Privacy Policy

Fortnite · agreement dated April 22, 2026 · Official agreement

Read the agreement

16 of 85 cards in Data Access & Collection

Data Access & Collection · Company practice

Section 2 covers children: under 13 or regional consent age

Section 2 explains Epic's privacy practices for children, defined as under 13 or the age of digital consent in the user's region, whichever is higher. Epic designs the Services to be welcoming to all ages, collects age information from users, and may vary the experience based on what it knows about a user's age and where they live; the section is written for parents and guardians to understand these practices.

Details
Who
parents/guardians reading about children
What it covers
age information collected from users
Condition
child means under 13 or the regional age of digital consent, whichever is higher

Supporting quotations

2. HOW DO WE PROCESS CHILDREN’S INFORMATION?
We are designing the Epic Services to be welcoming to users of all ages around the world. This means that we collect age information from users, and some of the Epic Services will provide a different experience based on what we know about the age of a user and where they live. The information below is for parents/guardians to understand our privacy practices with respect to children (under 13 or the age of digital consent in the user’s region, whichever is higher).

Data Access & Collection · Company practice

Cabined Accounts: limited data collected under youth privacy laws

For Cabined Accounts Epic collects limited personal information to operate them, in each case according to applicable youth privacy and protection laws: the child's date of birth and country, to determine age and apply appropriate settings; the child's sign-in email address, stored only in unreadable hashed and salted form; the parent or guardian's email address, to give notice and seek consent for additional features; and persistent identifiers such as IP address, Epic account ID, gaming platform account IDs, device IDs, and similar website-tracking data, used to provide and maintain the Services (including improvement analytics), authenticate users, protect security and integrity, comply with legal and regulatory requirements, enable personalization, and maintain user-driven preferences such as game advancement and avatar choice. Epic uses technical and organizational means designed to keep those persistent identifiers from being used for other purposes.

Details
What it covers
date of birth and country; hashed sign-in email; parent/guardian email; persistent identifiers
Why
operate Cabined Accounts: age settings, notice and consent, service provision, analytics, authentication, security, legal compliance, personalization, preferences
Condition
in each case according to applicable youth privacy and protection laws

Supporting quotations

When a user indicates they are a child, they are placed in a “Cabined Account” until they are no longer a child as defined above or until their parent/guardian provides additional privacy permissions and enables parental controls. Cabined Accounts can play Epic’s games (e.g., Fortnite, Rocket League, or Fall Guys), but features like voice chat and real money purchases are disabled. Epic collects limited personal information from Cabined Accounts to operate them, in each case according to applicable youth privacy and protection laws:
child’s date of birth and country to determine age and apply appropriate settings;
child’s email address for sign-in (which is only stored in an unreadable hashed and salted form);
parent/guardian’s email address to provide notice and seek their consent for additional features; and
persistent identifiers of the child like IP address, Epic account ID, gaming platform account IDs, device IDs, and similar data collected with website tracking technologies to provide and maintain the Epic Services (including analytics to improve them), authenticate users, protect the security and integrity of users and the Epic Services, comply with legal and regulatory requirements, facilitate personalization, and maintain user driven preferences (e.g., game advancement and avatar choice). We use technical and organizational means designed to ensure that those persistent identifiers of Cabined Accounts are not used for other purposes.

Qualifications & exceptions

  • Collection is stated to follow applicable youth privacy and protection laws in each case.
Also annotated in the same passage (1)

Data Access & Collection · Context

Epic collects information three ways depending on interaction

The types of information Epic collects depend on how the reader interacts with the Epic Services. Generally, Epic collects information in three ways: when readers provide it, automatically when they use the Services, and from third parties.

Details
What it covers
types of information depending on interaction with the Epic Services

Supporting quotations

3. WHAT INFORMATION DO WE COLLECT AND HOW?
The types of information we collect depend on how you interact with the Epic Services. Generally speaking, we collect information in three ways: A) when you provide it to us, B) automatically when you use the Epic Services, and C) from third parties.

Data Access & Collection · Company practice

Provided information is optional but may gate features

Under Information You Provide: readers can choose to provide different types of information depending on how they use the Epic Services. In some cases Epic asks for specific information because it needs it for the Services or their features. Choosing not to provide requested information may leave the reader unable to access those Services, or features may not work properly.

Details
Who
readers choosing what to provide
Condition
withholding requested information may block access or break features

Supporting quotations

A. Information You Provide
You can choose to provide us with different types of information depending on how you use the Epic Services. In some cases, we will ask you for specific information because we need it for the Epic Services or their respective features. If you choose not to provide the requested information, you may be unable to access those Epic Services or features may not work properly. For example:

Data Access & Collection · Company practice

Social, support, and request information Epic may collect

When readers sign up for email alerts, Epic collects the email address to keep them informed about updates they opted into. When using social features like forums or chat, Epic may collect information they choose to share there, such as forum posts. When voice chat is used with voice reporting enabled in a voice channel, snippets of voice chat are stored on the reader's device and participants' devices; if a terms or policy violation such as the Community Rules is reported, those snippets may be transmitted to Epic to review that reported violation and enforce terms and policies. When readers submit a takedown request, Epic collects the provided information such as name, contact details, signature, and supporting evidence to assess and respond. Survey and questionnaire responses and feedback may be collected, as may correspondence and contact information when contacting player support or another support channel.

Details
What it covers
alert email address; shared social content; on-device voice snippets; takedown materials; survey responses; support correspondence
Condition
voice snippets are transmitted to Epic only if a violation is reported

Supporting quotations

When you sign up for email alerts, we collect your email address to keep you informed about updates you’ve opted into.
When you use social features like our forums or chat, we may collect the information you choose to share on or through them (e.g., the posts you share on our forums). When you use our voice chat feature and voice reporting is enabled in a voice channel, snippets of voice chat are stored on your device and the devices of participants in the voice channel. If a violation of our terms or policies (e.g., Community Rules) is reported, these snippets may be transmitted to Epic to review that reported violation and enforce our terms and policies. For more information on our retention of your voice and text chat, please read our FAQs.
When you submit a takedown request, we collect the information you provide (e.g., name, contact details, signature, and evidence supporting your claim to assess and respond to those requests).
When you complete our surveys or questionnaires, we may collect your responses and feedback.
When you contact us through player support or another support channel, we collect your correspondence and contact information.

Qualifications & exceptions

  • Voice snippets reach Epic only if a violation is reported.

Not stated here

  • The linked Community Rules and voice-and-text-reporting FAQ texts are not supplied in this source; chat retention detail beyond this block is not stated here.

Data Access & Collection · Company practice

AI, MetaHuman, and developer-tool inputs Epic collects

When readers use AI-powered features such as Epic Developer Assistant, Epic uses their inputs, including information they submit that may identify them, to generate outputs such as responses that may identify them. When using MetaHuman to create in-game characters, Epic collects images of the reader to generate a mesh solely to provide the requested functionality, not to identify them. When using other developer tools, Epic collects the information, including any content, readers create and publish.

Details
What it covers
AI feature inputs; MetaHuman images; content created and published with developer tools
Why
generate AI outputs; generate a character mesh; provide developer-tool functionality

Supporting quotations

When you use AI-powered features (e.g., Epic Developer Assistant), we use your inputs (e.g., information you submit that may identify you) to generate outputs (e.g., responses that may identify you).
When you use MetaHuman to create in-game characters, we collect images of you to generate a mesh solely to provide the requested functionality, not to identify you.
When you use our other developer tools, we collect the information, including any content, you create and publish.

Qualifications & exceptions

  • MetaHuman images are stated to serve only the requested functionality, not identification.

Data Access & Collection · Company practice

Automatic collection tied to accounts, devices, or profiles

Under Information We Collect Automatically: Epic collects some information automatically when readers visit, access, or use the Epic Services. This includes information like gameplay or application usage typically associated with the Epic account, a third-party account where access runs through one, or an identifier Epic assigns to the device or profile. The specific automatically collected types may vary.

Details
What it covers
gameplay or application usage associated with an Epic account, third-party account, or assigned device/profile identifier

Supporting quotations

B. Information We Collect Automatically
We collect some information automatically when you visit, access, or use the Epic Services. This includes information like your gameplay or application usage that are typically associated with your Epic account, your third-party account (if you access the Epic Services through one), or an identifier we assign to your device or profile. While the specific types of information that we automatically collect may vary, they generally include:

Qualifications & exceptions

  • Automatically collected types are stated to vary; this card states only the association mechanism.

Data Access & Collection · Company practice

Usage statistics Epic collects automatically

Automatically collected usage information and statistics about interaction with the Epic Services include the application or game used, duration and timing of use, gameplay attempts, progression and results, saved preferences such as language, crash reports, URLs of visited Epic websites, referring and exiting page URLs, page views, time spent on a page, number of clicks, and platform type.

Details
What it covers
usage statistics: app or game, timing, attempts, progression, preferences, crash reports, URLs, views, clicks, platform type

Supporting quotations

usage information and statistics about how you interact with the Epic Services, including the application or game used, duration and timing of use, gameplay attempts, progression and results, saved preferences (e.g., language), crash reports, URLs of our websites you visited, URLs of referring and exiting pages, page views, time spent on a page, number of clicks, and platform type;

Data Access & Collection · Company practice

Automatic technical and location information collected

Automatically collected information includes technical information about the computer, device, hardware, or software used to access the Epic Services, including IP address, device ID, internet service provider, browser plugins, and other transactional or identifier information such as device make and model, operating system, browser type, and other system-related specifications; and general location information about the device, typically inferred from its IP address.

Details
What it covers
technical device and software information; general device location inferred from IP address

Supporting quotations

technical information about the computer, device, hardware, or software you use to access the Epic Services, including IP address, device ID, internet service provider, browser plugins, and other transactional or identifier information (e.g., device make and model, operating system, browser type, and other system-related specifications); and
general location information about your device, typically inferred from its IP address.

Data Access & Collection · Company practice

Cookies and beacons serve operation, monitoring, and ads

The Epic Services use technologies such as cookies, log files, and web beacons to automatically collect the listed types of information. Some of these technologies may create small files or record-keeping tools stored on the reader's device. They help Epic recognize the device and collect interaction information, which Epic uses to provide and operate the Services (for example authenticating the reader and saving preferences); monitor the Services (for example detecting and reporting crashes); understand and improve the Services (for example data analytics); personalize the Services (for example displaying local currencies); and promote the Services (for example managing advertising).

Details
What it covers
device recognition and interaction information via cookies, log files, and web beacons
Why
operate, monitor, improve, personalize, and promote the Epic Services

Supporting quotations

The Epic Services use technologies such as cookies, log files, and web beacons to automatically collect the types of information listed above. Some of these technologies may create small files or record-keeping tools stored on your device. These technologies help us recognize your device and collect information about your interactions with the Epic Services, and we use that information to, for example, provide and operate the Epic Services (e.g., authenticate you and save preferences); monitor the Epic Services (e.g., detect and report crashes); understand and improve the Epic Services (e.g., conduct data analytics); personalize the Epic Services (e.g., display local currencies); and promote the Epic Services (e.g., manage advertising).

Data Access & Collection · Company practice

Third-party features may collect through their own technologies

When features of the Epic Services are provided by third parties, those third parties may also use automatic data collection technologies and collect information about the reader's use of the Epic Services, their own services, or others' websites over time. For example, when the reader uses Epic Services such as Unreal Engine that include third-party software, those third parties may collect information through their technologies. Features provided by third parties are subject to their applicable privacy notices and policies.

Details
Who
third parties providing features of the Epic Services
Condition
third-party-provided features are subject to those parties' own privacy notices and policies

Supporting quotations

When features of the Epic Services are provided by third parties, those third parties may also use automatic data collection technologies and collect information about your use of the Epic Services, their services, or others’ websites over time. For example, when you use the Epic Services (e.g., Unreal Engine) that include third-party software, those third parties may collect your information through their technologies. Features provided by third parties are subject to their applicable privacy notices and policies.

Not stated here

  • Those third parties' privacy notices and policies are not supplied in this source.

Data Access & Collection · Context

Epic may receive information about readers from third parties

Under Information We Receive from Others: in some cases, Epic may receive information about the reader from third parties in connection with use of the Epic Services or interactions with Epic on or using third-party platforms, websites, or services.

Details
What it covers
information about the reader received from third parties

Supporting quotations

C. Information We Receive from Others
In some cases, we may receive information about you from third parties in connection with your use of the Epic Services or your interactions with us on or using third-party platforms, websites, or services. For example:

Data Access & Collection · Company practice

Console, linked-account, and login data received from third parties

When readers buy, download, or access games through third-party gaming consoles such as PlayStation, Microsoft Xbox, and Nintendo Switch, Epic may receive information from those consoles, such as third-party display name, user ID, device information, and country, to facilitate gameplay, track progression and entitlements, and support use of the Services. When readers link an Epic account with a third-party social media account such as Facebook, gaming account such as Steam, or similar platform, Epic may receive information from that platform, such as third-party display name, user ID, device information, name, and email address. When readers use an Epic account to log into a third-party developer's product or service, Epic may receive information from that developer, such as in-game interaction information including achievements, to help track, display, and unlock achievements in the Epic Games Store.

Details
What it covers
console identity and country; linked-platform identity and contact details; developer-reported interaction and achievement information
Why
facilitate gameplay and track progression and entitlements; enable linked accounts; track, display, and unlock Store achievements

Supporting quotations

When you buy, download, or access our games through third-party gaming consoles (e.g., PlayStation®, Microsoft Xbox, and Nintendo Switch), we may receive information from those consoles (e.g., your third-party display name, user ID, device information, and country) to facilitate gameplay, track your progression and entitlements, and support your use of the Epic Services.
When you link your Epic account with your account on a third-party social media (e.g., Facebook), gaming (e.g., Steam), or similar platform, we may receive information from that platform (e.g., your third-party display name, user ID, device information, name, and email address).
When you use your Epic account to log into a third-party developer’s product or service, we may receive your information from that developer (e.g., information about your in-game interactions including achievements to help track, display, and unlock achievements in the Epic Games Store).

Data Access & Collection · Company practice

Ad-interaction and user-report information received

When readers interact with an ad for the Epic Services on a third-party website or service, Epic may receive related information from the company operating that website or service. If another user reports that the reader violated Epic's terms or policies, Epic may receive information about the reader from that user. If the reader is a parent or guardian of a child, Epic may receive the parent or guardian's email address directly from the child to contact them for verifiable parental consent.

Details
What it covers
ad-interaction information; violation-report information; parent/guardian email address from the child
Why
contact the parent or guardian for verifiable parental consent

Supporting quotations

When you interact with an ad for the Epic Services on a third-party website or service, we may receive related information from the company operating that website or service.
If another user reports that you violated our terms or policies, we may receive information about you from that user. If you are a parent/guardian of a child, we may receive your email address directly from your child to contact you for verifiable parental consent.

Data Access & Collection · Company commitment

Third-party settings govern what third parties disclose to Epic

Privacy settings on third-party platforms, websites, and services typically control what information they disclose to Epic, so readers are encouraged to review and update those settings regularly. While Epic follows this Policy when using information provided by third parties, Epic does not control how third parties collect or use reader information; readers are referred to those parties' privacy notices and policies for details.

Details
Condition
third-party privacy settings typically control disclosure to Epic

Supporting quotations

Your privacy settings on third-party platforms, websites, and services typically control what information they disclose to Epic, so we encourage you to review and update those settings regularly. While we follow this Policy when using information provided by third parties, we do not control how third parties collect or use your information. For more details, please refer to their privacy notices and policies.

Qualifications & exceptions

  • Epic's commitment covers its own use of third-party-provided information, not third parties' collection or use.

Not stated here

  • Those third parties' privacy notices and policies are not supplied in this source.

Data Access & Collection · Company practice

Categories collected in the past 12 months

The specific information collected typically depends on how the reader interacts with Epic on the Services. In the past 12 months, Epic collected these categories of personal information: identifiers such as name, display name, account ID, device ID, IP address, phone number, or email address; commercial information such as entitlements or purchase history; internet or other electronic network activity such as gameplay information or website usage; audio, electronic, visual, or similar information such as voice chat or images; geolocation data such as derived from IP address or in payment information; characteristics of protected classifications under California or federal law such as age; personal information described in Section 1798.80(e) of the California Civil Code such as name, signature, phone number, or credit or debit card information; in some cases, sensitive personal information such as account log-in credentials and, for marketplace sellers or traders of creative content, government ID; and inferences drawn from the above such as game genres the reader may prefer based on purchases or play history.

Details
When
in the past 12 months
What it covers
identifiers; commercial information; network activity; audio/visual; geolocation; protected-classification characteristics; Civil Code 1798.80(e) information; sensitive information in some cases; inferences

Supporting quotations

As described in greater detail in Section 3 (What Information Do We Collect and How?), the specific information we collect from you typically depends on how you choose to interact with us on the Epic Services. In the past 12 months, we’ve collected the following categories of personal information:
identifiers (e.g., name, display name, account ID, device ID, IP address, phone number, or email address);
commercial information (e.g., entitlements or purchase history);
internet or other electronic network activity information (e.g., gameplay information or website usage);
audio, electronic, visual, or similar information (e.g., voice chat or images of you);
geolocation data (e.g., as may be derived from your IP address or included in your payment information);
characteristics of protected classifications under California or federal law (e.g., age);
personal information described in Section 1798.80(e) of the California Civil Code (e.g., name, signature, phone number, or credit or debit card information);
in some cases, sensitive personal information (e.g., account log-in credentials and, if you list, sell, or trade creative content in one of our marketplaces, government ID); and
inferences drawn from any of the above categories (e.g., the genres of games you may prefer to play based on your purchases or play history).

Qualifications & exceptions

  • The cited Civil Code section is named as a category label; its contents are not explained here.
  • Collection detail beyond the categories is pointed to Section 3.