Privacy Policy

Legal Rights & Agreement Rules · Context

Epic Games Privacy Policy: what it describes and its date

This is the Epic Games Privacy Policy, last updated April 22, 2026. It describes the different ways Epic may collect, use, secure, retain, disclose, and otherwise process information that can be used to identify you on, through, or in connection with the Epic Services. Epic Games, Inc. is headquartered in Cary, North Carolina, with subsidiaries and operations around the world behind products including Fortnite and Unreal Engine.

Supporting quotations

EPIC GAMES PRIVACY POLICY

Last Updated: April 22, 2026

Epic Games, Inc. is headquartered in Cary, North Carolina. We and our subsidiaries have offices and operations located around the world that help create and deliver some of your favorite products and services, including games like Fortnite and developer tools like Unreal Engine.

This Epic Games Privacy Policy (this “Policy”) describes the different ways we may collect, use, secure, retain, disclose, and otherwise process information that can be used to identify you on, through, or in connection with the Epic Services (defined below).

Legal Rights & Agreement Rules · Context

“Epic” means the entity that controls your information

When the Policy says “Epic” (or “we,” “us,” or “our”), it means the Epic entity that controls and is responsible for your information, such as Epic Games, Inc. and the subsidiaries and affiliates that provide the Epic Services. The Policy applies when Epic acts as a data controller of your information.

Supporting quotations

1. WHAT DOES THIS POLICY COVER?

When we refer to “Epic” (or any similar terms like “we,” “us,” or “our”) in this Policy, we mean the Epic entity that controls and is responsible for your information, such as Epic Games, Inc. and its subsidiaries and affiliates that provide the Epic Services. This Policy applies when Epic acts as a data controller of your information. You can find details about the data controller responsible for your information in Section 12 (How Can You Contact Us?).

Qualifications & exceptions

• Details of the data controller responsible for your information are in Section 12 (How Can You Contact Us?).

Legal Rights & Agreement Rules · Context

“Epic Services” covers linked games, stores, tools, apps, sites, events

“Epic Services” means any Epic products or services that directly link to this Policy, including: games (Fortnite, Rocket League, Fall Guys, Horizon Chase 2); marketplaces (Epic Games Store, Fab); developer tools (Unreal Engine, MetaHuman, Unreal Editor for Fortnite); applications (Postparty); Epic websites and their subdomains; and live events where this Policy is posted.

Supporting quotations

We use the term “Epic Services” to describe any Epic products or services that directly link to this Policy, including:

our games (e.g., Fortnite, Rocket League, Fall Guys, and Horizon Chase 2);

our marketplaces (e.g., Epic Games Store and Fab);

our developer tools (e.g., Unreal Engine, MetaHuman, and Unreal Editor For Fortnite);

our applications (e.g., Postparty);

our websites and their respective subdomains (e.g., www.epicgames.com, www.fortnite.com, www.rocketleague.com, and www.fallguys.com); and

live events where this Policy is posted.

Qualifications & exceptions

• Only products or services that directly link to this Policy are included.

Not stated here

• The contents of the linked product sites, stores, tools, applications, and live-event postings are not supplied in this source; this card states only that those offerings link to this Policy.

Cross-references

• referred to by (model-proposed): Each service maps to the Epic entity responsible for it — The per-service entity map assigns responsibility for the same offerings the Epic Services definition lists.

Legal Rights & Agreement Rules · Procedure

Read the Policy and other agreements before using Epic Services

Before using any Epic Services, readers are asked to read this entire Policy carefully plus any other agreements that apply to their use, and to confirm they understand and agree to them; questions go to the contact information in Section 12. Use is also subject to additional terms: for example, playing Fortnite, Rocket League, Fall Guys, or Horizon Chase 2 requires reviewing and accepting the Epic Games Terms of Service.

Supporting quotations

Please read this entire Policy carefully and any other agreements that apply to your use of the Epic Services, and confirm you understand and agree to them, before using any of the Epic Services. If you have any questions, you can always reach out to us using the contact information listed in Section 12 (How Can You Contact Us?).

Note that your use of the Epic Services is also subject to additional terms and conditions. For example, you must review and accept the Epic Games Terms of Service to play Fortnite, Rocket League, Fall Guys, and Horizon Chase 2.

Not stated here

• The Epic Games Terms of Service text is not supplied in this source; this card states only that playing the listed games requires reviewing and accepting it, not what it contains.

Legal Rights & Agreement Rules · Context

Combined de-identified data is treated as identifiable

This Policy is designed to help readers understand how Epic handles information that can be used to identify them. In some cases Epic may also create or collect information that does not identify them individually, such as de-identified or aggregated information. If Epic combines that type of information with information that identifies the reader, Epic treats the combined information as information that can be used to identify them, subject to this Policy.

Supporting quotations

This Policy is designed to help you understand how we handle information that can be used to identify you. In some cases, we may also create or collect information that does not identify you individually, such as de-identified or aggregated information. If we combine this type of information with information that identifies you, we will treat the combined information as information that can be used to identify you subject to this Policy.

Legal Rights & Agreement Rules · Company practice

Corporate transactions, legal claims, and legal compliance

To facilitate corporate transactions (legitimate interests): Epic may transfer reader information within its corporate group in a restructure and to a third-party company in connection with, or during negotiations for, a sale, merger, divestiture, restructuring, reorganization, dissolution, bankruptcy, liquidation, or other transfer of some or all assets, or another similar corporate activity. To establish and defend legal claims (legitimate interests or legal obligations): if the reader brings a legal claim, Epic may use their information to investigate, respond, and defend; where Epic detects misuse, it may use information to establish and pursue its own claims. To comply with applicable laws, regulations, and legal processes (legal obligations): Epic may use reader information to respond to valid law enforcement and government requests including subpoenas, court orders, and search warrants, and may use date of birth to facilitate compliance with youth protection laws.

Supporting quotations

To facilitate corporate transactions (legitimate interests): For example, we may transfer your information within our corporate group in the event of a company restructure and to a third-party company in connection with, or during negotiations for, a sale, merger, divestiture, restructuring, reorganization, dissolution, bankruptcy, liquidation, or other transfer of some or all our assets, or another similar corporate activity.

To establish and defend legal claims (legitimate interests or legal obligations): For example, if you bring a legal claim against us, we may use your information to investigate and respond to that claim and defend ourselves; and where we detect misuse of the Epic Services, we may use your information to establish and pursue our legal claims.

To comply with applicable laws, regulations, and legal processes (legal obligations): For example, we may use your information to respond to valid requests from law enforcement and government authorities, including subpoenas, court orders, and search warrants; and we may use your date of birth to facilitate compliance with youth protection laws.

Legal Rights & Agreement Rules · Context

US-based Epic may process information outside the reader's country

Epic Games, Inc. is based in the United States but operates globally to give users around the world a better experience on the Epic Services. This means Epic may process, store, and transfer reader information outside the country where the reader lives.

Supporting quotations

6. WHERE DO WE PROCESS INFORMATION?

Epic Games, Inc. is based in the United States, but we operate globally to help provide users all around the world with a better experience on the Epic Services. This means that Epic may process, store, and transfer your information outside the country where you live.

Legal Rights & Agreement Rules · Company commitment

Cross-border transfers use legal mechanisms and safeguards

Data protection laws in destination countries may differ from those where the reader lives. When Epic transfers information outside the country where it was collected, it relies on appropriate legal mechanisms to support the transfer and implements technical, organizational, and physical safeguards, including model contractual clauses such as the European Commission's Standard Contractual Clauses and, where applicable, adequacy decisions by regulatory authorities. Where permitted by law, using the Epic Services authorizes Epic to process reader information in any country where it operates, including the United States. The location of the Epic entity responsible for operating the Services used is pointed to Section 12.

Supporting quotations

The data protection laws in these countries may be different than those where you live. When we transfer your information outside the country where it was collected, we rely on appropriate legal mechanisms to support the transfer and implement technical, organizational, and physical safeguards to secure your information. These measures include model contractual clauses (such as the European Commission’s Standard Contractual Clauses) and, if applicable, adequacy decisions by regulatory authorities.

Where permitted by law, your use of the Epic Services authorizes us to process your information in any country where we operate, including the United States. To learn more about the location of the Epic entity responsible for operating the Epic Services you use, please see Section 12 (How Can You Contact Us?).

Qualifications & exceptions

• Authorization by use applies where permitted by law.
• The Commission's Clauses are named as an example mechanism; their text is not stated here.

Legal Rights & Agreement Rules · Company practice

Policy updates change the top date, sometimes with notice

Epic will update this Policy from time to time to reflect changes in its practices and relevant laws. When it does, it will change the date noted at the top of the Policy. In some cases, Epic may also notify readers of the changes by email or within the applicable Epic Services. Readers are asked to review the Policy regularly to understand their relationship with Epic and how Epic processes information that can be used to identify them on, through, or in connection with the Services.

Supporting quotations

8. WILL THIS POLICY BE UPDATED?

Yes, we’ll update this Policy from time to time to reflect changes in our practices and relevant laws. When we do so, we’ll change the date noted at the top of this Policy. In some cases, we may also notify you of the changes by email or within the applicable Epic Services. Please review this Policy regularly to make sure that you understand your relationship with Epic and the ways we collect, use, secure, retain, disclose, and otherwise process your information that can be used to identify you on, through, or in connection with the Epic Services.

Qualifications & exceptions

• Direct notice of changes happens only in some cases.

Legal Rights & Agreement Rules · Context

Meaningful choices vary with the reader's relationship

Epic seeks to provide readers with meaningful choices about the information it collects. The specific choices available often vary depending on the exact nature of the relationship, such as the Epic Services used.

Details not recorded for this card

Supporting quotations

9. WHAT CHOICES AND CONTROLS DO YOU HAVE?

We seek to provide you with meaningful choices about the information we collect. The specific choices available to you often vary depending on the exact nature of our relationship with you, such as the Epic Services you use. Common examples include:

Legal Rights & Agreement Rules · User right or choice

Account, access, marketing, cookie, and youth choices

Common examples of choices: readers can correct their information through their Epic account; request that Epic provide access to, or correct or delete, collected information; change email marketing preferences at any time, such as through opt-out mechanisms in marketing emails, account settings, or direct contact; change privacy settings on third-party platforms, websites, and services to limit what they disclose to Epic; manage cookies and other automatic data collection technologies through browser or device settings, noting that disabling cookies may leave parts of the Services not working properly and some features unavailable; appeal or request human review of automated decisions as required by applicable law; readers under 18 with an Epic account can request removal or anonymization of certain content they provided; and parents or guardians can adjust settings for their child's Epic account using Parental Controls.

Supporting quotations

You can correct your information through your Epic account.

You can request that we provide access to, or correct or delete, information we have collected from you.

You can change your email marketing preferences at any time (e.g., by using the opt-out mechanism in our marketing emails, updating your Epic account settings, or contacting us directly).

You can change your privacy settings on third-party platforms, websites, and services to limit the information they disclose to us.

You can manage cookies and other automatic data collection technologies through your browser or device settings (e.g., by blocking, deleting, or limiting them). Please note that disabling cookies may cause parts of the Epic Services to not work properly and some features may become unavailable.

You can appeal or request human review of decisions made by automated means as required by applicable law.

If you’re under the age of 18 and have an Epic account, you can request that we remove or anonymize certain content you provided on the Epic Services.

Parents/guardians can adjust settings for their child’s Epic account using Parental Controls.

Qualifications & exceptions

• Cookie disabling may break parts of the Services.
• Automated-decision review applies as required by applicable law.

Not stated here

• The linked Parental Controls page is not supplied in this source.

Legal Rights & Agreement Rules · Procedure

Requests go through Section 12 contacts with identity checks

To submit a request, readers are asked to contact Epic using the Section 12 contact information. Epic may ask for additional information to verify identity before completing the request.

Supporting quotations

To submit a request, please contact us using the contact information listed in Section 12 (How Can You Contact Us?). We may ask for additional information to verify your identity before completing your request.

Legal Rights & Agreement Rules · Context

Some regions grant information choices by law; see Sections 10, 11

Some parts of the world provide individuals with specific choices related to their information by right under applicable law. More information is pointed to Section 10 for residents of certain US states and Section 11 for individuals in the EEA, UK, or Switzerland.

Supporting quotations

Some parts of the world provide individuals with specific choices related to their information by right under applicable law. Please see Sections 10 (Additional Notice For Residents of Certain US States) and 11 (Additional Notice for Individuals Located in the European Economic Area, the United Kingdom, or Switzerland) for more information.

Qualifications & exceptions

• Regional-right detail lives in Sections 10 and 11, not here.

Legal Rights & Agreement Rules · Context

California notice in CCPA format with CCPA-defined terms

For California residents: the California Consumer Privacy Act (CCPA) requires Epic to provide California residents with information regarding their personal information in a different format. Terms used in this subsection are defined by the CCPA.

Supporting quotations

10. ADDITIONAL NOTICE FOR RESIDENTS OF CERTAIN US STATES

A. For California Residents

The California Consumer Privacy Act (CCPA) requires us to provide residents of California with information regarding their personal information in a different format. Terms used in this subsection are defined by the CCPA.

Legal Rights & Agreement Rules · User right or choice

California residents can know, access, correct, and delete

A California resident has the right to know and access what personal information Epic collects about them, including the categories collected and sources, the business or commercial purposes for collection, the categories of third parties with whom Epic discloses personal information, and the specific pieces collected; to correct their personal information; and to deletion of their personal information.

Supporting quotations

If you are a California resident, you have the right to:

know and access what personal information we collect about you, including the categories of personal information collected and sources, the business or commercial purposes for collection, the categories of third parties with whom we disclose personal information, and the specific pieces of personal information collected;

correct your personal information; and

deletion of your personal information.

Cross-references

• has exception (model-proposed): California deletion yields to operational and legal retention — California deletion is granted, then limited: Epic deletes unless retention is necessary for the listed operational or legal reasons.
• has exception (model-proposed): California responses may be limited for claims, law, or police — California request responses are granted, then limited: Epic may limit responses where necessary for legal claims, legal compliance, or law enforcement cooperation.

Legal Rights & Agreement Rules · Restriction or exception

California deletion yields to operational and legal retention

Epic will delete a California resident's personal information unless retention is necessary for operational or legal reasons, including to provide requested Services, complete transactions, or perform its contract; ensure security or integrity or debug the Services; exercise legal rights on behalf of itself or others; enable internal uses aligned with user expectations; or comply with the California Electronic Communications Privacy Act or another legal obligation.

Supporting quotations

We will delete your personal information, unless retention is necessary for operational or legal reasons, including to:

provide the Epic Services you requested, complete transactions, or perform our contract with you;

ensure the security or integrity of the Epic Services, or debug the Epic Services;

exercise legal rights on behalf of ourselves or others;

enable internal uses aligned with user expectations; or

comply with the California Electronic Communications Privacy Act, or another legal obligation.

Cross-references

• exception to (model-proposed): California residents can know, access, correct, and delete — California deletion is granted, then limited: Epic deletes unless retention is necessary for the listed operational or legal reasons.

Legal Rights & Agreement Rules · Restriction or exception

California responses may be limited for claims, law, or police

Epic may also limit how it responds to California requests, including when necessary to handle legal claims, comply with applicable laws or legal obligations, or cooperate with law enforcement.

Supporting quotations

We may also limit how we respond to your requests, including when necessary to:

handle legal claims;

comply with applicable laws or legal obligations; or

cooperate with law enforcement.

Cross-references

• exception to (model-proposed): California residents can know, access, correct, and delete — California request responses are granted, then limited: Epic may limit responses where necessary for legal claims, legal compliance, or law enforcement cooperation.

Legal Rights & Agreement Rules · Context

California detail points to Sections 3, 4, and 5

For the categories of sources of personal information, readers are pointed to Section 3; for the business or commercial purposes of collection including sensitive personal information, to Section 4; and for the categories of third parties receiving disclosure, to Section 5.

Details not recorded for this card

Supporting quotations

For more information on (1) the categories of sources from which your personal information is collected, please see Section 3 (What Information Do We Collect and How?); (2) the business or commercial purposes for collecting your personal information, including sensitive personal information, please see Section 4 (Why Do We Process Information?); and (3) the categories of third parties to whom we disclose your personal information, please see Section 5 (Who Do We Disclose Information To?).

Legal Rights & Agreement Rules · Context

Listed states' comprehensive laws apply as of the Policy date

For other US state residents: Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have each enacted a comprehensive privacy law in effect as of the date of this Policy. Other states may enact comprehensive privacy laws in the future. These laws require Epic to provide residents of those states with information regarding their personal data in a different format. Terms used in this subsection are defined by the applicable privacy law in the reader's state of residence.

Supporting quotations

B. For Other US State Residents

Certain US states, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have each enacted a comprehensive privacy law, which is in effect as of the date of this Policy. Other states may enact comprehensive privacy laws in the future. These laws require us to provide residents of those states with information regarding their personal data in a different format. Terms used in this subsection are defined by the applicable privacy law in your state of residence.

Qualifications & exceptions

• Coverage is stated as of the date of this Policy; future state laws are not covered here.

Legal Rights & Agreement Rules · User right or choice

Listed-state residents can know, copy, correct, and delete

Residents of those states have the right to know whether Epic is processing their personal data; to access and obtain a copy of their personal data; to correct their personal data, except for residents of Iowa; and to deletion of their personal data.

Supporting quotations

If you are a resident of those states, you have the right to:

know whether we are processing your personal data;

access and obtain a copy of your personal data;

correct your personal data (except for residents of Iowa); and

deletion of your personal data.

Qualifications & exceptions

• Iowa residents are excepted from the correction right.

Legal Rights & Agreement Rules · Restriction or exception

Other-state responses limited by legal and operational needs

Certain legal obligations and operational needs may limit how Epic responds to these requests. Listed exceptions include providing requested Services or performing contracts; conducting research to develop or improve the Services; identifying and fixing technical issues; performing other internal operations consistent with user expectations; and preventing or responding to security incidents, fraud, identity theft, or other illegal or harmful activities.

Supporting quotations

Certain legal obligations and operational needs may limit how we respond to your requests. These exceptions may include:

providing the Epic Services you request or performing our contracts;

conducting research to develop or improve the Epic Services;

identifying and fixing technical issues;

performing other internal operations consistent with user expectations;

preventing or responding to security incidents, fraud, identity theft, or other illegal or harmful activities;

Qualifications & exceptions

• The exceptions list continues in the following packet; this card covers only the exceptions stated here.

Legal Rights & Agreement Rules · Restriction or exception

Other-state exceptions continue: claims, law, police

The remaining listed exceptions to other-state request responses are handling legal claims; complying with applicable laws or legal obligations; and cooperating with law enforcement.

Supporting quotations

handling legal claims;

complying with applicable laws or legal obligations; or

cooperating with law enforcement.

Qualifications & exceptions

• This card completes the exceptions list begun in the previous packet.

Legal Rights & Agreement Rules · Context

Other-state detail points to Sections 2 through 5

For processing of sensitive data from a known child under 13, readers are pointed to Section 2; for the categories of personal data processed, to Section 3; for processing purposes, to Section 4; and for the categories of third parties receiving disclosure and the categories of personal data disclosed, to Section 5.

Details not recorded for this card

Supporting quotations

For more information on (1) our processing of sensitive data from a known child under the age of 13, please see Section 2 (How Do We Process Children’s Information?); (2) the categories of personal data processed by us, please see Section 3 (What Information Do We Collect and How?); (3) our purposes for processing personal data, please see Section 4 (Why Do We Process Information?); and (4) the categories of third parties with whom we disclose personal data and the categories of personal data we disclosed, please see Section 5 (Who Do We Disclose Information To?).

Legal Rights & Agreement Rules · Procedure

Rights requests need verification; agents need signed permission

To exercise privacy rights, readers are asked to contact Epic through the Section 12 contacts. Only the reader, or an authorized representative on behalf of a California resident, may submit a verifiable request, which must include enough information to confirm identity and understand the request. Account holders may be asked to log in to verify identity. Authorized agents of California residents must include written permission signed by the resident, who may also need to verify identity directly. Requests may be denied where identity or authority cannot be verified. Appeals use the same Section 12 contacts.

Supporting quotations

C. Exercising Your Privacy Rights

To exercise your privacy rights, please contact us using the contact information listed in Section 12 (How Can You Contact Us?). Only you (or an authorized representative on behalf of a California resident) may submit a verifiable request, which must include enough information for us to confirm your identity and understand the request. If you have an Epic account, we may ask you to log in to verify your identity. Authorized agents of California residents must include written permission signed by the resident, who may also need to verify their identity directly. Requests may be denied if we cannot verify your identity or authority. Appeals can be submitted using the same contact information listed in Section 12 (How Can You Contact Us?).

Cross-references

• refers to (model-proposed): Privacy questions and rights requests go to privacy emails — Rights requests made through Section 12 contacts resolve to the privacy email and Legal Department addresses.

Legal Rights & Agreement Rules · Company commitment

No discrimination for exercising privacy rights

Epic will not discriminate against readers for exercising any of their privacy rights under applicable law.

Details not recorded for this card

Supporting quotations

We will not discriminate against you for exercising any of your privacy rights under applicable law.

Legal Rights & Agreement Rules · Context

EEA, UK, and Swiss notice in GDPR format with GDPR terms

The General Data Protection Regulation (GDPR), along with similar laws in the United Kingdom and Switzerland, requires Epic to provide individuals located in the European Economic Area, the UK, or Switzerland with information regarding their personal data in a different format. Terms used in this section are defined by the GDPR.

Supporting quotations

11. ADDITIONAL NOTICE FOR INDIVIDUALS LOCATED IN THE EUROPEAN ECONOMIC AREA, THE UNITED KINGDOM, OR SWITZERLAND

The General Data Protection Regulation (GDPR), along with similar laws in the United Kingdom (UK) and Switzerland, requires us to provide individuals located in the European Economic Area (EEA), the UK, or Switzerland with information regarding their personal data in a different format. Terms used in this section are defined by the GDPR.

Qualifications & exceptions

• The GDPR is named as the source of definitions; its provisions are not explained here.

Legal Rights & Agreement Rules · User right or choice

EEA, UK, and Swiss residents get seven data rights

Readers located in the EEA, the UK, or Switzerland have the right to access their personal data; correct it; delete it; temporarily restrict Epic's use of it; object to some types of processing, including direct marketing and processing based on legitimate interests; data portability, including receiving a copy; and withdraw consent where processing is based on consent, without affecting the lawfulness of processing based on consent before withdrawal.

Supporting quotations

If you are located in the EEA, the UK, or Switzerland, you have the right to:

access your personal data;

correct your personal data;

deletion of your personal data;

temporarily restrict our use of your personal data;

object to some types of processing, including processing for direct marketing purposes and based on our legitimate interests;

data portability, including receiving a copy of your personal data; and

withdraw your consent, where our processing is based on consent (if you withdraw your consent, this does not affect the lawfulness of any processing based on your consent before it was withdrawn).

Qualifications & exceptions

• Withdrawal does not retroactively affect prior consent-based processing.

Cross-references

• has exception (model-proposed): EEA responses may need identity proof or be limited — EEA/UK/Swiss rights are granted, then limited: Epic may require identity proof and limit responses in the listed circumstances.

Legal Rights & Agreement Rules · Restriction or exception

EEA responses may need identity proof or be limited

Epic may ask for additional information to verify identity before fulfilling a rights request. It may also limit its response where the request is manifestly unfounded or excessive; where it would adversely affect the rights and freedoms of others; where overriding legitimate grounds for processing outweigh the reader's interests, rights, and freedoms; or where processing is necessary to establish, exercise, or defend legal claims, perform a contract, or comply with legal obligations.

Supporting quotations

We may ask for additional information to verify your identity before fulfilling a rights request. We may also limit our response in certain circumstances, including when:

the request is manifestly unfounded or excessive;

the request would adversely affect the rights and freedoms of others;

there are overriding legitimate grounds for processing that overweigh your interests, rights, and freedoms; or

the processing is necessary to establish, exercise, or defend our legal claims, perform a contract with you, or comply with our legal obligations.

Cross-references

• exception to (model-proposed): EEA, UK, and Swiss residents get seven data rights — EEA/UK/Swiss rights are granted, then limited: Epic may require identity proof and limit responses in the listed circumstances.

Legal Rights & Agreement Rules · User right or choice

EEA complaints go to regulators or Epic directly

Readers also have the right to complain to their local data protection supervisory authority, with links for the EEA's European Data Protection Authorities, the UK's Information Commissioner's Office, and Switzerland's Federal Data Protection and Information Commissioner, or to contact Epic directly with a complaint, via Section 12. Epic states it would appreciate the chance to address issues first.

Supporting quotations

You also have the right to make a complaint with your local data protection supervisory authority (please see links below) or to contact us directly with any complaint (please see Section 12 (How Can You Contact Us?)). We would appreciate the chance to address your issues first.

EEA: European Data Protection Authorities

UK: Information Commissioner’s Office

Switzerland: Federal Data Protection and Information Commissioner

Not stated here

• The linked regulator pages are not supplied in this source.

Legal Rights & Agreement Rules · Context

Four lawful bases depend on service and interaction

The lawful bases Epic relies on depend on the Epic Services used and how the reader interacts with them: contractual necessity, when processing personal data to perform requested Services under the Terms of Service or similar contractual agreements; legitimate interests, when processing supports Epic's business purposes as balanced against the potential impact on privacy rights; legal obligations, when processing complies with legal obligations; and consent, when the reader gives consent, which is optional and withdrawable at any time.

Supporting quotations

The lawful bases we rely on to process your personal data depend on the Epic Services you use and how you interact with them. These lawful bases are:

Contractual necessity: when we process your personal data to perform the Epic Services you requested under our Terms of Service or other similar contractual agreements with you.

Legitimate interests: when we process your personal data to support Epic’s business purposes, as balanced against the potential impact on your privacy rights.

Legal obligations: when we process your personal data to comply with our legal obligations.

Consent: when you give us your consent to process your personal data. You are not required to provide consent, and you may withdraw your consent at any time.

Qualifications & exceptions

• Consent is optional and withdrawable at any time.

Legal Rights & Agreement Rules · Context

How bases apply to purposes is in Section 4

For more information on how these lawful bases apply to different purposes of processing, readers are pointed to Section 4.

Details not recorded for this card

Supporting quotations

For more information on how these lawful bases apply to different purposes of processing, please see Section 4 (Why Do We Process Information?).

Legal Rights & Agreement Rules · Procedure

Game and store issues go to per-product support channels

Section 12 (How Can You Contact Us?) opens with support requests: readers with questions or concerns about the Epic Services, such as game issues, Epic account access, bugs, payments, content, or entitlements, are asked to contact the relevant support channel through the listed links, one each for Fortnite, Rocket League, Fall Guys, Epic Games Store, Fab, and Unreal Engine.

Supporting quotations

12. HOW CAN YOU CONTACT US?

A. Support Requests

If you have questions or concerns about the Epic Services (e.g., issues related to a game, accessing your Epic account, bugs, payments, content, or entitlements), please contact the relevant support channel through the links provided below.

Fortnite

Rocket League

Fall Guys

Epic Games Store

Fab

Unreal Engine

Not stated here

• The linked support pages are not supplied in this source.

Legal Rights & Agreement Rules · Procedure

Privacy questions and rights requests go to privacy emails

For privacy requests, readers who want to learn more about Epic's privacy practices or the Policy, or to exercise data subject rights, are asked to email privacy@support.epicgames.com or dpo@support.epicgames.com. They may also write by email or postal mail marked Attn: Legal Department using the contact information below for the entity responsible for the applicable Epic Services.

Supporting quotations

B. Privacy Requests

If you want to learn more about our privacy practices or this Policy, or exercise your data subject rights, please email privacy@support.epicgames.com or dpo@support.epicgames.com. You can also contact us via email or postal mail (marked “Attn: Legal Department”) using the contact information listed below for the entity responsible for providing the applicable Epic Services.

Cross-references

• referred to by (model-proposed): Rights requests need verification; agents need signed permission — Rights requests made through Section 12 contacts resolve to the privacy email and Legal Department addresses.

Legal Rights & Agreement Rules · Context

Each service maps to the Epic entity responsible for it

The Policy names the entity responsible for providing each service: Fortnite maps to Epic Games, Inc. for US residents or Epic Games Entertainment International GmbH for non-US residents; Rocket League to Psyonix LLC; Fall Guys to Epic Games, Inc.; Horizon Chase 2 to Aquiris Game Studio LLC; Rock Band to Harmonix Music Systems, Inc.; Epic Games Store and Fab to Epic Games, Inc. for US residents or Epic Games Commerce GmbH for non-US residents; Unreal Engine and MetaHuman to Epic Games, Inc. for US residents or Epic Games Commerce GmbH for non-US residents; Unreal Editor for Fortnite to Epic Games, Inc. for US residents or Epic Games Entertainment International GmbH for non-US residents; Postparty to Life on Air Inc.; Epic websites and subdomains linking to the Policy to Epic Games, Inc.; and other Epic Services to the licensing entity in the relevant terms for the reader's region.

Supporting quotations

Fortnite: Epic Games, Inc. (for US residents) or Epic Games Entertainment International GmbH (for non-US residents)

Rocket League: Psyonix LLC

Fall Guys: Epic Games, Inc.

Horizon Chase 2: Aquiris Game Studio LLC

Rock Band: Harmonix Music Systems, Inc.

Epic Games Store and Fab: Epic Games, Inc. (for US residents) or Epic Games Commerce GmbH (for non-US residents)

Unreal Engine and MetaHuman: Epic Games, Inc. (for US residents) or Epic Games Commerce GmbH (for non-US residents)

Unreal Editor For Fortnite: Epic Games, Inc. (for US residents) or Epic Games Entertainment International GmbH (for non-US residents)

Postparty: Life on Air Inc.

Our websites and their respective subdomains that link to this Policy: Epic Games, Inc.

Other Epic Services: Please see the relevant terms and conditions for the licensing entity listed in your region

Qualifications & exceptions

• US versus non-US splits apply where stated.

Not stated here

• The relevant terms and conditions naming other-service licensing entities are not supplied in this source.

Cross-references

• refers to (model-proposed): “Epic Services” covers linked games, stores, tools, apps, sites, events — The per-service entity map assigns responsibility for the same offerings the Epic Services definition lists.

Legal Rights & Agreement Rules · Context

Aquiris Game Studio contact and regional representatives

Aquiris Game Studio LLC lists a Plantation, Florida address care of C T Corporation System; Mishcon de Reya as EU/UK representative; and Henrique Fabretti of Opice Blum, Bruno Advogados Associados as Brazil Data Protection Officer at dpo@support.epicgames.com.

Supporting quotations

Contact Information

Aquiris Game Studio LLC

Address: C/O C T Corporation System, 1200 South Pine Island Road, Plantation, Florida 33324, USA

EU/UK Representative: Mishcon de Reya (representative@mishcon.com)

Brazil Data Protection Officer: Henrique Fabretti of Opice Blum, Bruno Advogados Associados (dpo@support.epicgames.com)

Legal Rights & Agreement Rules · Context

Epic Games Commerce GmbH contact and regional officers

Epic Games Commerce GmbH lists a Root, Switzerland address; Mishcon de Reya as EU/UK representative; dpo@support.epicgames.com as EU/UK Data Protection Officer; and Henrique Fabretti of Opice Blum, Bruno Advogados Associados as Brazil Data Protection Officer at the same privacy address.

Supporting quotations

Epic Games Commerce GmbH

Address: Platz 10, 6039 Root D4, Switzerland

EU/UK Representative: Mishcon de Reya (representative@mishcon.com)

EU/UK Data Protection Officer: dpo@support.epicgames.com

Brazil Data Protection Officer: Henrique Fabretti of Opice Blum, Bruno Advogados Associados (dpo@support.epicgames.com)

Legal Rights & Agreement Rules · Context

Epic Games Entertainment International GmbH contacts

Epic Games Entertainment International GmbH lists the same Root, Switzerland address; Mishcon de Reya as EU/UK representative; dpo@support.epicgames.com as EU/UK Data Protection Officer; and Henrique Fabretti of Opice Blum, Bruno Advogados Associados as Brazil Data Protection Officer at the same privacy address.

Supporting quotations

Epic Games Entertainment International GmbH

Address: Platz 10, 6039 Root D4, Switzerland

EU/UK Representative: Mishcon de Reya (representative@mishcon.com)

EU/UK Data Protection Officer: dpo@support.epicgames.com

Brazil Data Protection Officer: Henrique Fabretti of Opice Blum, Bruno Advogados Associados (dpo@support.epicgames.com)

Legal Rights & Agreement Rules · Context

Epic Games, Inc. contact and regional officers

Epic Games, Inc. lists its Cary, North Carolina address; Mishcon de Reya as EU/UK representative; dpo@support.epicgames.com as EU/UK Data Protection Officer; and Henrique Fabretti of Opice Blum, Bruno Advogados Associados as Brazil Data Protection Officer at the same privacy address.

Supporting quotations

Epic Games, Inc.

Address: 620 Crossroads Boulevard, Cary, North Carolina 27518, USA

EU/UK Representative: Mishcon de Reya (representative@mishcon.com)

EU/UK Data Protection Officer: dpo@support.epicgames.com

Brazil Data Protection Officer: Henrique Fabretti of Opice Blum, Bruno Advogados Associados (dpo@support.epicgames.com)

Legal Rights & Agreement Rules · Context

Harmonix contact and EU/UK representative

Harmonix Music Systems, Inc. lists a Boston, Massachusetts address; privacy@harmonixmusic.com as contact; and Mishcon de Reya as EU/UK representative.

Supporting quotations

Harmonix Music Systems, Inc.

Address: 40 Broad Street, Floor 7, Boston, Massachusetts 02109, USA

Contact: privacy@harmonixmusic.com

EU/UK Representative: Mishcon de Reya (representative@mishcon.com)

Legal Rights & Agreement Rules · Context

Life on Air contact and regional representatives

Life on Air Inc. lists a Cary, North Carolina address; privacy@support.epicgames.com as contact; Mishcon de Reya as EU/UK representative; and Henrique Fabretti of Opice Blum, Bruno Advogados Associados as Brazil Data Protection Officer at dpo@support.epicgames.com.

Supporting quotations

Life on Air Inc.

Address: 620 Crossroads Boulevard, Cary, North Carolina 27518, USA

Contact: privacy@support.epicgames.com

EU/UK Representative: Mishcon de Reya (representative@mishcon.com)

Brazil Data Protection Officer: Henrique Fabretti of Opice Blum, Bruno Advogados Associados (dpo@support.epicgames.com)

Legal Rights & Agreement Rules · Context

Psyonix contact and regional representatives

Psyonix LLC lists a San Diego, California address; privacy@support.epicgames.com as contact; Mishcon de Reya as EU/UK representative; and Henrique Fabretti of Opice Blum, Bruno Advogados Associados as Brazil Data Protection Officer at dpo@support.epicgames.com.

Supporting quotations

Psyonix LLC

Address: 401 West A. Street, Suite 2400, San Diego, California 92101, USA

Contact: privacy@support.epicgames.com

EU/UK Representative: Mishcon de Reya (representative@mishcon.com)

Brazil Data Protection Officer: Henrique Fabretti of Opice Blum, Bruno Advogados Associados (dpo@support.epicgames.com)