Children's data kept only as long as reasonably needed
Under Retention of Personal Information: Epic generally retains a child's personal information only as long as reasonably needed for the purposes it was collected. Examples: inquiry information from a Cabined-Account child is deleted after the inquiry is resolved, and a parent or guardian email address provided for notice and consent is deleted if the parent or guardian does not respond within 14 days.
Details
Condition
retained only as long as reasonably needed for collection purposes
When
parent/guardian email deleted if no response within 14 days
Supporting quotations
B. Retention of Personal Information
We generally retain personal information collected from a child only for as long as we reasonably need it for the purposes it was collected. For example:
If a child with a Cabined Account contacts us with a question or request, any personal information provided will be deleted after the inquiry is resolved.
If a child provides their parent/guardian’s email address to receive notice and provide consent for additional features, their email address will be deleted if the parent/guardian does not respond within 14 days.
Qualifications & exceptions
Further detail is pointed to Section 7.
Retention & Deletion · Company commitment
Inactive 18-month child accounts are deleted from April 2026
Starting in April 2026, if a child's account remains inactive for 18 months, the personal information associated with the account will be deleted, as defined by the Children's Online Privacy Protection Rule, 16 CFR 312.2.
Details
When
starting in April 2026; after 18 months of account inactivity
What it covers
personal information associated with the child's account
Supporting quotations
Starting in April 2026, if a child’s account remains inactive for 18 months, personal information associated with the account will be deleted (as defined by Children’s Online Privacy Protection Rule, 16 CFR 312.2).
For additional details, please see Section 7 (How Do We Handle Information?).
Qualifications & exceptions
The Rule is named as the source of the definition; its contents are not stated here.
Retention varies; generally as long as reasonably needed
Because the specific information Epic processes and its reasons often vary with how readers use the Epic Services, retention periods can also vary. Epic generally retains information for as long as it reasonably needs it for the purposes described in Section 4, unless a longer retention period is required or permitted by law. For example, an Epic account's associated information, such as name, public-facing display name, password, country, and email address, is generally retained as long as needed to maintain the account, provide requested Services, enforce applicable terms and policies, and record service delivery.
Details
Condition
retained generally as long as reasonably needed for Section 4 purposes
Supporting quotations
7. HOW DO WE HANDLE INFORMATION?
A. Retention
Because the specific information we process and our reasons for doing so often vary depending on how you use the Epic Services, how long we retain your information can also vary. We generally retain information for as long as we reasonably need it for the purposes described in Section 4 (Why Do We Process Information?), unless a longer retention period is required or permitted by law. For example, if you create an Epic account, we will generally retain the information associated with your account (e.g., name, public-facing display name, password, country, and email address) for as long as needed to maintain your account, provide the Epic Services you requested, enforce any terms and policies that apply to and govern your use of the Epic Services, and record how we deliver the Epic Services to you.
Qualifications & exceptions
Longer retention applies where required or permitted by law.
Retention periods weigh law, sensitivity, purpose, and risk
The main criteria Epic considers for specific retention periods often include minimum requirements under applicable law, relevant industry standards, the types of information such as sensitivity level, the processing purposes such as legal compliance, internal records, terms enforcement, and dispute resolution, whether those purposes can be achieved through other means, the potential risk of harm from unauthorized use or disclosure, the information's relevance to potential litigation or similar proceedings such as defending legal claims, and whether the information is needed to prevent fraud or similar abuse such as enforcing prohibitions against cheating and other unauthorized behavior.
The main criteria we consider in determining specific retention periods often include minimum requirements under applicable law, relevant industry standards, the types of information in question (e.g., its level of sensitivity), the purposes for which we process the information (e.g., complying with our legal obligations, managing internal records, enforcing our terms and policies, and resolving disputes), whether we can achieve those purposes through other means, the potential risk of harm from unauthorized use or disclosure of the information, the information’s relevance to potential litigation or similar proceedings (e.g., defending ourselves against legal claims), and whether the information is required to prevent fraud or similar abuse of the Epic Services (e.g., enforcing prohibitions against cheating and other unauthorized behavior).
Retention & Deletion · User right or choice
Readers may request deletion; details in Sections 9, 10, 11
Readers may request that Epic delete their information. More information on requesting deletion is pointed to Sections 9, 10, and 11.
Details
What it does
request that Epic delete your information
Supporting quotations
You may request that Epic delete your information. Please see Sections 9 (What Choices and Controls Do You Have?), 10 (Additional Notice For Residents of Certain US States), and 11 (Additional Notice for Individuals Located in the European Economic Area, the United Kingdom, or Switzerland) for more information on requesting deletion of your information.
Qualifications & exceptions
Deletion-request detail lives in Sections 9, 10, and 11, not here.