, Germany roblox@dp-officer.com
If you’re in Brazil, contact our Brazilian Data Protection Officer by emailing dpo.roblox@leonardi.adv.br.

Legal Rights & Agreement Rules · Context

Korean and US state residents have separate privacy addenda not included here

Users in the Republic of Korea are pointed to a separate Privacy Policy Addendum for Korea. Users in the United States are told additional rules may apply depending on their state, and are pointed to a separate US State Privacy Policy Addendum for their state-law rights. Those addenda are linked, not included in this saved text.

Supporting quotations

If you’re in Korea, more information is located in the
If you’re in the United States, additional rules may apply depending on the state you live in. To learn more about the rights available to you under US state laws please visit the

Not stated here

  • The contents of the Korea addendum and the US State Privacy Policy Addendum are not supplied.

Account & Service Control · Context

A "Child" is a user under 13; a "Minor" is under the age of majority where they live

The policy uses two different age groups. "Children" or "Child" means any user under 13. "Minor" or "minor user" means a user under the legal age of majority in their jurisdiction or state of residence, which can be older than 13 and varies by place. Rules stated for children therefore do not automatically cover all minors, and the reverse.

Supporting quotations

“Children” or “Child” means any user under the age of 13
“Minor” or “minor user” means a user of the Services who is under the legal age of majority in their jurisdiction or state of residence

Use & Processing · Context

"Personal Information" and "Processing" are defined broadly

"Personal Information" means any information relating to a person who can be identified directly or indirectly, for example by a name, identification number, location data or an online identifier. "Processing" means any operation on Personal Information, such as collecting, recording, organizing, structuring, storing, adapting or disclosing or otherwise using it. "Platform" means the Roblox platform.

Supporting quotations

“Personal Information” means any information relating to a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, or an online identifier
“Platform” means our Roblox platform
“Processing” means any operation which is performed on Personal Information, such as collecting, recording, organizing, structuring, storing, adapting or making any kind of disclosure or other use

Legal Rights & Agreement Rules · Context

"Services" covers Roblox sites and apps and any service where an authorized link to this policy is posted

"Service" means any service or application Roblox offers, such as building Platform experiences, connecting with others and using content made by you and other users. It includes roblox.com websites, Roblox mobile, virtual reality and console apps, the Roblox Player and Roblox Studio, and other Roblox websites, products, software, applications, content, data feeds and services on which an authorized link to this policy is posted.

Supporting quotations

“Service” means any service or application offered by Roblox, such as allowing users to develop Platform experiences, connect with others, and use content created by you and other users. It includes websites on the roblox.com domain, our Roblox mobile, virtual reality and consoles, the Roblox Player, the Roblox Studio, and our other websites, products, software, applications, content, data feeds and other services on which an authorized link to this Policy is posted

Legal Rights & Agreement Rules · Restriction or exception

Undefined terms come from the Roblox Dictionary, and the English version controls over translations

Any capitalized term this policy does not define takes the meaning given in the separate Roblox Dictionary, which is linked but not included here. If an English version and a translation of this policy materially conflict, or appear to, the English version controls.

Supporting quotations

Any other capitalized term that is not defined in this Policy is defined and has the meaning set out the
In the event of a material or perceived conflict between the English version of this Policy and translations into other languages, the English version shall control.

Not stated here

  • The Roblox Dictionary definitions are not supplied.

Account & Service Control · Restriction or exception

Children under 13 should have a parent's permission, and some features are restricted for them

If you are under 13, Roblox restricts your access to certain features to protect your Personal Information, and asks you to get permission from a parent or guardian before using Roblox; you should not use the Services without it. Roblox recommends that parents and guardians supervise children whenever they interact on Roblox and points to its safety features page.

Supporting quotations

If you’re under 13 years old, your access to certain features will be restricted in the interest of protecting your Personal Information.
If you’re under 13 years old, please get permission from your parent or guardian to use Roblox. You shouldn’t use our Services without their go-ahead.
Parents and guardians – we recommend you supervise your child whenever they’re interacting on Roblox.

Not stated here

  • The policy does not say here how, or whether, Roblox checks that permission was given.

Account & Service Control · User right or choice

Any user can limit who interacts with them or restrict the account to turn off chat

Whatever your age, Roblox communication settings let you control who can interact with you, for example only friends or no one at all. You can also restrict your account, which turns off chat and public commenting and limits the account to certain filtered experiences.

Supporting quotations

No matter how old you are, Roblox communication settings allow you to control who can interact with you, for example, by only allowing interactions with friends or not allowing any interactions at all. You can also restrict your account, which turns off chat and public commenting and limits an account to certain filtered experiences on Roblox.

Account & Service Control · Company commitment

Under-13 accounts get stronger privacy settings, and ads are not personalized until 18

Accounts of users under 13 are automatically set to stronger privacy settings, in which some features such as personalized advertising and alerts are turned off. At 13 a user can turn on additional features meant for ages 13 and up, but Roblox says it will not personalize ads until the user is 18.

Supporting quotations

If you’re under 13 years old, we’ll automatically set your account to have stronger privacy settings. While in this privacy mode, some features like personalized advertising and alerts are disabled. When you turn 13, you will be able to enable additional features that are more appropriate for users ages 13 and up (though we won’t personalize ads until you’re 18).

Qualifications & exceptions

  • "Some features" are disabled; personalized advertising and alerts are given as examples, not a complete list.

Data Access & Collection · Company practice

Children signing up give a username, password and birth date, and may add gender

When a child under 13 creates an account, Roblox requires a username (to create the account and run the service; Roblox says it does not use it to identify the child outside Roblox), a password (to log in) and a date of birth (to apply default settings for the child's age). Gender is optional and used to customize the experience. Roblox describes this signup information as non-personal information as defined by COPPA, the US children's privacy law.

Supporting quotations

If you’re under 13 years old and create an account, we ask for some information (which is non-personal information, as defined by COPPA) to let you use Roblox.
your username (required). We need this to create your account and run the Roblox Service. We don’t use your username to identify you outside of Roblox
your password (required). We need this to log you in to your account and to run the Roblox Service
your date of birth (required). We’ll use this information to make sure your account has certain default settings intended for your age
your gender (optional). We will use this information to customize your experience

Qualifications & exceptions

  • The COPPA label is Roblox's characterization; this policy does not supply the law's definition.

Data Access & Collection · Company practice

A child may add a parent's email, which Roblox may use to log in and contact the parent

For extra account security and parental controls, a child can give a parent's or guardian's email address in account settings or during logout. It is encouraged but not required to create an account. Roblox says it collects parent emails for the security and integrity of the account and the platform, and may use the parent's email to log the child in and to contact the parent about the child's account, such as asking them to review it.

Supporting quotations

For additional account security and parental controls, you have the option to provide a parent’s or guardian’s email address in account settings or during logout. Children are encouraged to provide a parent’s email address, but are not required to do so to create an account. Parent email addresses are collected for the security and integrity of your account and the Roblox platform. We may use your parent’s email address to log you in. We may also use your parent’s email address to communicate with them about your account, like asking them to review your account.

Data Access & Collection · Company practice

Roblox collects children's IP addresses and device IDs for internal operations, including contextual ads

When children (users under 13) sign up, Roblox also collects persistent identifiers, such as IP address and unique device identifiers, which can recognize the child, the device or a household device. Roblox uses these and the signup information for listed internal operations: running and analyzing Roblox, network communications, authenticating users or personalizing content, serving contextual advertising (including capping how often ads appear), security and integrity, and legal or regulatory compliance. Roblox says it uses technical, contractual and other measures so these identifiers are not used for other purposes.

Supporting quotations

“Children” or “Child” means any user under the age of 13
When children sign up for Roblox, we also collect certain types of personal information called persistent identifiers for internal operations and to provide you and other users with Services.
Persistent identifiers are data like IP Address and unique device identifiers that are required for you to be able to connect your device to Roblox. Persistent identifiers can be used to recognize you, your device, or your household device.
Maintaining or analyzing the functioning of Roblox;
Performing network communications;
Authenticating users of, or personalizing the content on, Roblox;
Serving contextual advertising, including capping the frequency of ads;
Protecting the security or integrity of Roblox;
Ensuring legal or regulatory compliance.
Roblox implements technical, contractual, and other measures to ensure that persistent identifiers are not used for purposes other than those listed above.

Qualifications & exceptions

  • Contextual advertising is listed; personalized advertising is turned off for under-13 accounts.

Sharing & Disclosure · Company practice

Service providers may process children's persistent identifiers under contract

Roblox uses service providers to support those internal operations, and in some cases they may process persistent identifiers from users under 13. Roblox says that processing is subject to contractual requirements and other measures to protect the security, confidentiality and integrity of the information.

Supporting quotations

Roblox relies on service providers to support the internal operations described above. In some cases, these entities may process persistent identifiers from users under the age of 13. Service providers’ processing of persistent identifiers to support these internal operations is subject to contractual requirements and other measures to protect the security, confidentiality, and integrity of the information.

Not stated here

  • The specific service providers for under-13 identifiers are not named in this part.

Retention & Deletion · Company commitment

If a child gives more Personal Information than needed, Roblox may delete it unless law requires keeping it

Roblox says it will only ask users under 13 for the information needed to set up or protect their account. If a child gives more Personal Information, Roblox lists responses that include deleting the additional information it collected, unless the law requires keeping it. The list continues with other options (cancelling the account or turning on age-appropriate protections), joined by "or", so deletion is one of several listed responses.

Supporting quotations

If you’re under 13 years old, we will only ask you to tell us the information we need to set up or protect your account. If you give us more of your Personal Information, we will:
delete any additional Personal Information we’ve collected from you (unless the law requires us to keep it),

Account & Service Control · Company practice

For extra information from a child, Roblox may instead cancel the account or turn on protections

The responses Roblox lists when a user under 13 gives more Personal Information than needed are alternatives joined by "or": delete the extra information (unless law requires keeping it), cancel the account, or turn on age-appropriate protections on the account. The policy does not say how Roblox chooses among them.

Supporting quotations

delete any additional Personal Information we’ve collected from you (unless the law requires us to keep it),
cancel your account, or
turn on age-appropriate protections on your account

Not stated here

  • How Roblox chooses which response applies.

Use & Processing · Company practice

Roblox filters public posts to remove personal details, phishing and adult content, but filtering is imperfect

When users post in public and comment areas such as chat, forums, group walls and personal posts, Roblox filters the content and removes Personal Information like addresses, emails and phone numbers, phishing attempts, and offensive words or adult or suggestive content. It uses human and automated checking to the best of its ability, and says these systems are not 100% effective.

Supporting quotations

When users publish anything in our public and comment areas (for example, chat, forums, group walls, personal posts), we filter it and remove:
Personal Information like addresses, emails, phone numbers
attempts at phishing (this is when someone tries to trick you into giving out Personal Information)
offensive words, adult or suggestive content
To provide the filtering above, we use human and automated checking to the best of our ability based on available technology – but like all filtering technology, these systems aren’t 100% effective.

Retention & Deletion · Company practice

Roblox keeps data only as long as reasonably necessary, but may keep it longer for legal reasons

Roblox says its retention policy is designed to limit retention to what is reasonably necessary for the purposes the information was collected for and to keep persistent identifiers from being retained indefinitely, backed by access controls, purpose-based tagging, employee training and data segregation. Persistent identifiers may be kept for different periods depending on Roblox's business needs. Roblox may also keep information longer when legal or regulatory compliance requires it. This appears in the part of the policy addressed to users under 13.

Supporting quotations

Roblox maintains a retention policy designed to limit data retention to what is reasonably necessary to fulfill the specific purposes for which we collected your information and to prevent persistent identifiers from being retained indefinitely.
Roblox may retain the persistent identifiers that we collect from you for different periods of time based on our specific business needs, which include:
Roblox may also retain information for longer periods if we are required to do so for legal or regulatory compliance.

Retention & Deletion · Company practice

Device and network identifiers are kept while you have an account and up to two years after deletion

To maintain your account, Roblox stores persistent identifiers for as long as you have an account. When you delete your account, Roblox starts permanent deletion of data in its systems, but for safety and security purposes, such as preventing bots, it may process persistent identifiers for up to two years after deletion.

Supporting quotations

Providing the Roblox Services, including account maintenance and security
In order to maintain your account (e.g., remember your account’s configuration and activity history), Roblox stores persistent identifiers for the amount of time you have an account. When you delete your account, Roblox initiates permanent deletion of data in our systems. For safety and security purposes (e.g., bot prevention), Roblox may process persistent identifiers for up to two years after account deletion.

Data Access & Collection · Company practice

Roblox may take a selfie to check your age, and deletes age-check images once the check is done

To assess users' ages, Roblox may collect information including images such as a selfie for age assurance. Information collected for that purpose, such as images taken for facial age estimation, is deleted once the age assurance process is complete. More detail is in a separate Facial Media Capture notice that is linked but not included here.

Supporting quotations

To assess user ages, Roblox may collect information about you, including images such as a selfie, to perform age assurance. Information collected to assess user ages, such as images taken to perform facial age estimation, is deleted once the age assurance process is complete.

Not stated here

  • The linked Facial Media Capture notice is not supplied.

Account & Service Control · User right or choice

Parents can ask Roblox to review, delete or stop collecting their child's information

You can ask Roblox to make changes to your child's account, or to let you review, delete, or prevent further collection or use of Personal Information from you or your child. Requests go through Roblox's Customer Support Form.

Supporting quotations

You can request that Roblox make changes to your child’s account or allow you to review, delete, or prevent the further collection or use of Personal Information from you or your child. To make a request, please fill out our

Legal Rights & Agreement Rules · Company commitment

Roblox says it complies with the US children's privacy law COPPA

For users in the US, Roblox states that it complies with the Children's Online Privacy Protection Act (COPPA) and points to the US Federal Trade Commission's COPPA page and a kidSAFE Seal Program guide for more information.

Supporting quotations

In the US and want to know more? We comply with the Children’s Online Privacy Protection Act (“COPPA”).
You can also learn more about COPPA by looking at this simple guide from the kidSAFE Seal Program

Qualifications & exceptions

  • This is Roblox's own statement of compliance, not an independent finding.

Data Access & Collection · Company practice

Creating an account requires a username, password and birthday; gender is optional

To set up a Roblox account, Roblox asks you to create a unique username and password and to give your birthday and, optionally, your gender, so it can customize your experience. Eligible users may set a display name that contains certain Personal Information. Roblox says it does not use your username to identify you outside your activity on Roblox.

Supporting quotations

We’ll ask you to create a unique username and password so you can log into your account and access features on Roblox. We also ask you for your birthday and gender (gender is optional) so we can customize your experience on Roblox. Eligible users may set their account's display name to contain certain Personal Information.
We don’t use your username to identify you outside of your activity on Roblox.

Not stated here

  • Which users are "eligible" to put Personal Information in a display name is not explained here.

Account & Service Control · Restriction or exception

Do not put your real name in your username, and share your password only with a parent

Roblox sets three signup rules: do not use your own name or other Personal Information in your username; do not pick an easy-to-guess password; and you may share your password with your parent or guardian but not with anyone else.

Supporting quotations

Do not use your own name or other Personal Information in your username.
Do not pick a password that’s easy to guess.
You may share your password with your parent or guardian, but do not share it with others.

Data Access & Collection · Company practice

Your email is mainly for security and password resets; changes trigger a notice to the old address

After creating an account you can add your email address (or a parent's or guardian's if you are under 13) to reset your password. Roblox may ask for your email to verify your identity or enable additional features, and says the main reason it needs one is security, to check accounts are authentic. You can change it at any time; Roblox then sends a notification to the previous address.

Supporting quotations

Once you have an account, you can add your email address (or your parents’ or guardians’ email address if you are under 13) in case you need to reset your password.
We might ask for your email to verify your identity or enable additional features. The main reason we need an email address is for security because it is how we check to make sure accounts are authentic. You can change your email address anytime you want – if an email address is changed, we’ll send a notification email to the address that you used before.

Retention & Deletion · Company practice

Changing a 13+ account's birthday to under 13 makes Roblox keep only a hash of your emails

If you have a 13+ account and change your birthday to show you are under 13, Roblox saves a hash of your email address and any email addresses it previously collected from you. Roblox says the hash cannot be turned back into your email address or used to contact you, and will only be used to authenticate you in the future.

Supporting quotations

If you have a 13+ account and change your birthday to indicate you are under age 13, Roblox will save a hash of your email address and any email addresses previously collected from you. This hash cannot be reconstructed back into your email address or used to contact you, and will only be used to authenticate you in the future.

Not stated here

  • The policy does not say here what happens to the original email addresses after the hash is saved.

Data Access & Collection · Permission or license

An optional phone number is used for security and login, and your carrier may share device details with Roblox

Giving a phone number is optional. If you do, Roblox texts you to confirm it before you can log in and uses it for security and account access, including password recovery, accessing a feature or logging in on mobile. By giving it you authorize your wireless carrier to use or disclose information about your account and wireless device, if available, to Roblox or its service provider for the length of your business relationship, solely to help identify you or your device and to prevent fraud.

Supporting quotations

If you choose to give a phone number, we’ll send you a text message asking you to confirm your number before you can log in. We will use your phone number for security and account access, including to recover a lost or forgotten password, access a feature, or log in via mobile. You authorize your wireless carrier to use or disclose information about your account and your wireless device, if available, to Roblox or its service provider for the duration of your business relationship, solely to help them identify you or your wireless device and to prevent fraud.

Sharing & Disclosure · User right or choice

With your consent, your phone number can be used to suggest you as a friend, possibly under your real name

Only with your explicit and informed consent, Roblox may use your phone number to recommend you as a friend to other Roblox users. You are shown under the contact name your friends saved on their devices, which may include your real name. You can avoid this by not turning the feature on, or turn it off at any time. The Discoverability feature may not be available in some locations.

Supporting quotations

Additionally, with your explicit and informed consent, we may use your phone number to recommend you as a friend to others using Roblox. You will be recommended with your contact name as stored on your friends’ devices, which may also include your real name. If you do not want us to use your phone number to be found by your friends on Roblox, please do not activate this feature or deactivate it at any time. Please note that the Discoverability feature may not be available in certain locations.

Charges & Financial Obligations · Company practice

Buying Robux or subscriptions requires the buyer's name, billing address, contact details and payment information

When you buy Robux or premium subscriptions, you (or your parent or guardian if you are under 13) must give billing information, including the name of the person responsible for the purchase, their billing address and contact details such as email or phone, and credit card or other payment information.

Supporting quotations

When you pay, you (or your parent or guardian if you’re under 13) will have to give billing information, including Personal Information such as:
Name of the person responsible for buying Robux
Their billing address and contact details, like email or phone number
credit card or other payment information

Sharing & Disclosure · Company practice

Payment processors such as PayPal handle transactions under their own privacy policies

Payment processors, for example PayPal, manage transactions under their own terms and privacy policies, which govern what Personal Information they keep and use; they may keep billing information, transaction details and purchase history to handle billing problems. Roblox receives certain purchase information to meet its legal obligations and support platform integrity, and may also collect your billing address for payment and integrity purposes.

Supporting quotations

Our payment processors (for example, PayPal) manage the transactions, which are subject to their terms and conditions and privacy policies.
Roblox receives certain information about purchases in order to fulfill our legal obligations and support the integrity of our platform. Roblox may also collect your billing address for payment and integrity purposes.

Not stated here

  • The processors' own privacy policies are not supplied.

Charges & Financial Obligations · Company practice

Saved card details stay with the payment processor; buying Robux for someone else adds your contact details

You can choose to save billing information with a payment processor for future purchases; Roblox says it then does not store or have access to your full saved billing information. If you buy Robux on behalf of another Roblox user, Roblox collects your contact information, such as email or phone number, to communicate with you about the transaction.

Supporting quotations

You can choose to save your billing information with one of our payment processors to make future purchases easier, in that case, Roblox does not store or have access to your full saved billing information. If you purchase Robux on behalf of another Roblox user, we collect contact information, such as email or phone number, in order to communicate with you about the transaction.

Qualifications & exceptions

  • "Full" saved billing information: Roblox may still receive partial purchase information.

Use & Processing · Company practice

Roblox monitors your chats and posts and may change or remove content; other users can capture what you post

Content you post on Roblox, including chat and audio (audio features are for users 13 and older), may be captured or shared by other users. Roblox monitors what you say and write to check it meets its Community Standards and Terms of Use, and may change or remove content it believes is inappropriate, includes Personal Information, or is otherwise unsuitable. Roblox may also use this data to improve your experience and to respond to account requests from you or your parent or legal guardian.

Supporting quotations

Users who are age 13 or older can also use audio features on Roblox. Content you post, including your chat or audio, may be captured or shared by other users. We monitor what you say and write to check that it meets our Community Standards and complies with our Terms of Use. If we find that the content doesn’t meet our standards, for example, if we believe that it is inappropriate, includes Personal Information, or is not suitable for users to have on Roblox, we have the right to change or remove it.
We also may use this data to help us provide a better experience on Roblox and to respond to requests about your account from you or your parent or legal guardian.

Use & Processing · Permission or license

Where the law allows, Roblox may use what users post to train and improve its content filters

Where the law allows it, Roblox may use content you and other users have posted for training or to improve how it filters content on the platform; it states the aim is to increase safety.

Supporting quotations

Where the law allows us to, we may use the content you and other users have posted for training or to help us to improve the way we filter content on our platform. Our aim is to increase safety on our platform.

Data Access & Collection · Company practice

Support requests collect your email and username; under-13 replies go to a parent

When you contact customer support, report a problem, ask for technical support or send questions or comments, Roblox collects your email address (or a parent's or guardian's if you are under 13), your username and any other details you give. It uses them to answer and help you; for users under 13 it sends responses to the parent or guardian. Roblox keeps technical support records for a limited time for internal use only, such as answering later questions about your account.

Supporting quotations

We collect your email address (or your parents’ or guardians’ email address if you are under 13), username, and any other details you give when you:
contact customer support
report a problem
ask for technical support
ask us questions or give us comments
We use this information to answer your questions and to give you the support or help you ask for. For users under 13, we communicate with your parent or guardian when sending our responses. We retain records of technical support questions for a limited time for internal use only, such as to answer additional questions about your account.

Not stated here

  • The "limited time" for support records is not specified.

Use & Processing · Company practice

Some features use your email and verified date of birth to decide access

Roblox may use Personal Information when you use certain features, and to provide access to certain features may use your email address and other information you provide, such as your verified date of birth.

Supporting quotations

We may use Personal Information when you use certain Roblox features. To provide access to certain features, we may use your email address and other information you provide to us, such as your verified date of birth.

Account & Service Control · Context

Deleting your Roblox account can cut off other sites you signed into with your Roblox ID

If you use your Roblox ID to sign in to a non-Roblox website or service and later delete your Roblox account, you may lose access to that website or service.

Supporting quotations

If you use your Roblox ID to sign in to a non-Roblox website or service, and later delete your Roblox account, you may lose access to that website or service.

Data Access & Collection · Company practice

If you use voice features (13 and older), Roblox records and keeps audio for voice chat, safety and training

Audio features are for users 13 and older. If you use them, Roblox will monitor, collect, use and store audio captured through your device: to enable voice chat; to make voice services safer, including detecting and combating abuse and other harmful activity; in accordance with applicable law, to inform training and product improvement; and in connection with screen recordings Creators and users make through the Services. Region-specific legal information is in Section 7.

Supporting quotations

Audio features (users 13 and older)
If you use Roblox’s audio features, we will monitor, collect, use, and store audio captured through your device:
to enable voice chat,
to make our voice-related services safer, including to detect and combat abuse and other harmful activity on our Services,
in accordance with applicable law, to inform training and product improvement, and
in connection with screen recordings that Creators and Users produce through the Services.
For more information about laws that apply in your region, please visit Section 7 of this policy.

Qualifications & exceptions

  • Training use is limited to what applicable law permits.

Not stated here

  • How long audio is stored is not stated here.

Data Access & Collection · User right or choice

Users 13 and older can opt in to location services, which track geolocation through a device identifier

Location-based Services are only for users 13 or older who choose them. If you agree, Roblox may collect and track geolocation information to offer services that depend on knowing where you are. It does this using an identifier on your device or browser so it can recognize you each time you return. To stop location collection you can change your device settings, stop using the Service or uninstall the mobile apps.

Supporting quotations

Location-based Services (users 13 and older)
You can choose to use location-based Services if you’re 13 or older. If you agree, we may collect and track geolocation information so that we can offer Services that depend on us knowing where you are.
We collect this information by using an identifier on your device or browser so that we can recognize you each time you return. To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.

Data Access & Collection · Company commitment

On VR platforms Roblox uses your physical movements in the experience but says it does not store them

If you join Roblox experiences on a VR platform, Roblox collects your physical movement information to use in the experience. Roblox says this information is only used to provide the experience and is not stored.

Supporting quotations

If you join our experiences on a VR platform, we collect your physical movement information so that we can use it in the experience. This information is only used to provide the experience.We do not store this information.

Data Access & Collection · Company practice

Camera features and photo uploads (13 and older) are stored for the feature and checked for safety

For users 13 and older, if you use features that need your camera or let you upload content containing your Personal Information, such as photos, Roblox collects, processes and stores that content to accomplish the feature's purpose, including processing it for safety. Video used to generate animation key frames is processed on your device and is not shared with Roblox or third parties. Separate Facial Animation and Facial Media Capture (ID verification) notices are linked but not included here.

Supporting quotations

Camera-enabled features and uploads (users 13 and older)
If you use Roblox features that require the use of your camera or that enable you to upload content that contains your Personal Information, including photos, we will collect, process, and store that content to accomplish the purpose of the feature, including processing the content for safety purposes. Video used to generate animation key frames is processed on your device and is not shared with Roblox or any third parties.

Not stated here

  • How long camera content is stored is not stated here; the linked notices are not supplied.

Data Access & Collection · User right or choice

Opting in to Contact Importer shares your phone contacts' names and numbers with Roblox

If you are 13 or older and opt in to Contact Importer, you share the first and last names and phone numbers of the contacts in your mobile address book with Roblox, to help connect with friends. While you use the feature Roblox automatically accesses and collects your address book from time to time to sync contacts. Roblox says it keeps that information only when it matches existing Roblox users. The feature may not be available in some locations.

Supporting quotations

Contact Importer (users 13 and older)
If you opt-in to the Contact Importer feature, you will share the first and last names and phone numbers of your contacts in your address book on your mobile phone with Roblox. This feature helps connect with your friends on our Service. If you use the feature, we will automatically access and collect information in your address book from time to time in order to sync your contacts. Such information will only be retained in case of matches with existing Roblox users. Our Contact Importer feature is only available if you are 13 or older and may not be available in certain locations.

Sharing & Disclosure · Company practice

Joining a Creator's virtual event (13 and older) shares your username, email and user ID with the event host

Creator Events are only for users 13 or older. If you join a virtual event hosted by a Creator, data such as your username, email and Roblox user ID may be shared with the company that hosts the event so you can log in. Your activity there is subject to that third-party platform's privacy policy as well as the Roblox Community Standards.

Supporting quotations

Creator Events (users 13 and older)
If you join a virtual event hosted by a Creator, data such as your username, email, and Roblox user ID may be shared with the company that hosts the events. This is done to allow you to log in to the experience. Your activity during a Creator Event is subject to the third party platform’s privacy policy as well as the Roblox Community Standards. Creator events are only available if you are 13 or older.

Not stated here

  • The event host's privacy policy is not supplied.

Linking & Identification · Company practice

Roblox links data about how you play and use your device to your account

To improve your experience and support safety, Roblox collects information about how you interact with the Services and connects it with your account. Examples: collecting game-state information to detect Terms violations and improve that detection, collecting information about how you interact with your device for security and safety, and collecting information about the games you play to recommend similar ones.

Supporting quotations

To improve your experience and support our safety efforts, we collect information about how you interact with the Services and we connect this information with your account. For example, we may:
collect information from your game state to detect violations of our Terms and to improve our ability to detect such violations.
collect information about your behavior when you interact with your device for security and safety purposes
collect information about the games you are playing to give you similar recommendations

Qualifications & exceptions

  • The listed items are examples, not a complete list.

Sharing & Disclosure · Company practice

Trading or buying user-made items can share your username and transaction details with the creator or later owners

If you acquire a limited item, or purchase, share, trade or otherwise transact in user-generated content (UGC), Roblox may share information such as your username and transaction details with the UGC creator or subsequent owners.

Supporting quotations

share information like your username and transaction details to the UGC creator or subsequent owners, if you acquire a limited item if you purchase, share, trade, or otherwise engage in a transaction involving UGC,

Data Access & Collection · Company practice

Roblox collects device information through cookies, but the referenced cookie section is not in this text

Roblox says it may collect information from your device through cookies and refers to a part called "Cookies and Similar Technologies". That part does not appear anywhere in this saved text, even though the document is titled a Privacy and Cookie Policy, so what cookies are used, for what purposes and what controls exist cannot be determined from this source.

Supporting quotations

collect information from your device through cookies - see “Cookies and Similar Technologies”.

Not stated here

  • The "Cookies and Similar Technologies" section is not present in the saved text; its content is unknown.

Data Access & Collection · Company commitment

For other 13+ features, Roblox says it will explain what it collects when it collects it

When you subscribe to other features or activities available to users 13 or older, Roblox says it will set out what information is collected and how it intends to use it at the time of collection.

Supporting quotations

Subscribing to other features (users 13 and older)
When you subscribe to other features or activities that are available to users 13 years old or older, we’ll set out what information is collected and how we intend to use it when the information is collected.

Sharing & Disclosure · Company practice

Contests and promotions may need your contact details, and some laws require naming winners publicly

Competitions and promotions such as contests, sweepstakes, giveaways or prize draws may require contact information such as your name, email or phone number to be eligible for discounts or prizes. If you receive a gift card from a third-party provider, certain contact information may be shared with that provider and used under this policy and the provider's terms. In some places the law requires Roblox to publicly share information about winners.

Supporting quotations

If you take part in competitions or promotions, for example, contests, sweepstakes, giveaways or prize draws, those activities may require contact information such as your name, email, or phone number, to be eligible for discounts or prizes. If you receive a gift card provided by a third party provider, certain contact information may be shared with the provider and used in accordance with this Policy and the terms listed on the provider’s website. In some places in the world, the law requires us to publicly share information about the winners.

Data Access & Collection · Company practice

Optional research surveys may ask about your interests, habits and Personal Information

If you choose to take part in research or surveys, they may collect your likes and dislikes, experience interests and habits, hobbies and other lifestyle information or preferences, and may ask for Personal Information.

Supporting quotations

If you choose to participate in research or surveys, these surveys may collect information about your likes and dislikes, experience interests and habits, general hobbies and interests, and other lifestyle information or preferences. These surveys may ask for Personal Information.

Use & Processing · Company practice

Roblox uses your data to pick ads; only users 18 and older get personalized ads and can switch them off

Roblox processes Personal Information to display ads on Roblox and uses information it collects to decide which ads to show you; it may also work with partners to show you ads directly. Users under 18 see only non-personalized ads. Users 18 and older see personalized ads (with consent where the law requires it) and can control whether they see them in their Roblox settings.

Supporting quotations

We process your Personal Information to display ads on Roblox. Specifically, we use information we collect to decide which ads to show you on Roblox.
Roblox also may work with partners to directly show you ads on Roblox.
Users under 18 years old will see only nonpersonalized ads. Users 18 years old and older will see personalized ads on Roblox (with consent, where required). If you are 18 or older, you can control whether you see personalized ads through your Roblox

Charges & Financial Obligations · Company practice

Advertisers on Roblox give name, contact, financial, business and tax details

If you choose to publish ads on Roblox, Roblox collects additional information such as your name, email, address, financial information, and business and/or tax information. It uses this to give you an ad account, onboard you to the ad program, send invoices or payment information, and comply with applicable laws, including tax laws.

Supporting quotations

If you choose to publish ads on Roblox, we collect additional information from you such as your name, email, address, financial information, business and/or tax information. The purpose of collecting this information is to provide you with an ad account, onboard you to the relevant ad program, send you invoices or information related to payment, and comply with applicable laws, including tax laws.

Charges & Financial Obligations · Company practice

Developer Exchange (13 and older) requires a US tax form and may require a government photo ID

To take part in the Roblox Developer Exchange Program you must give Roblox an IRS W-9 form (US taxpayers) or W-8 form (non-US taxpayers). Roblox may also ask you to verify your identity with a government-issued photo ID through a third-party vendor. The program is only available to users 13 or over; its separate Terms of Use are linked, not included.

Supporting quotations

To take part in the Roblox Developer Exchange Program, you must give us an IRS W-9 form (for U.S. taxpayers) or W-8 form (for non-U.S. taxpayers). We may also ask you to verify your identity by providing a government-issued photo ID through a third-party vendor. This feature is only available to users who are 13 or over.

Use & Processing · Company practice

Roblox also uses Personal Information for account management, improvement, security and legal compliance

Beyond the feature-specific uses, Roblox uses Personal Information, as permitted by law, to let you manage your account and settings and to communicate with you about its Services; to operate, maintain, personalize and improve the Service, research relevant technologies and provide support; to detect security issues, protect against malicious, deceptive or illegal activity and prosecute those responsible, fix bugs, give or limit your access to features, and protect integrity, safety and security; and to audit interactions and transactions and comply with the law, its Terms of Use and any restrictions it has placed on your use.

Supporting quotations

We also use Personal Information for these general purposes, as permitted by law, in addition to the purposes listed above:
To allow you to manage your Roblox account or update your settings
To communicate with you about our Services
To operate, maintain, personalize, and improve our Service
To research relevant technologies
To provide technical support or customer service
To detect security issues, protect against malicious, deceptive or illegal activity, and prosecute anyone responsible for that activity
To find and fix errors or bugs
To give you access to features or limit your access to Roblox, as appropriate
To protect our or our users’ integrity, safety or security
To audit interactions and transactions, and carry out any other compliance tasks
To comply with the law and our own Terms of Use, or any other restrictions we’ve put on your use of the Service

Account & Service Control · User right or choice

You do not have to give Personal Information, but some features may then be unavailable

You are not obliged to provide Personal Information when Roblox asks. If you withhold requested information, Roblox may not be able to provide certain services and features.

Supporting quotations

You are under no obligation to provide Personal Information to Roblox when requested. However, if you choose to withhold any requested information, we may not be able to provide you with certain services and features.

Legal Rights & Agreement Rules · Restriction or exception

On Roblox's corporate websites, the parts about experiences and under-13 users do not apply

Roblox's corporate websites (corp.roblox.com, blog.roblox.com and their subdomains) give general company, press and career information to any visitor and offer no experiences. The parts of this policy about experiences or about users under 13 do not apply to those sites.

Supporting quotations

The parts of this privacy policy that are about experiences or give information about users under 13 years old don’t apply to the corporate websites.
Our corporate websites give general company information to any user that visits them – they use the domain names, corp.roblox.com, blog.roblox.com, and their subdomains.
Our corporate websites do not offer any experiences.

Data Access & Collection · Permission or license

Job applicants' details may be used for corporate communications, and career spaces may be recorded

If you contact Roblox about jobs, it may ask for your name, email address and employment details, or you may send a CV or application with them. Roblox says it may use this to send you corporate-related information or respond to your application. If you engage with Roblox in an immersive space for prospective employees, such as the Roblox Career Center, that space may be recorded to provide the experience.

Supporting quotations

If you contact us about job opportunities, we may ask for your name, email address and employment details. Or you may send us a CV or job application with this information. We have the right to use this information to send you corporate-related information to you or respond to your job application. If you engage with Roblox in an immersive space for prospective employees, such as the Roblox Career Center, such a space may be recorded in order to provide the experience.

Sharing & Disclosure · Company commitment

Service providers get your data only to do work for Roblox and may not sell it

Roblox may share your information, including Personal Information, with companies it hires to perform services for it (third-party agents, contractors or service providers). Roblox says they may only use the information to complete the relevant tasks and not for any other purpose, including selling Personal Information, and that it makes sure they can look after the information properly. Personal Information collected through the SMS program will not be shared, sold or rented to third parties.

Supporting quotations

We may share your information, including Personal Information, with other companies (known as third-party agents, contractors, or service providers). We hire these companies to perform services for us. These companies are only allowed to use the information we share to complete the relevant tasks. They are not allowed to use the information we share for any other purpose, including selling Personal Information. We make sure that all companies that we share information with are capable of looking after the information properly. Personal Information collected through the SMS program, won’t be shared, sold or rented to third parties.

Sharing & Disclosure · Company practice

Named providers include Persona, Google, AppsFlyer, PayPal, console stores and AWS

Examples of services Roblox may rely on other companies for, with example companies: account integrity and security (Persona); analytics (Google LLC); user acquisition (AppsFlyer); community filtering and moderation; customer support; surveys and promotions (Reach3); billing and payment (Kount, Worldpay, PayPal, Incomm, Blackhawk, Google, Apple, Amazon, Windows Store, Xbox, PlayStation, Meta Quest, Xsolla); and hosting and content delivery (AWS, Equinix, CenturyLink, YouTube, Vimeo). These are examples, not a complete list.

Supporting quotations

Here are examples of the services that we might rely on other companies to provide, and examples of the companies that we are likely to share information with.
Account integrity and security services (e.g., Persona);
Analytics services (e.g., Google LLC);
User acquisition services (e.g., AppsFlyer);
Community filtering and moderation services;
Customer support services;
Surveys and promotions (e.g., Reach3);
Billing and payment services (e.g., Kount, Worldpay, PayPal, Incomm, Blackhawk, Google, Apple, Amazon, Windows Store, Xbox, Playstation, Meta Quest, Xsolla)
Hosting and content delivery services (eg, AWS, Equinix, CenturyLink, YouTube, Vimeo).

Sharing & Disclosure · Company practice

Experience creators see your username, user ID, game metrics, item transactions and region, but not your IP

Creators of the experiences you use or content you interact with will have access to your username, display name, user ID, game metrics, UGC transaction details and your regional location, which Roblox derives from your IP address. Roblox says it does not share your IP address itself with creators.

Supporting quotations

The creators of the experiences you use or content you interact with will have access to your username, display name, user ID, game metrics, UGC transaction details, and your regional location (which we base on your IP address). We do not share your IP address with the creators.

Sharing & Disclosure · Company practice

Creators get players' regional location to size their audience and meet local legal requirements

Roblox gives experience creators the regional location of players (derived from IP address, without sharing the IP address itself) so they can determine their player base and make sure their experiences meet the legal requirements of the country you live in.

Supporting quotations

your regional location (which we base on your IP address). We do not share your IP address with the creators.
We provide creators with the regional location of players to determine their player base and make sure their experiences meet the legal requirements of the country you live in.

Sharing & Disclosure · Permission or license

Roblox may give your message contents to authorities for threats to life or under online safety laws

As permitted or required by law, Roblox may also share the contents of your communications: with law enforcement or judicial authorities to address a threat to a person's life or safety, including (but not limited to) where consistent with its obligations under Article 18 of the Digital Services Act; when required by law in response to governmental regulatory requests, such as information notices under the UK Online Safety Act; and when required by online safety laws such as the Australian Online Safety Act.

Supporting quotations

We may also share the contents of your communications as permitted or required by law:
to law enforcement or judicial authorities to address a threat to life or safety of a person, including (but not limited to) where consistent with Roblox's obligations under the Digital Services Act, Article 18
when required by law in response to governmental regulatory requests, such as Information notices issued under the UK Online Safety Act
when required by laws governing online safety, such as the Australian Online Safety Act

Qualifications & exceptions

  • The named laws are cited by Roblox; their content is not supplied here.

Sharing & Disclosure · Permission or license

Roblox may share your data or message contents when it believes this helps safety or a Terms investigation

Roblox may share your Personal Information or the contents of your communications if it believes sharing would help an investigation into public safety or a violation of its Terms of Use, protect the safety of Roblox users or others, reduce risk to user safety or security (or where collaborating with others is necessary to protect users), or help protect the security or integrity of its Services. This ground depends on Roblox's own belief and is not limited here to legal requests.

Supporting quotations

We may share your Personal Information or the contents of your communications if we believe that sharing would:
help an investigation into public safety or a violation of our Terms of Use
protect the safety of Roblox users or others
reduce risk to user safety or security, or if collaborating with others is necessary to protect users
help to protect the security or integrity of our Services

Not stated here

  • Who receives the information under this ground is not specified.

Sharing & Disclosure · Permission or license

Roblox may share your information to protect itself from legal liability

Roblox may share your information if it believes disclosure will let it take precautions against legal responsibility (liability) or protect its rights.

Supporting quotations

We may share your information if we believe that disclosing the information will allow us to take precautions against taking legal responsibility (liability) or to protect our rights.

Sharing & Disclosure · Permission or license

Your data can pass to a buyer in a merger or sale, or in bankruptcy

Roblox may hand over rights to access your information, including Personal Information, as part of a merger, acquisition, sale of assets or similar transaction, or as a business asset in an insolvency, bankruptcy or receivership. Where the law requires it, Roblox will notify you and ask for your consent to such sharing.

Supporting quotations

We may hand over rights to access your information, including Personal Information:
as part of a merger, acquisition, sale of assets, or similar transaction
if information is handed over as a business asset in an insolvency, bankruptcy, or receivership
Where required by law, we will notify you and ask you to consent to such sharing.

Sharing & Disclosure · Company practice

Roblox discloses contact and device identifiers and demographics to ad companies, but not for under-18 personalized ads

Roblox may disclose information collected from or about you to third-party advertising and ad measurement companies to select and display ads to you on Roblox or to measure and improve ad effectiveness. The data includes contact identifiers, characteristics or demographics, and device identifiers. In line with applicable law, Roblox gives users choices about this disclosure, which you can exercise in your account's privacy settings; depending on where you live you may have additional rights (see Section 7). Roblox says it does not disclose Personal Information of users under 18 to direct personalized advertising. When you interact with an ad on Roblox, it works with partners to produce aggregated measurement information.

Supporting quotations

Roblox may disclose information collected from or about you with third-party advertising companies and/or advertising measurement companies to select and display advertisements to you on Roblox, or measure and improve advertising effectiveness. In accordance with applicable law, we provide our users with choices about whether data is disclosed for this purpose. Data disclosed for this purpose includes:
Contact identifiers
Characteristics or demographics
Device identifiers
You can exercise choices about data processing for this purpose by visiting your account’s
Depending on where you live, you may have additional rights that apply. For region-specific information, please visit Section 7 of this policy. We do not disclose any Personal Information from users under 18 years old for the purposes of directing personalized advertising. When you interact with an ad on Roblox, we work with partners to produce aggregated measurement information.

Qualifications & exceptions

  • The under-18 limit covers disclosure for directing personalized advertising; it does not say no data of under-18 users reaches ad measurement partners.

Sharing & Disclosure · Company practice

If you reach Roblox through an ad elsewhere, ad companies may receive your IP address or device ID

Roblox partners with ad servers and ad networks to advertise Roblox on other websites and services. If you interact with content or reach Roblox through a link in an ad, Roblox or its service providers may give those advertising companies identifiers from your device, such as IP address or device ID.

Supporting quotations

We also partner with third-party advertising companies such as ad server companies and ad networks to advertise Roblox on other websites and services. If you interact with content or reach Roblox through a link in an advertisement, we or our service providers may give these third-party advertising companies identifiers from your device, such as an IP address or device ID.

Sharing & Disclosure · Company practice

Buying from a Commerce Provider on Roblox shares purchase details, and what you give them follows their policies

If you buy a Commerce Product directly from a Commerce Provider on Roblox, Roblox and the provider may exchange information about the purchase to fulfill it, including a transaction identifier that lets each confirm details such as whether the purchase was completed. Information you give directly to the Commerce Provider is collected independently by that provider and is governed by its own terms and policies.

Supporting quotations

If you directly interact with a Commerce Provider to purchase a Commerce Product(s) on Roblox, Roblox and the Commerce Provider may need to exchange information about your purchase in order to fulfill the transaction. This involves Roblox or the Commerce Provider creating a transaction identifier that allows each party to confirm certain information about the transaction, such as whether a purchase has been completed. Any information you provide directly to the Commerce Provider in order to complete a transaction is independently collected by the Commerce Provider and will be subject to the Commerce Provider’s applicable terms and policies.

Not stated here

  • "Commerce Provider" and "Commerce Product" are not defined in this text (undefined capitalized terms point to the separate Roblox Dictionary).

Sharing & Disclosure · Permission or license

Roblox may share data that does not identify you, from users of any age, for any business purpose

Roblox shares data that does not identify you in some circumstances, for example to comply with reporting requirements, for any business or marketing purpose, and to help it and others understand how, when and why users visit its sites and use Roblox. It may share such non-identifying data for all users regardless of age.

Supporting quotations

In some circumstances, we share data that doesn’t identify you, for example:
To comply with reporting requirements
For any business or marketing purposes
To help us and others understand how, when, and why users visit our sites and use Roblox.
We may share non-identifying data of all users regardless of their age.

Not stated here

  • The policy does not explain how data is made non-identifying.

Security & Safeguards · Restriction or exception

Roblox tries to block personal details in chat, but is not responsible for information you share yourself

Roblox takes steps to prevent users from sharing Personal Information through chats, forums, messages and similar features. Anyone who uses those features can see what you share there, and Roblox says it is not responsible for how your Personal Information is used if you shared it yourself.

Supporting quotations

Roblox takes steps to prevent users from sharing Personal Information via chats, forums, messages, or similar ways of communicating on Roblox. Remember that anyone who uses these features will be able to see information that you share in this way. We are not responsible for how your Personal Information is used if you shared it yourself.

Security & Safeguards · Restriction or exception

Roblox uses reasonable security efforts but does not guarantee security or accept liability for accidental disclosure

Roblox has security measures intended to protect Personal Information and other sensitive information under its control from loss, misuse or alteration, and uses reasonable efforts to prevent those events, but says it cannot guarantee they will never happen. Because sending or storing information online is not 100% secure, it cannot guarantee the security of information you share, and to the fullest extent permitted by applicable law it does not accept liability for unintentional disclosure.

Supporting quotations

We have security measures that are intended to protect any Personal Information or other sensitive information under our control from loss, misuse, or alteration. Though we cannot guarantee that loss, misuse or alteration of information will never occur, we use reasonable efforts to prevent it.
Sending or storing information on the Internet is not 100% secure, so we can’t guarantee the security of any information you share with us. To the fullest extent permitted by applicable law, we do not accept liability for unintentional disclosure.

Security & Safeguards · Company commitment

Roblox will notify you of a data breach as the law requires

Roblox may send you emails or other messages about security, privacy and account management. If it learns of an incident that may qualify as a data breach under the law, it will notify you in accordance with the law.

Supporting quotations

We may send you emails or other messages about security, privacy, and account management. If we learn about an incident that may qualify as a data breach under the law, we will notify you in accordance with the law.

Qualifications & exceptions

  • The commitment follows legal breach-notification requirements; timing and form are those the law sets.

Retention & Deletion · Company practice

Roblox keeps data as long as needed for its purposes, even after you stop using Roblox, then deletes or de-identifies it

Roblox may keep your Personal Information for specific purposes as long as it needs it for those purposes, sometimes even after you stop using Roblox. When it no longer needs the information it will de-identify or delete it. Its stated reasons include keeping billing information and transaction histories to resolve billing disputes; keeping account history for customer service and to provide, improve and develop the service; keeping information that helps make the service safer, such as stopping bad actors; and keeping information for legal reasons such as legal defenses, audits, legitimate business purposes, enforcing agreements, exercising its rights or complying with legal obligations.

Supporting quotations

We may keep your Personal Information for specific purposes as long as we need it to fulfill those purposes, sometimes even if you’ve stopped using Roblox’s Services. When we no longer require your Personal Information, we will de-identify or delete the information.
We keep billing information and transaction histories so that we can resolve billing disputes or inquiries.
We keep user account history to solve any customer service issues and to provide, improve, and develop our service.
We may keep information if it will help us make our Service safer and more secure, such as to stop bad actors who try to misuse Roblox.
We may keep information for legal reasons, like establishing legal defenses, conducting audits, pursuing legitimate business purposes, enforcing our agreements, exercising our rights, or complying with legal obligations.

Not stated here

  • No specific retention periods are given here, apart from those stated elsewhere (for example persistent identifiers up to two years after deletion).

Retention & Deletion · Context

Content and virtual items you shared or sold can stay on Roblox with other users

Other users may keep publicly shared content and virtual items on the platform. For example, if you create a virtual shirt and sell it to another user, the shirt stays on the platform because that user now owns it.

Supporting quotations

Other users may keep publicly shared content and virtual items on our platform (e.g., if you create a virtual shirt and then sell it to another user, the virtual shirt will be kept on the platform because the other user now possesses it).

Sharing & Disclosure · Company practice

Your data is stored in the US and may go to other countries with weaker privacy laws

Roblox is based in the United States and sends the information it collects to its servers in the US, where it stores and uses it. It may also transfer information to its other offices and to the third parties described in Section 4 ("When we share your information"), which may be outside your region, and its agents or contractors may use it. The data protection laws of the US or other countries may not be equivalent to yours. Roblox says it will take reasonable steps so your privacy rights stay protected and, where applicable law requires, relies on a valid international data transfer mechanism.

Supporting quotations

Roblox is based in the United States. We send information we collect from you to our secure servers in the U.S. where we store and use it.
We may also transfer information that we collect from you to our other offices and to the third parties mentioned in Section 4 of this Policy – these might be outside your region. Our agents or contractors may also use your information. The data protection laws of the U.S. or other countries may not be equivalent to those where you live.
Wherever we transfer your Personal Information, we will take reasonable steps so that your privacy rights continue to be protected. If required by applicable legislation, we rely on a valid international data transfer mechanism to enable cross-border data transfers.

Qualifications & exceptions

  • Section 4 is read as the fourth top-level part, "When we share your information"; numbers are not printed in this saved text.

Not stated here

  • The specific transfer mechanism is not named here.

Legal Rights & Agreement Rules · Company commitment

Roblox will notify you before major policy changes take effect, and get consent for new uses where law requires

Roblox updates this policy from time to time and asks you to review the page regularly; it says it publishes the latest version's date at the bottom of the page. For major changes it will tell you by email (if it has yours or a parent's or legal guardian's) or by a prominent notice on the website or in the app before the change takes effect. If the law requires it, Roblox will get your consent, or a parent's or legal guardian's, for changes involving new material uses of Personal Information not previously disclosed.

Supporting quotations

We update this Privacy Policy at times, so you should review this page regularly. We always publish the date of the latest version at the bottom of this page. If we make any major changes, we will let you know by email (if we have your email address or a parent’s or legal guardian’s email address) or by showing a prominent notice on this website or in app prior to the change becoming effective. If required by law, we will obtain your consent or the consent of a parent or legal guardian if any of these changes involve new material uses of your Personal Information not previously disclosed in this Privacy Policy.

Qualifications & exceptions

  • Advance notice is promised for "major" changes only; consent only where the law requires it.

Not stated here

  • What counts as a "major" change is not defined.

Account & Service Control · Procedure

Region-specific rights requests go through the Customer Support Form, filed by a parent for under-13s

Section 7 adds region-specific choices and rights. To exercise your rights or make another request about your Personal Information, you fill in Roblox's Customer Support Form; if you are under 13, your parent or guardian should fill it out.

Supporting quotations

If you live in certain regions, you may have additional choices about your Personal Information or rights that apply to data processing. This section contains additional information based on where you live.
If you want to exercise your rights or make another request about your Personal Information, or if you want us to make another request about your Personal Information, please fill in the Customer Support Form. If you’re under 13 years old, please have your parent or guardian fill out the form.

Legal Rights & Agreement Rules · Context

EEA/UK/Swiss: account login data rests on contract; verification data also on Roblox's safety interest

For users in the EEA, UK or Switzerland, Roblox processes your username and password to create your account on the basis of performance of a contract (GDPR Art. 6(1)(b)). Email addresses and other information you give for added verification or to enable features are processed on the bases of contract and legitimate interest (Art. 6(1)(f)); Roblox says its legitimate interest is providing a safe and secure Service, especially to protect children.

Supporting quotations

Username and password to create your account. The basis for processing this Personal Information is Article 6 sec. 1 sent. 1 lit. b (“performance of a contract”).
Email addresses and other information you provided us with for added verification and/or to enable certain features. The bases for processing this Personal Information are Article 6 sec. 1 sent. 1 lit. b (“performance of a contract”) and f (“legitimate interest”) GDPR. Roblox has a legitimate interest in providing a safe and secure Service, especially to protect children.

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Legal Rights & Agreement Rules · Context

EEA/UK/Swiss: phone-based friend suggestions need your consent

For users in the EEA, UK or Switzerland, an optional phone number is used for security and account access, such as mobile login and password recovery, on the bases of contract and Roblox's legitimate interest in mobile use, security and fraud prevention; you also authorize your wireless carrier to share account and device information with Roblox or its provider solely to identify you or your device and prevent fraud. Using your phone number to recommend you as a friend (discoverability) relies on your consent (GDPR Art. 6(1)(a)).

Supporting quotations

If you choose to provide a phone number, we will use the phone number for security and account access purposes, which will allow you to log in via mobile and recover a lost or forgotten password.
You authorize your wireless carrier to use or disclose information about your account and your wireless device, if available, to Roblox or its service provider for the duration of your business relationship, solely to help them identify you or your wireless device and to prevent fraud.
The legal basis for this processing activity is Article 6 sec. 1 sent. 1 lit. b GDPR (“performance of a contract”) and f (“legitimate interest”) GDPR. We have a legitimate interest in enabling you to use our Services via your mobile device, ensuring security, and preventing fraud. Additionally, with your consent, we may use your phone number to recommend you as a friend to others using Roblox. The legal basis for friend recommendations and discoverability based on your phone number is Article 6 sec. 1 sent. 1 lit. a GDPR (“consent”).

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Charges & Financial Obligations · Company practice

EEA/UK/Swiss: Roblox keeps billing addresses and payment history on the basis of its billing interest

For users in the EEA, UK or Switzerland, billing and payment information for Developer Exchange or for buying Robux or premium subscriptions (for yourself or another user) — name, billing address, card or other payment information — is processed to perform the contract. Card details you choose to save with a third-party payment provider are stored by that provider, not Roblox. If you buy Robux for another user, Roblox collects your contact details to communicate about the transaction. Roblox may also collect billing addresses and keep transaction details and purchase and payment history, relying on its legitimate interest in billing and resolving inquiries.

Supporting quotations

Billing and payment information, when you participate in Developer Exchange or purchase Robux or premium subscriptions on behalf of yourself or another user, including your name, billing address, credit card or other payment information and billing information. You may choose to save information such as your credit card number through a third-party payment provider; in such cases the information is not stored by Roblox; it is stored with the third-party partner. If you purchase Robux on behalf of another Roblox user, we collect contact information, such as email or phone number, in order to communicate with you about the transaction. The legal basis for this processing activity is Article 6 sec. 1 sent. 1 lit. b GDPR (“performance of a contract”). We may also collect billing addresses and retain transaction details and purchase and payment history. The legal basis for processing this Personal Information is our legitimate interest in being able to perform billing and resolve inquiries, Article 6 sec. 1 sent. 1 lit. f GDPR (“legitimate interest”).

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Use & Processing · Company practice

EEA/UK/Swiss: Roblox moderates and may train filters on your messages, relying on its interest in avoiding liability

For users in the EEA, UK or Switzerland, comments and messages you post in public chats, forums, group walls and personal posts are processed to monitor, filter and moderate them so Roblox can remove profanity, Personal Information and other inappropriate conversations. Roblox may also use pre-filtered comments and messages for other purposes such as training and improving its filters. The stated legal basis is Roblox's legitimate interest in defending itself against liability claims from unlawful comments you post. Personal Information you post in forums is available to anyone with access to the forum, including other users, who can read, collect or use it, including to send unsolicited messages.

Supporting quotations

Comments or messages you post or transmit on Roblox via public chats, forums, group walls, personal post, etc. We process this information to monitor, filter and moderate this information for the purposes of being able to remove profanity, Personal Information, and other inappropriate conversations. Additionally, we may use pre-filtered comments and messages for other purposes such as training and improving our filter technology. The legal basis for this processing activity is Roblox’s legitimate interest in being able to defend ourselves from possible liability claims that may arise from unlawful comments posted by you, Article 6 sec. 1 sent. 1 lit. f GDPR (“legitimate interest”). Please note that any Personal Information submitted by you in forums and similar means offered by us is available to anyone who has access to this forum including other users. The Personal Information posted by you can be read, collected or used by other users of these forums and could be used to send unsolicited messages.

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).
  • Training use here is "such as" an example of other purposes; it is not limited to where the law allows, as the general section phrases it.

Legal Rights & Agreement Rules · Context

EEA/UK/Swiss: support requests are processed to perform the contract

For users in the EEA, UK or Switzerland, when you contact customer service (for example to report a problem or ask questions), Roblox may process your email address, name and information about your inquiry to respond, fulfil your request or provide support, on the basis of performance of a contract, depending on why you contacted support.

Supporting quotations

Information relating to contacting our customer service, e.g. when you report a problem, submit questions, concerns or comments. We may process your email address, your name and information relating to your inquiry or concern in order to respond to your communications, fulfill your requests, or provide other customer support. This processing activity is based on Article 6 sec. 1 sent. 1 lit. b GDPR (“performance of a contract”), depending on the initial purpose for contacting our customer support.

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Linking & Identification · Context

EEA/UK/Swiss: information from linked social media accounts may be accessed by or shared with Roblox

For users in the EEA, UK or Switzerland, when you add social media links to your account, certain information from those social media accounts may be accessed by or shared with Roblox, on the basis of performance of a contract. If you use your Roblox credentials to sign in to a third-party site and later delete your Roblox account, you may lose access to that site.

Supporting quotations

Social media links you add to your account. When you use these features, certain information from your social media accounts may be accessed by or shared with Roblox. The legal bases for this processing activity are Article 6 sec. 1 sent. 1 lit. b (“performance of a contract”). If you use your Roblox credentials to sign in to a third-party website or service, and later delete your Roblox account, you may lose access to such third-party website or service.

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Use & Processing · Restriction or exception

EEA/UK/Swiss: voice recordings are used for training only with consent, and never EEA private-server chats

For users in the EEA, UK or Switzerland, Roblox may collect, process and store audio recordings to enable voice services and make Roblox safer, on the bases of contract and legitimate interest. Voice recordings are used to inform training and product improvement only with your consent. Roblox also says it will not use private server voice chat recordings of EEA users for training or product improvement at all.

Supporting quotations

When you use audio features from Roblox, we may collect, process and store your audio recording to enable features like voice services and make Roblox safer. We will not engage in training or product improvement with private server voice chat recordings of EEA users. The bases for data are Article 6 sec. 1 sent. 1 lit. b (“performance of a contract”) GDPR and Article 6 sec. 1 sent. 1 lit. f (“legitimate interest”). With your consent, we will use voice recordings to inform training and product improvement. The basis for processing this Personal Information for training and product improvement is Article 6 sec. 1 sent. 1 lit. a (“consent”).

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).
  • The private-server exclusion names "EEA users"; whether it also covers UK and Swiss users is not stated.

Cross-references

Data Access & Collection · Company practice

EEA/UK/Swiss: opt-in location tracking (13+) can personalize content and, for adults, ads

For users in the EEA, UK or Switzerland, when you request or agree to location-based services (users 13 and older), Roblox may collect and track geolocation to offer location-dependent services, for example personalizing content or, for users 18 and older, personalized advertising. It uses an identifier on your device or browser to recognize you on return. You can stop it through device settings, by not using the service, or by uninstalling the apps. The stated legal basis is performance of a contract.

Supporting quotations

When you request or agree to location-based services (users 13 years old and older), we may collect and track geolocation information so that we can offer services that depend on us knowing where you are. Examples are personalizing content or personalized advertising for users 18 years old and older. We collect this information by using an identifier on your device or browser so that we can recognize you each time you return. To stop us collecting your location information, you can update your device settings, stop using the service, or uninstall our mobile apps. The basis for processing this Personal Information is Article 6 sec. 1 sent. 1 lit. b (“performance of a contract”).

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).
  • The general section does not name personalized ads as a use of location; this regional text does, for users 18 and older.

Data Access & Collection · Company commitment

EEA/UK/Swiss: VR movement data replicates your movement and is not stored

For users in the EEA, UK or Switzerland, if you join experiences on a VR platform, Roblox collects your physical movement information to replicate your movement in the experience, uses it only to provide the Service and does not store it, on the basis of performance of a contract.

Supporting quotations

If you join our experiences on a VR platform, we will collect your physical movement information in order to replicate your movement in the experience. This information is only used to provide the Service and is not stored. The bases for processing this Personal Information are Article 6 sec. 1 sent. 1 lit. b (“performance of a contract”).

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Sharing & Disclosure · Company practice

EEA/UK/Swiss: Creator event hosts receive your username, email and user ID

For users in the EEA, UK or Switzerland, joining a Creator-hosted virtual event may share your username, email and Roblox user ID with the third-party platform hosting it so you can log in. Your activity there is subject to that platform's privacy policy and the Roblox Community Standards. The bases are contract (to join) and Roblox's legitimate interest in the security and integrity of its service.

Supporting quotations

If you join a virtual event hosted by a Creator, data such as your username, email, and Roblox user ID may be shared with the third-party platform that hosts events. Such data is used to allow you to log in to the experience. Your activity during a Creator Event is subject to the third party platform’s privacy policy as well as the
The bases for processing this Personal Information are Article 6 sec. 1 sent. 1 lit. b (“performance of a contract”) to join an event and f (“legitimate interest”) GDPR to support the security and integrity of our service.

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Data Access & Collection · Company practice

EEA/UK/Swiss: camera content is kept only as long as needed, and ID verification relies on consent

For users in the EEA, UK or Switzerland, content from camera features or uploads containing your Personal Information (photos or video) is collected, processed and stored only as long as needed for the feature, on the basis of contract. For certain uploads such as ID verification, Roblox relies on your consent, including the GDPR consent ground for special categories of data (Art. 9(2)(a)). Separate facial animation and facial media capture notices are linked, not included.

Supporting quotations

If you decide to use these features and upload content that requires the use of your camera or upload content that contains your Personal Information, we will collect, process, and store that content only for as long as needed to accomplish the purpose of the feature. The bases for processing this Personal Information are Article 6 sec. 1 sent. 1 lit. b (“performance of a contract”). For certain uploads, such as ID verification, Roblox processes data you upload on the basis of consent, Article 6 sec. 1 sent. 1 lit. a or Article 9 sec. 2 lit. a (“consent”).

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Not stated here

  • The linked facial notices are not supplied.

Data Access & Collection · Company commitment

EEA/UK/Swiss: for other non-child features, what is collected will be evident at collection

For users in the EEA, UK or Switzerland, Roblox may offer other features or activities to users other than children, where you may submit Personal Information. Roblox says the data collected and its intended uses will be evident at the time of collection; the stated basis is performance of a contract.

Supporting quotations

Information required for other features or activities, which may be available to our users other than children. We may offer other features or activities on our Services from time to time, and you may be able to submit or upload Personal Information in connection with such features. The data being collected for such features and their intended uses will be evident at the time of data collection. The bases for processing this Personal Information are Article 6 sec. 1 sent. 1 lit. b (“performance of a contract”).

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Data Access & Collection · User right or choice

EEA/UK/Swiss: Contact Importer is opt-in, though Roblox cites contract rather than consent as its legal basis

For users in the EEA, UK or Switzerland, opting in to Contact Importer means you consent to sharing the names and phone numbers of your mobile contacts with Roblox, at registration or later, to help you connect with friends. Even so, the legal basis Roblox states for this processing is performance of a contract, not consent.

Supporting quotations

If you opt-in to the Contact Importer feature, you consent to sharing with Roblox the first and last names and phone numbers of your contacts in your address book on your mobile phone, either at the time you register for our Service or otherwise. We do so to help you connect with your friends on our Service. The legal basis for this processing activity is Article 6 sec. 1 sent. 1 lit. b GDPR (“performance of a contract”).

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Linking & Identification · Company practice

EEA/UK/Swiss: Roblox links gameplay, device behavior and search history to your account

For users in the EEA, UK or Switzerland, Roblox collects information about how you interact with the Services and connects it to your account, for example game-state information to detect Terms violations, device-interaction behavior for security and safety, and your search history to give similar recommendations, and it may share your username and transaction details with UGC creators or later owners when you transact in UGC. The bases are contract and legitimate interest; use of interaction data for safety or moderation relies on legitimate interest.

Supporting quotations

To improve your experience and support our safety efforts, we collect information about how you interact with the Services and we connect this information with your account.
collect information from your search history to give you similar recommendations
The bases for processing this Personal Information are Article 6 sec. 1 sent. 1 lit. b (“performance of a contract”) and f (“legitimate interest”). We may use data collected from your interaction with our experiences for safety or moderation purposes on the basis of Article 6 sec. 1 sent.1 lit. f ("legitimate interest").

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).
  • This regional text names search history for recommendations, where the general section names the games you play.

Data Access & Collection · Company practice

EEA/UK/Swiss: research surveys rely on consent; contests use contact details for prizes

For users in the EEA, UK or Switzerland, voluntary research, surveys or studies may collect likes, interests, habits and other lifestyle information and may ask for Personal Information; the legal basis is your consent. For contests, sweepstakes, giveaways, prize draws and other promotions Roblox runs or sponsors, it may process contact information such as name, email or phone number for prize fulfillment and other information the promotion needs, on the basis of contract.

Supporting quotations

When you respond to or participate in voluntary research or surveys or studies.
The legal basis for this processing activity is Article 6 sec. 1 sent. 1 lit. a GDPR (“consent”).
Information relating to your participation in contests, competitions, sweepstakes, giveaways, prize draws or other promotions that we may run on our Service or sponsor from time to time. We may process certain contact information (such as your name, email address, and/or phone number) for prize fulfillment purposes, as well as other information or content needed for the specific promotion. The legal basis for this processing activity is Article 6 sec. 1 sent. 1 lit. b GDPR (“performance of a contract”).

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Use & Processing · User right or choice

EEA/UK/Swiss: personalized ads need your consent and are never shown to under-18s

For users in the EEA, UK or Switzerland, Roblox processes Personal Information to personalize ads on Roblox, using information it collects and receives from partners to choose ads. Processing for personalized ads, including where partners show ads directly, relies on your consent. Roblox does not show personalized ads to users under 18. Processing to show non-personalized ads relies on Roblox's legitimate interest.

Supporting quotations

We process Personal Information to personalize the ads you see on Roblox. We use information we collect and receive from partners to decide which ads to show you on Roblox. To the extent these practices involve the processing of Personal Information and displaying personalized ads, the legal basis for the processing is Article 6 sec. 1 sent. 1 lit. a GDPR (“consent”). We do not show personalized ads to users under the age of 18 on Roblox. We process Personal Information to display non-personalized ads on Roblox. To the extent these practices involve the processing of Personal Information, the legal basis for processing is Article 6 sec. 1 sent. 1 lit. f GDPR (“legitimate interest”).
Roblox also may work with partners to directly show you ads on Roblox. To the extent these practices involve the processing of Personal Information to display personalized ads, the legal basis for the processing is Article 6 sec. 1 sent. 1 lit. a GDPR (“consent”).

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Use & Processing · Company practice

EEA/UK/Swiss: ad measurement relies on Roblox's interest; marketing Roblox on other sites relies on consent

For users in the EEA, UK or Switzerland, Roblox processes information collected from or about you to measure and improve advertising effectiveness on the basis of its legitimate interest. To market its services on other sites and apps, such as social media platforms, to bring in and keep users, it may process Personal Information on the basis of your consent.

Supporting quotations

Roblox will process information collected from or about you to measure and improve advertising effectiveness. The legal basis for this processing activity is Article 6 sec. 1 sent. 1 lit. f GDPR (“legitimate interest”).
To market our services on other sites and apps, for example, via social media platforms in order to bring new users to our websites and to maintain and increase our user base, we may process Personal Information. To the extent these practices involve the processing of Personal Information, the legal basis for the processing is Article 6 sec. 1 sent. 1 lit. a GDPR (“consent”).

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Charges & Financial Obligations · Company practice

EEA/UK/Swiss: advertiser data is kept for disputes and tax obligations

For users in the EEA, UK or Switzerland who publish ads on Roblox, Roblox collects information such as name, email, address, financial and business information to create an ad account, onboard you and invoice you (contract). It may retain transaction details and purchase and payment history to resolve later disputes and inquiries (legitimate interest), and collects and retains information to meet legal obligations including tax laws (legal obligation).

Supporting quotations

If you choose to publish ads on Roblox, we collect additional information from you (such as name, email, address, financial information, business information, etc.) in order to create an ad account, onboard you to the relevant ad program, and send you invoices or information related to payment.
We may also retain transaction details and purchase and payment history. The legal basis for processing these Personal Information is our legitimate interest in being able to resolve subsequent disputes and inquiries, Article 6 sec. 1 sent. 1 lit. f GDPR (“legitimate interest”). We also collect and retain your information to comply with our legal obligations, including our obligations under tax laws. The basis for processing this Personal Information is Article 6 sec. 1 sent. 1 lit. c GDPR (“legal obligation”).

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Charges & Financial Obligations · Context

EEA/UK/Swiss: Developer Exchange tax forms are processed to meet US anti-money-laundering rules

For users in the EEA, UK or Switzerland, the IRS W-9 or W-8 forms required for the Developer Exchange Program are processed on the basis of Roblox's legitimate interest in complying with US legal requirements, especially US anti-money laundering laws.

Supporting quotations

Information required for participating in our Roblox Developer Exchange Program, like the IRS W-9 form (for U.S. taxpayers) or W-8 form (for non-U.S. taxpayers). The legal basis for this processing is Article 6 sec.1 sent. 1 lit. f GDPR (“legitimate interest”) with regard to U.S. law requirements. It is our legitimate interest to comply with the legal requirements, especially with regard to U.S. anti-money laundering laws.

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Legal Rights & Agreement Rules · Context

EEA/UK/Swiss: account management, improvement and safety rely on Roblox's interest; compliance on contract and law

For users in the EEA, UK or Switzerland, Roblox processes data to let you manage your account and its services, make things better for you and keep the platform safe and secure on the basis of its legitimate interest. It uses data to comply with law and its policies on the bases of contract and legal obligation.

Supporting quotations

We collect and process data to let you manage your account and our services, to make things better for you, and to protect you by keeping our platform safe and secure. The legal basis for this processing is Article 6 sec.1 sent. 1 lit. f GDPR (“legitimate interest”). We also use data to comply with law and our policies. The legal basis for this processing is Article 6 sec.1 sent. 1 lit. b GDPR (“performance of a contract”) and Article 6 sec.1 sent. 1 lit. b GDPR (“legal obligation”).

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).
  • The source cites "lit. b" for both contract and legal obligation; legal obligation is elsewhere cited as lit. c, so the second citation appears to be a drafting error. The card follows the stated labels.

Data Access & Collection · Context

EEA/UK/Swiss: job application data is processed to handle your application

For users in the EEA, UK or Switzerland, information you send with a job application (name, email, employment details, CV or employment history) is processed to handle and respond to the application, and immersive spaces for prospective employees such as the Roblox Career Center may be recorded to provide the experience. The basis is that processing is necessary for entering into an employment contract.

Supporting quotations

Information relating to a job application made by you, like your name, email address, employment details, CV, resume or other details of your employment history sent by you. We will process this information to process and respond to your job application. If you engage with Roblox in an immersive space for prospective employees, such as the Roblox Career Center, such a space may be recorded in order to provide the experience. The legal basis for this processing activity is Article 6 sec. 1 sent. 1 lit. b GDPR (“necessary for entering into an employment contract with us”).

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).
  • The general section says job information may also be used to send corporate-related information; this regional text states only application handling.

Use & Processing · Company commitment

EEA/UK/Swiss: Roblox says it makes no automated decisions with legal or similarly significant effects

For users in the EEA, UK or Switzerland, Roblox states that it does not use your Personal Information for automated decision-making that produces legal effects concerning you or similarly significantly affects you.

Supporting quotations

Automated Decision-Making
Please note that we do not use your Personal Information for automated decision making which produces legal effects concerning you or similarly significantly affects you.

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).
  • The statement covers decisions with legal or similarly significant effects, not all automated processing such as filtering or moderation.

Sharing & Disclosure · Company practice

EEA/UK/Swiss: billing details and usernames may go to named service providers acting for Roblox

For users in the EEA, UK or Switzerland, Roblox may share users' information, including Personal Information such as billing information or usernames, with third-party agents, contractors or service providers hired to perform services on its behalf. Its illustrative list: account integrity and security (Persona), analytics (Google LLC), user acquisition (AppsFlyer), community filtering and moderation, customer support, surveys and promotions (Reach3), and billing and payment gateways (Kount, Worldpay, PayPal, Incomm, Blackhawk, Google, Apple, Amazon, Windows Store, Xbox, PlayStation, Meta Quest, Xsolla), followed by hosting and content delivery.

Supporting quotations

Roblox may share users’ information, including Personal Information like billing information or usernames, with our third-party agents, contractors, or service providers who are hired to perform services on Roblox’s behalf.
These providers may operate or support certain functions of the Service. Below is an illustrative list of functions for which we may use third party service providers and the names of the providers we may use to perform these functions:
Account Integrity and Security (e.g., Persona);
Analytics services (e.g., Google LLC);
User Acquisition services (e.g., AppsFlyer);
Community filtering and moderation services;
Customer support services;
Surveys and promotions (e.g., Reach3);
Billing services and payment gateway providers (e.g., Kount, Worldpay, PayPal, Incomm, Blackhawk, Google, Apple, Amazon, Windows Store, Xbox, Playstation, Meta Quest, Xsolla); and

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).
  • The list is illustrative, not complete.

Sharing & Disclosure · Company commitment

EEA/UK/Swiss: service providers, including hosting, act under data processing agreements and only for their tasks

For users in the EEA, UK or Switzerland, Roblox's service providers also include hosting and content delivery networks (for example AWS, Equinix, CenturyLink, YouTube, Vimeo). Transfers to and processing by service providers rest on GDPR Article 28 together with data processing agreements Roblox concluded with them. They may use the information only for the specific tasks they were hired for, consistent with this policy, and for no other purpose, and Roblox takes steps so that providers with access can protect it.

Supporting quotations

Hosting and content delivery network services (e.g., AWS, Equinix, CenturyLink, YouTube, Vimeo).
The legal basis for this data transfer and processing activity is Article 28 of GDPR in conjunction with the data processing agreements we concluded with respective third-party agents. These agents and contractors are only allowed to use the information shared with them only for the specific tasks they’ve been hired to do and consistent with this Privacy Policy, and for no other purposes. Roblox takes steps such that all service providers with access to Personal Information are capable of protecting the information we share with them.

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Sharing & Disclosure · Company practice

EEA/UK/Swiss: creators get your username, metrics and region partly so they can meet non-EEA legal duties

For users in the EEA, UK or Switzerland, creators of experiences and content you interact with can access your username, display name, user ID, game metrics, UGC transaction details and regional location (based on IP address, without the IP address itself), so they can determine their player base and meet the legal requirements of your country. The stated bases are contract, compliance with a legal obligation under EEA or Member State law, and legitimate interest; Roblox says it is the creators' legitimate interest to comply with non-EEA legal obligations.

Supporting quotations

Further, the creators of the experiences you use or content you interact with will have access to your username, display name, user ID, game metrics, UGC transaction details, and your regional location (which we base on your IP address). We do not share your IP address with the creators.
The legal basis for this processing activity is Article 6 sec. 1 sent. 1 lit. b (“performance of a contract”), Article 6 sec. 1 sent. 1 lit. c (“compliance with legal obligation”) in compliance with the respective EEA or Member State law and lit. f (“legitimate interest”) GDPR. It is the creators’ legitimate interest to comply with non-EEA legal obligations.

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Sharing & Disclosure · Company practice

EEA/UK/Swiss: Roblox discloses your data to advertisers only with consent; measurement uses identifiers on its interest

For users in the EEA, UK or Switzerland, Roblox may, in accordance with applicable law, disclose information collected from or about you to advertisers or ad measurement companies to select ads or measure and improve ad effectiveness. Disclosure to third-party advertising partners relies on your consent. Data disclosed for ad measurement includes contact identifiers and device identifiers and relies on Roblox's legitimate interest.

Supporting quotations

In accordance with applicable laws, Roblox may disclose information collected from or about you with advertisers and/or advertising measurement companies to select advertisements for you, or measure and improve advertising effectiveness. The legal basis for disclosing information to third party advertising partners is Article 6 sec. 1 sent. 1 lit. a(“consent”). Data disclosed for advertising measurement purposes includes contact identifiers and device identifiers. The legal basis for this processing activity is Article 6 sec. sent. 1 lit. f (“legitimate interest”).

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).
  • The general section describes this disclosure as subject to choices "in accordance with applicable law"; for these regions the stated basis is consent, except for measurement.

Cross-references

Sharing & Disclosure · Context

EEA/UK/Swiss: purchase details exchanged with Commerce Providers rest on contract

For users in the EEA, UK or Switzerland, when you buy a Commerce Product directly from a Commerce Provider on Roblox, Roblox and the provider may exchange purchase information, including a transaction identifier, to fulfil the transaction; the legal basis is performance of a contract.

Supporting quotations

If you directly interact with a Commerce Provider to purchase a Commerce Product(s) on Roblox, Roblox and the Commerce Provider may need to exchange information about your purchase in order to fulfill the transaction.
The legal basis for data sharing required to facilitate a purchase you make through a fulfillment partner is Article 6 sec. 1 sent. 1 lit. b (“performance of a contract”).

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Sharing & Disclosure · Company commitment

EEA/UK/Swiss: your data is stored in the US, with Standard Contractual Clauses as an example safeguard

For users in the EEA, UK or Switzerland, Personal Information is sent to and stored on servers in the United States, and some agents and service providers are outside the EEA. US or other countries' data protection laws may not be as comprehensive as yours. Roblox says it will take reasonable steps to keep your privacy rights protected wherever it transfers data, for example by concluding the EU Standard Contractual Clauses with third parties.

Supporting quotations

Roblox is based in the U.S. Your Personal Information that we collect is sent to and stored on secure servers located in the United States of America. Such storage is necessary in order to process the information. Some of our agents and third-party service providers are located outside the European Economic Area, e.g. the United States. The data protection laws of the United States or other countries may not be as comprehensive or equivalent to those in your country of residence. Wherever we transfer your Personal Information, we will take reasonable steps so that your privacy rights continue to be protected, e.g. conclude the
with third parties.

Qualifications & exceptions

  • Applies to users in the EEA, UK or Switzerland (Section 7).

Account & Service Control · User right or choice

EEA users can ask for access to their data, have it corrected, deleted or restricted, and withdraw consent

If you are based in the European Economic Area, you may be entitled to some or all of these rights: to ask whether Roblox retains your Personal Information and to get access to or copies of it, including the purposes, categories, recipients and possible retention periods; to request correction, removal or restriction, for example if it is incomplete or inaccurate, no longer needed, or the consent it relied on was withdrawn; and to refuse or withdraw consent at any time, without affecting processing done before withdrawal. The list continues with further rights.

Supporting quotations

Your rights as a Data Subject
If you are a user based in the European Economic Area, you may be entitled to exercise some or all of the following rights:
Request (i) information whether your Personal Information is retained and (ii) access to or duplicates of your Personal Information retained, including the purposes of the processing, the categories of Personal Information concerned, and the data recipients as well as potential retention periods;
Request rectification, removal or restriction of your Personal Information, e.g. because (i) it is incomplete or inaccurate, (ii) it is no longer needed for the purposes for which it was collected, or (iii) the consent on which the processing was based has been withdrawn;
Refuse to provide and – without impact to data processing activities that have taken place before such withdrawal – withdraw your consent to processing of your Personal Information at any time;

Qualifications & exceptions

  • This list is introduced for users "based in the European Economic Area"; the wider heading also names the UK and Switzerland, so whether these exact rights are described for UK and Swiss users is not stated here.
  • "Some or all": which rights apply depends on the circumstances.

Account & Service Control · User right or choice

EEA users can object to interest-based processing and direct marketing, and take their data elsewhere

EEA users may also object, on grounds relating to their particular situation, to processing based on Roblox's or a third party's legitimate interests or on a task in the public interest; you explain your situation, and after assessing it Roblox will either stop processing or present compelling legitimate grounds for continuing. You may object to use of your Personal Information for direct marketing at any time. You may receive the Personal Information you provided in a structured, commonly used, machine-readable format and transmit it to another controller without hindrance, and have it sent directly where technically feasible.

Supporting quotations

Object, on grounds relating to your particular situation, to processing of your Personal Information, in case such processing is either based on our or a third party’s legitimate interests or on a performance of a task carried out in the public interest. In this case, please provide us with information about your particular situation. After the assessment of the facts presented by you we will either stop processing your Personal Information or present you our compelling legitimate grounds for an ongoing processing;
Object to the use of your Personal Information for direct marketing at any time;
Request (i) to receive the Personal Information concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and (ii) to transmit those data to another controller without hindrance from our side. Where technically feasible you shall have the right to have the Personal Information transmitted directly from us to another controller.

Qualifications & exceptions

  • Introduced for users based in the European Economic Area; "some or all" of the rights may apply.

Account & Service Control · Procedure

EEA users exercise rights through the contacts in Section 1 and may complain to regulators or go to court

EEA users may exercise these rights, ask questions or make complaints about Roblox's processing using the contact details in Section 1. They may also take legal action over any potential breach of their data protection rights and lodge complaints with the competent data protection regulators.

Supporting quotations

You may (i) exercise the rights referred to above, (ii) pose any questions, or (iii) make any complaints regarding our data processing by contacting us under the contact details set out above in Sec. 1.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data protection regulators.

Qualifications & exceptions

  • "Sec. 1" is read as the opening part with Roblox's contact details, including the EEA representative and EU data protection officer; numbers are not printed in this saved text.

Legal Rights & Agreement Rules · Context

Brazil: Section 7 lists the categories and purposes of processing for Brazilian users

For users in Brazil, Section 7 lists the Personal Information Roblox may process when you visit its websites and apps or use its services and products. Unlike the EEA list, most Brazil items do not state a legal basis. Under the conflict rule, these region-specific statements prevail over the general sections where they conflict.

Supporting quotations

If you live in Brazil
In the course of visiting our websites and apps, and/or using our services and products, we may process the following Personal Information:

Data Access & Collection · Company practice

Brazil: account, verification and phone data; friend suggestions by phone need explicit consent

For users in Brazil, Roblox processes your username and password to create your account, and email addresses and other information for verification or to enable features, citing a legitimate interest in a safe and secure Service, especially to protect children. An optional phone number is used for security and account access (mobile login, password recovery), with your authorization for your carrier to share account and device information solely to identify you and prevent fraud. Using your phone number to recommend you as a friend requires your explicit and informed consent.

Supporting quotations

Username and password to create your account.
Email addresses and other information you provided us with for added verification and/or to enable certain features. Roblox has a legitimate interest in providing a safe and secure Service, especially to protect children.
If you choose to provide a phone number, we will use the phone number for security and account access purposes, which will allow you to log in via mobile and recover a lost or forgotten password.
Additionally, with your explicit and informed consent, we may use your phone number to recommend you as a friend to others using Roblox.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).

Charges & Financial Obligations · Company practice

Brazil: Roblox keeps billing addresses, transaction details and payment history

For users in Brazil, billing and payment information for Developer Exchange or Robux or premium subscription purchases (name, billing address, card or other payment information) is processed. Card details saved with a third-party payment provider are stored by that provider, not Roblox. Roblox may also collect billing addresses and keep transaction details and purchase and payment history, and collects your contact details if you buy Robux for another user.

Supporting quotations

Billing and payment information, when you participate in Developer Exchange or purchase Robux or premium subscriptions on behalf of yourself or another user, including your name, billing address, credit card or other payment information and billing information. You may choose to save information such as your credit card number through a third-party payment provider; in such cases the information is not stored by Roblox; it is stored with the third-party partner. We may also collect billing addresses and retain transaction details and purchase and payment history.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).

Use & Processing · Company practice

Brazil: your posts are moderated and may train Roblox's filters; forum posts are visible to other users

For users in Brazil, comments and messages you post in public chats, forums, group walls and personal posts are monitored, filtered and moderated to remove profanity, Personal Information and other inappropriate conversations, and pre-filtered messages may be used for other purposes such as training and improving filters. Personal Information you post in forums is available to anyone with access, who may read, collect or use it, including to send unsolicited messages.

Supporting quotations

Comments or messages you post or transmit on Roblox via public chats, forums, group walls, personal post, etc. We process this information to monitor, filter and moderate this information for the purposes of being able to remove profanity, Personal Information, and other inappropriate conversations. Additionally, we may use pre-filtered comments and messages for other purposes such as training and improving our filter technology. Please note that any Personal Information submitted by you in forums and similar means offered by us is available to anyone who has access to this forum including other users. The Personal Information posted by you can be read, collected or used by other users of these forums and could be used to send unsolicited messages.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).

Data Access & Collection · Context

Brazil: support requests use your email, name and inquiry details

For users in Brazil, when you contact customer service, Roblox may process your email address, name and information about your inquiry to respond, fulfil your requests or provide support.

Supporting quotations

Information relating to contacting our customer service, e.g. when you report a problem, submit questions, concerns or comments. We may process your email address, your name and information relating to your inquiry or concern in order to respond to your communications, fulfill your requests, or provide other customer support.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).

Linking & Identification · Company practice

Brazil: social plugins may share data both ways, including posting your Roblox activity to your social profile

For users in Brazil, social media links and third-party plug-ins (for example social plugins from Google, Facebook or Twitter) may let certain information from your social media accounts be accessed by or shared with Roblox, and certain information about your use of Roblox may be posted to your profile on those platforms. If you sign in elsewhere with Roblox credentials and later delete your Roblox account, you may lose access to that site.

Supporting quotations

Social media links you add to your account.Information relating to your use of or interaction with third party plug-ins, e.g. social plugins from Google, Facebook or Twitter. When you use these features, certain information from your social media accounts may be accessed by or shared with Roblox, and likewise, certain information about your use of Roblox may be posted to your profile on those platforms. If you use your Roblox credentials to sign in to a third-party website or service, and later delete your Roblox account, you may lose access to such third-party website or service.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).
  • The general and EEA sections do not mention posting Roblox activity to your social profiles.

Use & Processing · Restriction or exception

Brazil: voice recordings train Roblox systems only with consent, and never Brazil private-server chats

For users in Brazil, Roblox may collect, process and store audio recordings to enable voice services and make Roblox safer. It says it will not use private server voice chat recordings of Brazil users for training or product improvement, and will use voice recordings for training and product improvement only with your consent.

Supporting quotations

When you use audio features from Roblox, we may collect, process, and store your audio recording to enable voice services and make Roblox safer. We will not engage in training or product improvement with private server voice chat recordings of Brazil users. With your consent, we will use voice recordings to inform training and product improvement.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).

Cross-references

Data Access & Collection · Company practice

Brazil: opt-in location tracking (13+) can personalize content and adult ads; VR movement is not stored

For users in Brazil, if you request or agree to location-based services (users 13 and older), Roblox may collect and track geolocation through a device or browser identifier, for example to personalize content or, for users 18 and older, ads; you can stop it through device settings, by not using the service or by uninstalling the apps. On VR platforms Roblox collects physical movement information to replicate your movement, uses it only to provide the Service and does not store it.

Supporting quotations

When you request or agree to location-based services (users 13 years old and older), we may collect and track geolocation information so that we can offer services that depend on us knowing where you are. Examples are personalizing content or personalized advertising for users 18 years old and older.
To stop us collecting your location information, you can update your device settings, stop using the service, or uninstall our mobile apps.
If you join our experiences on a VR platform, we will collect your physical movement information in order to replicate your movement in the experience. This information is only used to provide the Service and is not stored.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).

Data Access & Collection · Company practice

Brazil: event hosts get your username, email and ID; camera content is stored for the feature

For users in Brazil, joining a Creator-hosted virtual event may share your username, email and Roblox user ID with the hosting third-party platform so you can log in, and your activity there is subject to that platform's privacy policy and the Roblox Community Standards. Content from camera features or uploads containing Personal Information is collected, processed and stored to accomplish the feature's purpose. For other features offered to users other than children, the data collected and its uses will be evident at collection.

Supporting quotations

If you join a virtual event hosted by a Creator, data such as your username, email, and Roblox user ID may be shared with the third-party platform that hosts events. Such data is used to allow you to log in to the experience. Your activity during a Creator Event is subject to the third party platform’s privacy policy as well as the
If you decide to use these features and upload content, we will collect, process, and store that content to accomplish the purpose of the feature.
Information required for other features or activities, which may be available to our users other than children.
The data being collected for such features and their intended uses will be evident at the time of data collection.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).
  • Unlike the EEA text, the Brazil camera item does not say content is kept only as long as needed.

Linking & Identification · Company practice

Brazil: Contact Importer is opt-in; gameplay, device behavior and search history are linked to your account

For users in Brazil, opting in to Contact Importer means you consent to sharing your mobile contacts' names and phone numbers with Roblox to help connect with friends. Roblox also collects information about how you interact with the Services and links it to your account, for example game-state information to detect Terms violations, device-interaction behavior for security, and search history for recommendations, and may share your username and transaction details with UGC creators or later owners when you transact in UGC.

Supporting quotations

If you opt-in to the Contact Importer feature, you consent to sharing with Roblox the first and last names and phone numbers of your contacts in your address book on your mobile phone, either at the time you register for our Service or otherwise. We do so to help you connect with your friends on our Service.
To improve your experience and support our safety efforts, we collect information about how you interact with the Services and we connect this information with your account.
collect information from your search history to give you similar recommendations

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).

Data Access & Collection · Company practice

Brazil: voluntary surveys may ask for Personal Information; contests use contact details for prizes

For users in Brazil, voluntary research, surveys or studies may collect likes, interests, habits and lifestyle preferences and may ask for Personal Information. For contests, sweepstakes, giveaways, prize draws and other promotions, Roblox may process contact information such as name, email or phone number for prize fulfillment and other information the promotion needs.

Supporting quotations

When you respond to or participate in voluntary research or surveys or studies.
These surveys may ask for Personal Information.
We may process certain contact information (such as your name, email address, and/or phone number) for prize fulfillment purposes, as well as other information or content needed for the specific promotion.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).

Use & Processing · Company practice

Brazil: Roblox uses data to choose ads, measure them and market itself elsewhere; no personalized ads under 18

For users in Brazil, Roblox processes Personal Information to display ads on Roblox, using information it collects and receives from partners to decide which ads to show; depending on where you live, partners may also show ads directly. Roblox does not show personalized ads to users under 18. It processes information to measure and improve ad effectiveness, may process Personal Information to market its services on other sites and apps such as social media, and when you create an Ad Account may collect name, email, address and business information and keep transaction and payment history.

Supporting quotations

We process Personal Information to display ads on Roblox. We use information we collect and receive from partners to decide which ads to show you on Roblox. Depending on where you live, Roblox also may work with partners to directly show you ads on Roblox. We do not show personalized ads to users under the age of 18 on Roblox.
Roblox will process information collected from or about you to measure and improve advertising effectiveness.
To market our services on other sites and apps, for example, via social media platforms in order to bring new users to our websites and to maintain and increase our user base, we may process Personal Information.
When you choose to create an Ad Account, we may collect additional information for your account (such as name, email, address, business information, etc.) in order to create an account. We may also retain transaction details and purchase and payment history.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).
  • Unlike the EEA text, the Brazil items do not say personalized ads or off-site marketing require consent.

Charges & Financial Obligations · Context

Brazil: Developer Exchange tax forms are processed to meet US anti-money-laundering rules

For users in Brazil, the IRS W-9 or W-8 forms required for the Developer Exchange Program are processed under Roblox's stated legitimate interest in complying with legal requirements, especially US anti-money laundering laws.

Supporting quotations

Information required for participating in our Roblox Developer Exchange Program, like the IRS W-9 form (for U.S. taxpayers) or W-8 form (for non-U.S. taxpayers). It is our legitimate interest to comply with the legal requirements, especially with regard to U.S. anti-money laundering laws.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).

Data Access & Collection · Company practice

Brazil: login data includes IP address, device and browser details and MAC addresses

For users in Brazil, Roblox processes login information that may include your IP address, device type, username, password, date and time of visit, browser version, operating system and language settings, MAC addresses and user ID, to provide the Service, citing a legitimate interest in the Services' stability and security. It also processes account information such as name, username, login details, regional location, user-generated content, contact details you choose to give, and other Personal Information used to take part in the Service.

Supporting quotations

Login information, which may include your IP address, device type, username, password, date and time of your visit, information on your browser version, information on your operating system, including language settings, MAC addresses, and User ID. We will process this information to provide you with our Service. It is in our legitimate interest to guarantee the Services’ stability and security.
Account information, e.g. information such as your name, username, login and password details, regional location information, user-generated content, contact details that you choose to provide to us, and other Personal Information that are used for participating in the Service we are offering. We process this information to provide our Services to you.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).
  • The general and EEA sections do not list login data such as MAC addresses in this form.

Data Access & Collection · Context

Brazil: job application data is processed to handle your application

For users in Brazil, information you send with a job application (name, email, employment details, CV or employment history) is processed to handle and respond to the application, and immersive spaces for prospective employees such as the Roblox Career Center may be recorded to provide the experience.

Supporting quotations

Information relating to a job application made by you, like your name, email address, employment details, CV, resume or other details of your employment history sent by you. If you engage with Roblox in an immersive space for prospective employees, such as the Roblox Career Center, such a space may be recorded in order to provide the experience. We will process this information to process and respond to your job application.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).

Use & Processing · Company commitment

Brazil: Roblox says it makes no automated decisions with legal or similarly significant effects

For users in Brazil, Roblox states that it does not use your Personal Information for automated decision-making that produces legal effects concerning you or similarly significantly affects you.

Supporting quotations

Automated Decision-Making
Please note that we do not use your Personal Information for automated decision making which produces legal effects concerning you or similarly significantly affects you.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).

Sharing & Disclosure · Company commitment

Brazil: billing details and usernames may go to named service providers limited to their tasks

For users in Brazil, Roblox may share information, including Personal Information such as billing information or usernames, with third-party agents, contractors or service providers hired to work on its behalf. The illustrative list matches the other sections: account integrity and security (Persona), analytics (Google LLC), user acquisition (AppsFlyer), community filtering and moderation, customer support, surveys and promotions (Reach3), billing and payment gateways (Kount, Worldpay, PayPal, Incomm, Blackhawk, Google, Apple, Amazon, Windows Store, Xbox, PlayStation, Meta Quest, Xsolla) and hosting and content delivery (AWS, Equinix, CenturyLink, YouTube, Vimeo). They may use the information only for their specific tasks, consistent with this policy, and Roblox takes steps so they can protect it.

Supporting quotations

Roblox may share users’ information, including Personal Information like billing information or usernames, with our third-party agents, contractors, or service providers who are hired to perform services on Roblox’s behalf.
Below is an illustrative list of functions for which we may use third party service providers and the names of the providers we may use to perform these functions:
Account Integrity and Security (e.g., Persona);
Analytics services (e.g., Google LLC);
User Acquisition services (e.g., AppsFlyer);
Community filtering and moderation services;
Customer support services;
Surveys and promotions (e.g., Reach3);
Billing services and payment gateway providers (e.g., Kount, Worldpay, PayPal, Incomm, Blackhawk, Google, Apple, Amazon, Windows Store, Xbox, Playstation, Meta Quest, Xsolla); and
Hosting and content delivery network services (e.g., AWS, Equinix, CenturyLink, YouTube, Vimeo).
These agents and contractors are only allowed to use the information shared with them only for the specific tasks they’ve been hired to do and consistent with this Privacy Policy, and for no other purposes. Roblox takes steps such that all service providers with access to Personal Information are capable of protecting the information we share with them.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).
  • The list is illustrative, not complete.

Sharing & Disclosure · Company practice

Brazil: creators see your username, metrics and region; advertisers may get contact and device identifiers

For users in Brazil, creators of experiences you use can access your username, display name, user ID, game metrics, UGC transaction details and regional location (from your IP address, without the IP itself), to size their player base and meet your country's legal requirements. In accordance with applicable laws, Roblox may disclose information to advertisers and ad measurement companies to select ads or measure their effectiveness, including contact identifiers and device identifiers. Buying from a Commerce Provider on Roblox may involve exchanging purchase details and a transaction identifier.

Supporting quotations

Further, the creators of the experiences you use or content you interact with will have access to your username, display name, user ID, game metrics, UGC transaction details, and your regional location (which we base on your IP address). We do not share your IP address with the creators.
In accordance with applicable laws, Roblox may disclose information collected from or about you with advertisers and/or advertising measurement companies to select advertisements for you, or measure and improve advertising effectiveness. Data disclosed for this purpose includes contact identifiers and device identifiers.
If you directly interact with a Commerce Provider to purchase a Commerce Product(s) on Roblox, Roblox and the Commerce Provider may need to exchange information about your purchase in order to fulfill the transaction.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).
  • Unlike the EEA text, this Brazil text does not state that disclosure to advertisers requires consent.

Sharing & Disclosure · Company commitment

Brazil: your data is stored in the US under a transfer mechanism recognized by Brazilian law

For users in Brazil, Personal Information is sent to and stored on servers in the United States, and some agents and service providers are outside Brazil. US or other countries' data protection laws may not be as comprehensive as Brazil's. Roblox says it will take reasonable steps to rely on a legitimate international transfer mechanism as set out in Brazilian data protection laws.

Supporting quotations

Roblox is based in the U.S. Your Personal Information that we collect is sent to and stored on secure servers located in the United States of America.
Some of our agents and third-party service providers are located outside of Brazil, e.g. the United States. The data protection laws of the United States or other countries may not be as comprehensive or equivalent to those in Brazil. Wherever we transfer your Personal Information, we will take reasonable steps so that we rely on a legitimate international transfer mechanism, as set out in Brazilian data protection laws.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).

Not stated here

  • The specific transfer mechanism is not named.

Account & Service Control · User right or choice

Brazil: you can confirm, access, correct, delete, port and object to processing of your data under the LGPD

As a data subject in Brazil you have the right to: confirm whether Roblox processes your Personal Information; access it; correct incomplete, inaccurate or outdated information; have unnecessary or excessive information, or information processed in non-compliance with the LGPD, anonymized, blocked or deleted; port your information to another provider on express request, subject to Roblox's trade secrets and the supervisory authority's regulations; have information processed on consent deleted when consent is withdrawn, where applicable; learn which public and private entities Roblox shared it with; learn about the option of not consenting and its consequences; withdraw consent where applicable; and object to processing that violates the LGPD.

Supporting quotations

As a data subject located in Brazil, you have rights regarding your Personal Information.
Confirm whether or not we process your Personal Information
Access your Personal Information
Correct incomplete, inaccurate, or outdated Personal Information
Anonymize, block or delete unnecessary, excessive Personal Information or data processed in non-compliance with LGPD
Port your Personal Information to another service provider, upon express request and subject to our trade secrets, in accordance with the regulations of the supervisory authority
Delete Personal Information processed under your consent if it is withdrawn, when applicable
Request information about public and private entities with which we shared your Personal Information
Request information about the possibility of not providing consent and about the consequences of doing so
Withdraw your consent, where applicable
Request information about with whom we share your Personal Information
Object to processing activities that violates LGPD’s provisions

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).
  • Portability is subject to Roblox's trade secrets and the supervisory authority's rules.

Account & Service Control · Procedure

Brazil: Roblox verifies your identity before answering a rights request

For users in Brazil, before responding to a request Roblox may ask for information to confirm your identity, and it will only respond after validating your identity.

Supporting quotations

Before responding to any of your requests, we may ask you to provide us with some information to confirm your identity. We will only respond to your request after validating your identity.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).

Account & Service Control · Restriction or exception

Brazil: rights are not absolute, and you can appeal privacy decisions to the Brazilian DPO

For users in Brazil, these rights are not absolute and may not apply in some circumstances: Roblox may keep processing and retaining Personal Information despite a request to delete, object, block or anonymize it, to meet legal, contractual or regulatory obligations, to protect and exercise rights including in judicial, administrative and arbitration proceedings, and as otherwise required by law. You exercise rights or ask questions through the Customer Support Form. To appeal a decision about your privacy rights, email the Brazilian Data Protection Officer at dpo.roblox@leonardi.adv.br or use the contacts in Section 1.

Supporting quotations

Please also note that these rights are not absolute and may not apply in certain circumstances. For example, we may continue to process and retain Personal Information regardless of your request to delete, object, block or anonymize it, to comply with legal, contractual and/or regulatory obligations, and to protect and exercise rights, including in judicial, administrative and arbitration proceedings, and as otherwise required by law. To exercise your rights or ask questions, you can contact us by completing this
To appeal a decision about your privacy rights, please contact our Brazilian Data Protection Officer by emailing dpo.roblox@leonardi.adv.br, or otherwise reaching out to us as described in Section 1.

Qualifications & exceptions

  • Applies to users in Brazil (Section 7).
  • "Section 1" is read as the opening part with Roblox's contact details; numbers are not printed in this saved text.

Legal Rights & Agreement Rules · Context

Downloadable translations are dated either April 30, 2026 or November 1, 2026

The page lists downloadable PDF versions of the policy in many languages. Some file names carry the date 20261101 (for example Arabic, US English, Dutch) and others 20260430 (for example German, Spanish, Brazilian Portuguese), which suggests some translations reflect an April 30, 2026 version rather than the November 1, 2026 text. The English version controls if a translation conflicts with it.

Supporting quotations

20261101.pdf
DE - Roblox-Datenschutz- und Cookie-Richtlinie 20260430.pdf
EN-US - Roblox Privacy and Cookie Policy 20261101.pdf
NL - Privacy- en cookiebeleid van Roblox 20261101.pdf
20260430.pdf

Not stated here

  • The PDF contents are not supplied; the dates come only from file names.