Epic Games Privacy Policy: what it describes and its date
This is the Epic Games Privacy Policy, last updated April 22, 2026. It describes the different ways Epic may collect, use, secure, retain, disclose, and otherwise process information that can be used to identify you on, through, or in connection with the Epic Services. Epic Games, Inc. is headquartered in Cary, North Carolina, with subsidiaries and operations around the world behind products including Fortnite and Unreal Engine.
Details
Who
Epic Games, Inc. and its subsidiaries
What it covers
information that can be used to identify you
When
Last updated April 22, 2026
Supporting quotations
EPIC GAMES PRIVACY POLICY
Last Updated: April 22, 2026
Epic Games, Inc. is headquartered in Cary, North Carolina. We and our subsidiaries have offices and operations located around the world that help create and deliver some of your favorite products and services, including games like Fortnite and developer tools like Unreal Engine.
This Epic Games Privacy Policy (this “Policy”) describes the different ways we may collect, use, secure, retain, disclose, and otherwise process information that can be used to identify you on, through, or in connection with the Epic Services (defined below).
Legal Rights & Agreement Rules · Context
“Epic” means the entity that controls your information
When the Policy says “Epic” (or “we,” “us,” or “our”), it means the Epic entity that controls and is responsible for your information, such as Epic Games, Inc. and the subsidiaries and affiliates that provide the Epic Services. The Policy applies when Epic acts as a data controller of your information.
Details
Who
the Epic entity that controls and is responsible for your information
Condition
applies when Epic acts as a data controller of your information
Supporting quotations
1. WHAT DOES THIS POLICY COVER?
When we refer to “Epic” (or any similar terms like “we,” “us,” or “our”) in this Policy, we mean the Epic entity that controls and is responsible for your information, such as Epic Games, Inc. and its subsidiaries and affiliates that provide the Epic Services. This Policy applies when Epic acts as a data controller of your information. You can find details about the data controller responsible for your information in Section 12 (How Can You Contact Us?).
Qualifications & exceptions
Details of the data controller responsible for your information are in Section 12 (How Can You Contact Us?).
“Epic Services” means any Epic products or services that directly link to this Policy, including: games (Fortnite, Rocket League, Fall Guys, Horizon Chase 2); marketplaces (Epic Games Store, Fab); developer tools (Unreal Engine, MetaHuman, Unreal Editor for Fortnite); applications (Postparty); Epic websites and their subdomains; and live events where this Policy is posted.
Details
What it covers
any Epic products or services that directly link to this Policy
Condition
live events only where this Policy is posted
Supporting quotations
We use the term “Epic Services” to describe any Epic products or services that directly link to this Policy, including:
Only products or services that directly link to this Policy are included.
Not stated here
The contents of the linked product sites, stores, tools, applications, and live-event postings are not supplied in this source; this card states only that those offerings link to this Policy.
Read the Policy and other agreements before using Epic Services
Before using any Epic Services, readers are asked to read this entire Policy carefully plus any other agreements that apply to their use, and to confirm they understand and agree to them; questions go to the contact information in Section 12. Use is also subject to additional terms: for example, playing Fortnite, Rocket League, Fall Guys, or Horizon Chase 2 requires reviewing and accepting the Epic Games Terms of Service.
Details
Who
readers before using any Epic Services
What it does
read the Policy and applicable agreements and confirm understanding and agreement
Condition
playing listed games requires reviewing and accepting the Epic Games Terms of Service
Supporting quotations
Please read this entire Policy carefully and any other agreements that apply to your use of the Epic Services, and confirm you understand and agree to them, before using any of the Epic Services. If you have any questions, you can always reach out to us using the contact information listed in Section 12 (How Can You Contact Us?).
Note that your use of the Epic Services is also subject to additional terms and conditions. For example, you must review and accept the Epic Games Terms of Service to play Fortnite, Rocket League, Fall Guys, and Horizon Chase 2.
Not stated here
The Epic Games Terms of Service text is not supplied in this source; this card states only that playing the listed games requires reviewing and accepting it, not what it contains.
Account & Service Control · Context
Children and parents are routed to child-specific information
Children are directed to a separate linked document, Privacy Information for Young Players, and parents or guardians of a child are directed to Section 2 (How Do We Process Children’s Information?).
If you are the parent/guardian of a child, please see Section 2 (How Do We Process Children’s Information?).
Not stated here
The linked Privacy Information for Young Players text is not supplied in this source.
Data Access & Collection · Company practice
Section 2 covers children: under 13 or regional consent age
Section 2 explains Epic's privacy practices for children, defined as under 13 or the age of digital consent in the user's region, whichever is higher. Epic designs the Services to be welcoming to all ages, collects age information from users, and may vary the experience based on what it knows about a user's age and where they live; the section is written for parents and guardians to understand these practices.
Details
Who
parents/guardians reading about children
What it covers
age information collected from users
Condition
child means under 13 or the regional age of digital consent, whichever is higher
Supporting quotations
2. HOW DO WE PROCESS CHILDREN’S INFORMATION?
We are designing the Epic Services to be welcoming to users of all ages around the world. This means that we collect age information from users, and some of the Epic Services will provide a different experience based on what we know about the age of a user and where they live. The information below is for parents/guardians to understand our privacy practices with respect to children (under 13 or the age of digital consent in the user’s region, whichever is higher).
Account & Service Control · Restriction or exception
Children use Cabined Accounts with chat and purchases disabled
A user who indicates they are a child is placed in a Cabined Account until they are no longer a child as defined above or until a parent or guardian provides additional privacy permissions and enables parental controls. Cabined Accounts can play Epic games such as Fortnite, Rocket League, or Fall Guys, but features like voice chat and real money purchases are disabled.
Details
Who
a user who indicates they are a child
Condition
Cabined status lasts until the user is no longer a child or a parent/guardian grants permissions and enables controls
Exception
voice chat and real money purchases are disabled
Supporting quotations
When a user indicates they are a child, they are placed in a “Cabined Account” until they are no longer a child as defined above or until their parent/guardian provides additional privacy permissions and enables parental controls. Cabined Accounts can play Epic’s games (e.g., Fortnite, Rocket League, or Fall Guys), but features like voice chat and real money purchases are disabled. Epic collects limited personal information from Cabined Accounts to operate them, in each case according to applicable youth privacy and protection laws:
Cabined Accounts: limited data collected under youth privacy laws
For Cabined Accounts Epic collects limited personal information to operate them, in each case according to applicable youth privacy and protection laws: the child's date of birth and country, to determine age and apply appropriate settings; the child's sign-in email address, stored only in unreadable hashed and salted form; the parent or guardian's email address, to give notice and seek consent for additional features; and persistent identifiers such as IP address, Epic account ID, gaming platform account IDs, device IDs, and similar website-tracking data, used to provide and maintain the Services (including improvement analytics), authenticate users, protect security and integrity, comply with legal and regulatory requirements, enable personalization, and maintain user-driven preferences such as game advancement and avatar choice. Epic uses technical and organizational means designed to keep those persistent identifiers from being used for other purposes.
Details
What it covers
date of birth and country; hashed sign-in email; parent/guardian email; persistent identifiers
Why
operate Cabined Accounts: age settings, notice and consent, service provision, analytics, authentication, security, legal compliance, personalization, preferences
Condition
in each case according to applicable youth privacy and protection laws
Supporting quotations
When a user indicates they are a child, they are placed in a “Cabined Account” until they are no longer a child as defined above or until their parent/guardian provides additional privacy permissions and enables parental controls. Cabined Accounts can play Epic’s games (e.g., Fortnite, Rocket League, or Fall Guys), but features like voice chat and real money purchases are disabled. Epic collects limited personal information from Cabined Accounts to operate them, in each case according to applicable youth privacy and protection laws:
child’s date of birth and country to determine age and apply appropriate settings;
child’s email address for sign-in (which is only stored in an unreadable hashed and salted form);
parent/guardian’s email address to provide notice and seek their consent for additional features; and
persistent identifiers of the child like IP address, Epic account ID, gaming platform account IDs, device IDs, and similar data collected with website tracking technologies to provide and maintain the Epic Services (including analytics to improve them), authenticate users, protect the security and integrity of users and the Epic Services, comply with legal and regulatory requirements, facilitate personalization, and maintain user driven preferences (e.g., game advancement and avatar choice). We use technical and organizational means designed to ensure that those persistent identifiers of Cabined Accounts are not used for other purposes.
Qualifications & exceptions
Collection is stated to follow applicable youth privacy and protection laws in each case.
Cabined Account disclosures stay within limited operating purposes
When Epic discloses Cabined Accounts' personal information externally, it is to help carry out those limited purposes, for example to gaming consoles to help run the game or to cloud storage providers.
Details
Why
carry out the limited operating purposes, e.g. running the game or cloud storage
Supporting quotations
When we disclose personal information of our Cabined Accounts externally, it is to help us carry out these limited purposes (e.g., to gaming consoles to help run the game or to our cloud storage providers). Learn more about Cabined Accounts.
Not stated here
The linked Cabined Accounts page text is not supplied in this source.
Account & Service Control · Procedure
Parent notice, verification, and consent via Kids Web Services
Under Notice, Consent, and Parental Controls: Epic collects a parent or guardian's email address from the child to email the parent or guardian notice that the child created a Cabined Account; the notice also lets them review privacy practices for non-Cabined Accounts, consent to a non-Cabined Account enabling additional features, and set up parental controls. Parents or guardians must complete Epic's parent verification process to consent to a non-Cabined Account. Epic uses Kids Web Services (KWS), offered by its subsidiary Kids Web Services Ltd, for parent, guardian, and user age verification; once an email address is verified, KWS recognizes it across other KWS-powered games or services without re-verification.
Details
Who
parents/guardians of a child creating a Cabined Account
What it does
receive notice, review practices, consent to a non-Cabined Account, set up parental controls
Condition
consent to a non-Cabined Account requires completing parent verification
Supporting quotations
A. Notice, Consent, and Parental Controls
We collect a parent/guardian’s email address from a child to send the parent/guardian an email notice that their child has created a Cabined Account. This notice also lets them review our privacy practices for non-Cabined Accounts, provide consent to a non-Cabined Account for their child to enable additional features, and set up parental controls. Please note that parents/guardians must complete our parent verification process to provide consent for a non-Cabined Account.
We use Kids Web Services (“KWS”), a service offered by our subsidiary Kids Web Services Ltd, for parent/guardian and user age verification purposes. Learn more about Verifiable Parental Consent. Once an email address is verified, KWS will recognize it across other games or services powered by KWS technology, so there will be no need to verify it again. Learn more about KWS.
Not stated here
The linked Verifiable Parental Consent and KWS privacy-policy pages are not supplied in this source.
Account & Service Control · Company practice
Consented non-Cabined Accounts get automatic parental controls
When a parent or guardian consents to a non-Cabined Account for their child, parental controls are enabled automatically and are accessible with a PIN, letting the parent or guardian review and change feature settings chosen in the permission flow and further customize the child's experience. Once authorized, the Policy's general privacy practices apply, except younger users may lack access to some content or features because of default privacy settings, age requirements, or parental controls; depending on settings and age, a child may access communication features like voice and text chat and most Epic Services, including downloading other games or apps from the Epic Games Store.
Details
Who
parents/guardians who consent to a non-Cabined Account
Condition
controls enabled automatically on consent; PIN-gated review and changes
Exception
younger users may lack some content or features per settings, age requirements, or controls
Supporting quotations
When a parent/guardian provides consent for a non-Cabined Account for their child, parental controls are enabled automatically. Parental controls can then be accessed using a PIN code and allow the parent/guardian to review and change feature settings selected during the permission flow and further customize their child’s experience. Learn more about Parental Controls.
Once a parent/guardian has authorized a non-Cabined Account for their child, the privacy practices described elsewhere in this Policy generally apply, but younger users may not have access to all content or features (because of our default privacy settings, age requirements for certain services and features, and/or parental controls in place). For example, depending on the parental control settings and the child’s age, a child may access communication features (like voice and text chat) and interact with most of the Epic Services (including downloading other games or apps from the Epic Games Store). For additional details, please see Sections 3 (What Information Do We Collect and How?) and 4 (Why Do We Process Information?).
Qualifications & exceptions
General practices apply to authorized non-Cabined Accounts subject to the stated limits.
Further detail is pointed to Sections 3 and 4.
Not stated here
The linked Parental Controls page is not supplied in this source.
Sharing & Disclosure · Company practice
Children's account data goes to third parties only for operations or with permission
A child's account information is disclosed to third parties only (1) for purposes integral to operating and protecting the Epic Services, such as to gaming consoles, publishers of games or apps acquired through the Epic Games Store, professional advisors, and law enforcement, or (2) with a parent or guardian's permission, such as for account linking and signing into third-party services.
Details
What it covers
a child's account information
Condition
only for integral operation and protection purposes, or with parent/guardian permission
Supporting quotations
We disclose a child’s account information to third parties: (1) for purposes integral to the operation and protection of our Epic Services (e.g., to gaming consoles, publishers of games or apps acquired through Epic Games Store, professional advisors, and law enforcement), or (2) with a parent/guardian’s permission (e.g., for account linking and signing into third-party services). For additional details, please see Section 5 (Who Do We Disclose Information To?). If you have any questions, please reach out to us using the contact information listed in Section 12 (How Can You Contact Us?).
Qualifications & exceptions
Further detail is pointed to Section 5; questions to the Section 12 contacts.
Retention & Deletion · Company commitment
Children's data kept only as long as reasonably needed
Under Retention of Personal Information: Epic generally retains a child's personal information only as long as reasonably needed for the purposes it was collected. Examples: inquiry information from a Cabined-Account child is deleted after the inquiry is resolved, and a parent or guardian email address provided for notice and consent is deleted if the parent or guardian does not respond within 14 days.
Details
Condition
retained only as long as reasonably needed for collection purposes
When
parent/guardian email deleted if no response within 14 days
Supporting quotations
B. Retention of Personal Information
We generally retain personal information collected from a child only for as long as we reasonably need it for the purposes it was collected. For example:
If a child with a Cabined Account contacts us with a question or request, any personal information provided will be deleted after the inquiry is resolved.
If a child provides their parent/guardian’s email address to receive notice and provide consent for additional features, their email address will be deleted if the parent/guardian does not respond within 14 days.
Qualifications & exceptions
Further detail is pointed to Section 7.
Retention & Deletion · Company commitment
Inactive 18-month child accounts are deleted from April 2026
Starting in April 2026, if a child's account remains inactive for 18 months, the personal information associated with the account will be deleted, as defined by the Children's Online Privacy Protection Rule, 16 CFR 312.2.
Details
When
starting in April 2026; after 18 months of account inactivity
What it covers
personal information associated with the child's account
Supporting quotations
Starting in April 2026, if a child’s account remains inactive for 18 months, personal information associated with the account will be deleted (as defined by Children’s Online Privacy Protection Rule, 16 CFR 312.2).
For additional details, please see Section 7 (How Do We Handle Information?).
Qualifications & exceptions
The Rule is named as the source of the definition; its contents are not stated here.
Children and parents can review data and delete the child's account
Beyond the parental controls that let parents or guardians change choices about specific features like voice and text chat, children and their parents or guardians can exercise individual privacy rights as described in Section 9. Those rights include reviewing the child's personal information retained by Epic and deleting the child's Epic account, which deletes their personal information and stops further collection. To exercise those rights or ask questions about children's information handling, they are directed to the Section 12 contacts or the Parent Support Request Form.
Details
Who
children and their parents/guardians
What it does
review retained information; delete the child's Epic account, deleting PI and stopping further collection
Supporting quotations
C. Child and Parent/Guardian Privacy Rights
In addition to the parental controls that enable parents/guardians to change the choices they’ve made about their child’s use of specific features like voice and text chat, children and their parents/guardians can exercise their individual privacy rights as described in Section 9 (What Choices and Controls Do You Have?). Those rights include the right to review their child’s personal information retained by Epic and delete their child’s Epic account (which deletes their personal information and stops further collection). To exercise those rights or ask any questions about how we handle children’s personal information, please use the contact information listed in Section 12 (How Can You Contact Us?) or head straight to our Parent Support Request Form.
Qualifications & exceptions
The rights are described as those in Section 9; their full detail is not stated here.
Not stated here
The Parent Support Request Form contents are not supplied in this source.
Data Access & Collection · Context
Epic collects information three ways depending on interaction
The types of information Epic collects depend on how the reader interacts with the Epic Services. Generally, Epic collects information in three ways: when readers provide it, automatically when they use the Services, and from third parties.
Details
What it covers
types of information depending on interaction with the Epic Services
Supporting quotations
3. WHAT INFORMATION DO WE COLLECT AND HOW?
The types of information we collect depend on how you interact with the Epic Services. Generally speaking, we collect information in three ways: A) when you provide it to us, B) automatically when you use the Epic Services, and C) from third parties.
Legal Rights & Agreement Rules · Context
Combined de-identified data is treated as identifiable
This Policy is designed to help readers understand how Epic handles information that can be used to identify them. In some cases Epic may also create or collect information that does not identify them individually, such as de-identified or aggregated information. If Epic combines that type of information with information that identifies the reader, Epic treats the combined information as information that can be used to identify them, subject to this Policy.
Details
What it covers
information that can be used to identify you, including combined de-identified or aggregated information
Condition
combination with identifying information brings data under this Policy
Supporting quotations
This Policy is designed to help you understand how we handle information that can be used to identify you. In some cases, we may also create or collect information that does not identify you individually, such as de-identified or aggregated information. If we combine this type of information with information that identifies you, we will treat the combined information as information that can be used to identify you subject to this Policy.
Data Access & Collection · Company practice
Provided information is optional but may gate features
Under Information You Provide: readers can choose to provide different types of information depending on how they use the Epic Services. In some cases Epic asks for specific information because it needs it for the Services or their features. Choosing not to provide requested information may leave the reader unable to access those Services, or features may not work properly.
Details
Who
readers choosing what to provide
Condition
withholding requested information may block access or break features
Supporting quotations
A. Information You Provide
You can choose to provide us with different types of information depending on how you use the Epic Services. In some cases, we will ask you for specific information because we need it for the Epic Services or their respective features. If you choose not to provide the requested information, you may be unable to access those Epic Services or features may not work properly. For example:
Account & Service Control · Company practice
Account, age, and sign-in information Epic may collect
When readers access the Epic Services, Epic may collect their date of birth to determine age and apply appropriate settings, and if they indicate they are a child, it also collects the parent or guardian's email address to give notice and seek consent for additional features. When creating an Epic account, Epic may collect basic registration information such as name, public-facing display name, password, country, and email address, to create and maintain the account, provide requested Services, enforce applicable terms or policies, and keep records of service delivery. When two-factor authentication is enabled, Epic may collect the reader's phone number and email address, depending on the authentication method, to help secure the account.
Details
What it covers
date of birth; parent/guardian email for children; registration details; phone number and email for two-factor authentication
Why
age settings and parental notice/consent; account creation, service provision, terms enforcement, records; account security
Supporting quotations
When you access the Epic Services, we may collect your date of birth to determine age and apply appropriate settings, and if you indicate you are a child, we also collect your parent/guardian’s email address to provide notice and seek their consent for additional features.
When you create an Epic account, we may collect basic registration information (e.g., name, public-facing display name, password, country, and email address) to create and maintain your account, provide the Epic Services you requested, enforce any terms or policies that apply and govern your use of the Epic Services, and maintain appropriate records to reflect how we deliver the Epic Services to you.
When you enable two-factor authentication, depending on which authentication method you use, we may collect your phone number and email address to help secure your account.
Charges & Financial Obligations · Company practice
Payment, contest, and event information Epic may collect
When readers make a purchase on the Epic Games Store, Epic may collect payment information such as credit card number and expiration date, name, and region information, depending on the payment method, to complete the transaction. When entering a contest or competitive event, or participating in Support-A-Creator or Fortnite Developer programs, Epic may collect application information and other provided information to confirm eligibility and process payouts. When registering for events or early access to games, Epic collects registration information.
Details
What it covers
payment information; contest or program application information; event or early-access registration information
Why
complete transactions; confirm eligibility and process payouts; register for events or early access
Supporting quotations
When you make a purchase on the Epic Games Store, depending on which payment method you use, we may collect your payment information (e.g., credit card number and expiration date, name, and region information) to complete the transaction.
When you enter a contest or competitive event, or participate in our Support-A-Creator or Fortnite Developer programs, we may collect your application information and other information you provide to us to confirm your eligibility and process payouts.
When you register for our events or early access to our games, we collect your registration information.
Not stated here
The linked Support-A-Creator and Fortnite Developer pages are not supplied in this source.
Data Access & Collection · Company practice
Social, support, and request information Epic may collect
When readers sign up for email alerts, Epic collects the email address to keep them informed about updates they opted into. When using social features like forums or chat, Epic may collect information they choose to share there, such as forum posts. When voice chat is used with voice reporting enabled in a voice channel, snippets of voice chat are stored on the reader's device and participants' devices; if a terms or policy violation such as the Community Rules is reported, those snippets may be transmitted to Epic to review that reported violation and enforce terms and policies. When readers submit a takedown request, Epic collects the provided information such as name, contact details, signature, and supporting evidence to assess and respond. Survey and questionnaire responses and feedback may be collected, as may correspondence and contact information when contacting player support or another support channel.
Details
What it covers
alert email address; shared social content; on-device voice snippets; takedown materials; survey responses; support correspondence
Condition
voice snippets are transmitted to Epic only if a violation is reported
Supporting quotations
When you sign up for email alerts, we collect your email address to keep you informed about updates you’ve opted into.
When you use social features like our forums or chat, we may collect the information you choose to share on or through them (e.g., the posts you share on our forums). When you use our voice chat feature and voice reporting is enabled in a voice channel, snippets of voice chat are stored on your device and the devices of participants in the voice channel. If a violation of our terms or policies (e.g., Community Rules) is reported, these snippets may be transmitted to Epic to review that reported violation and enforce our terms and policies. For more information on our retention of your voice and text chat, please read our FAQs.
When you submit a takedown request, we collect the information you provide (e.g., name, contact details, signature, and evidence supporting your claim to assess and respond to those requests).
When you complete our surveys or questionnaires, we may collect your responses and feedback.
When you contact us through player support or another support channel, we collect your correspondence and contact information.
Qualifications & exceptions
Voice snippets reach Epic only if a violation is reported.
Not stated here
The linked Community Rules and voice-and-text-reporting FAQ texts are not supplied in this source; chat retention detail beyond this block is not stated here.
Data Access & Collection · Company practice
AI, MetaHuman, and developer-tool inputs Epic collects
When readers use AI-powered features such as Epic Developer Assistant, Epic uses their inputs, including information they submit that may identify them, to generate outputs such as responses that may identify them. When using MetaHuman to create in-game characters, Epic collects images of the reader to generate a mesh solely to provide the requested functionality, not to identify them. When using other developer tools, Epic collects the information, including any content, readers create and publish.
Details
What it covers
AI feature inputs; MetaHuman images; content created and published with developer tools
Why
generate AI outputs; generate a character mesh; provide developer-tool functionality
Supporting quotations
When you use AI-powered features (e.g., Epic Developer Assistant), we use your inputs (e.g., information you submit that may identify you) to generate outputs (e.g., responses that may identify you).
When you use MetaHuman to create in-game characters, we collect images of you to generate a mesh solely to provide the requested functionality, not to identify you.
When you use our other developer tools, we collect the information, including any content, you create and publish.
Qualifications & exceptions
MetaHuman images are stated to serve only the requested functionality, not identification.
Data Access & Collection · Company practice
Automatic collection tied to accounts, devices, or profiles
Under Information We Collect Automatically: Epic collects some information automatically when readers visit, access, or use the Epic Services. This includes information like gameplay or application usage typically associated with the Epic account, a third-party account where access runs through one, or an identifier Epic assigns to the device or profile. The specific automatically collected types may vary.
Details
What it covers
gameplay or application usage associated with an Epic account, third-party account, or assigned device/profile identifier
Supporting quotations
B. Information We Collect Automatically
We collect some information automatically when you visit, access, or use the Epic Services. This includes information like your gameplay or application usage that are typically associated with your Epic account, your third-party account (if you access the Epic Services through one), or an identifier we assign to your device or profile. While the specific types of information that we automatically collect may vary, they generally include:
Qualifications & exceptions
Automatically collected types are stated to vary; this card states only the association mechanism.
Data Access & Collection · Company practice
Usage statistics Epic collects automatically
Automatically collected usage information and statistics about interaction with the Epic Services include the application or game used, duration and timing of use, gameplay attempts, progression and results, saved preferences such as language, crash reports, URLs of visited Epic websites, referring and exiting page URLs, page views, time spent on a page, number of clicks, and platform type.
Details
What it covers
usage statistics: app or game, timing, attempts, progression, preferences, crash reports, URLs, views, clicks, platform type
Supporting quotations
usage information and statistics about how you interact with the Epic Services, including the application or game used, duration and timing of use, gameplay attempts, progression and results, saved preferences (e.g., language), crash reports, URLs of our websites you visited, URLs of referring and exiting pages, page views, time spent on a page, number of clicks, and platform type;
Data Access & Collection · Company practice
Automatic technical and location information collected
Automatically collected information includes technical information about the computer, device, hardware, or software used to access the Epic Services, including IP address, device ID, internet service provider, browser plugins, and other transactional or identifier information such as device make and model, operating system, browser type, and other system-related specifications; and general location information about the device, typically inferred from its IP address.
Details
What it covers
technical device and software information; general device location inferred from IP address
Supporting quotations
technical information about the computer, device, hardware, or software you use to access the Epic Services, including IP address, device ID, internet service provider, browser plugins, and other transactional or identifier information (e.g., device make and model, operating system, browser type, and other system-related specifications); and
general location information about your device, typically inferred from its IP address.
Data Access & Collection · Company practice
Cookies and beacons serve operation, monitoring, and ads
The Epic Services use technologies such as cookies, log files, and web beacons to automatically collect the listed types of information. Some of these technologies may create small files or record-keeping tools stored on the reader's device. They help Epic recognize the device and collect interaction information, which Epic uses to provide and operate the Services (for example authenticating the reader and saving preferences); monitor the Services (for example detecting and reporting crashes); understand and improve the Services (for example data analytics); personalize the Services (for example displaying local currencies); and promote the Services (for example managing advertising).
Details
What it covers
device recognition and interaction information via cookies, log files, and web beacons
Why
operate, monitor, improve, personalize, and promote the Epic Services
Supporting quotations
The Epic Services use technologies such as cookies, log files, and web beacons to automatically collect the types of information listed above. Some of these technologies may create small files or record-keeping tools stored on your device. These technologies help us recognize your device and collect information about your interactions with the Epic Services, and we use that information to, for example, provide and operate the Epic Services (e.g., authenticate you and save preferences); monitor the Epic Services (e.g., detect and report crashes); understand and improve the Epic Services (e.g., conduct data analytics); personalize the Epic Services (e.g., display local currencies); and promote the Epic Services (e.g., manage advertising).
Data Access & Collection · Company practice
Third-party features may collect through their own technologies
When features of the Epic Services are provided by third parties, those third parties may also use automatic data collection technologies and collect information about the reader's use of the Epic Services, their own services, or others' websites over time. For example, when the reader uses Epic Services such as Unreal Engine that include third-party software, those third parties may collect information through their technologies. Features provided by third parties are subject to their applicable privacy notices and policies.
Details
Who
third parties providing features of the Epic Services
Condition
third-party-provided features are subject to those parties' own privacy notices and policies
Supporting quotations
When features of the Epic Services are provided by third parties, those third parties may also use automatic data collection technologies and collect information about your use of the Epic Services, their services, or others’ websites over time. For example, when you use the Epic Services (e.g., Unreal Engine) that include third-party software, those third parties may collect your information through their technologies. Features provided by third parties are subject to their applicable privacy notices and policies.
Not stated here
Those third parties' privacy notices and policies are not supplied in this source.
Data Access & Collection · Context
Epic may receive information about readers from third parties
Under Information We Receive from Others: in some cases, Epic may receive information about the reader from third parties in connection with use of the Epic Services or interactions with Epic on or using third-party platforms, websites, or services.
Details
What it covers
information about the reader received from third parties
Supporting quotations
C. Information We Receive from Others
In some cases, we may receive information about you from third parties in connection with your use of the Epic Services or your interactions with us on or using third-party platforms, websites, or services. For example:
Data Access & Collection · Company practice
Console, linked-account, and login data received from third parties
When readers buy, download, or access games through third-party gaming consoles such as PlayStation, Microsoft Xbox, and Nintendo Switch, Epic may receive information from those consoles, such as third-party display name, user ID, device information, and country, to facilitate gameplay, track progression and entitlements, and support use of the Services. When readers link an Epic account with a third-party social media account such as Facebook, gaming account such as Steam, or similar platform, Epic may receive information from that platform, such as third-party display name, user ID, device information, name, and email address. When readers use an Epic account to log into a third-party developer's product or service, Epic may receive information from that developer, such as in-game interaction information including achievements, to help track, display, and unlock achievements in the Epic Games Store.
Details
What it covers
console identity and country; linked-platform identity and contact details; developer-reported interaction and achievement information
Why
facilitate gameplay and track progression and entitlements; enable linked accounts; track, display, and unlock Store achievements
Supporting quotations
When you buy, download, or access our games through third-party gaming consoles (e.g., PlayStation®, Microsoft Xbox, and Nintendo Switch), we may receive information from those consoles (e.g., your third-party display name, user ID, device information, and country) to facilitate gameplay, track your progression and entitlements, and support your use of the Epic Services.
When you link your Epic account with your account on a third-party social media (e.g., Facebook), gaming (e.g., Steam), or similar platform, we may receive information from that platform (e.g., your third-party display name, user ID, device information, name, and email address).
When you use your Epic account to log into a third-party developer’s product or service, we may receive your information from that developer (e.g., information about your in-game interactions including achievements to help track, display, and unlock achievements in the Epic Games Store).
Data Access & Collection · Company practice
Ad-interaction and user-report information received
When readers interact with an ad for the Epic Services on a third-party website or service, Epic may receive related information from the company operating that website or service. If another user reports that the reader violated Epic's terms or policies, Epic may receive information about the reader from that user. If the reader is a parent or guardian of a child, Epic may receive the parent or guardian's email address directly from the child to contact them for verifiable parental consent.
Details
What it covers
ad-interaction information; violation-report information; parent/guardian email address from the child
Why
contact the parent or guardian for verifiable parental consent
Supporting quotations
When you interact with an ad for the Epic Services on a third-party website or service, we may receive related information from the company operating that website or service.
If another user reports that you violated our terms or policies, we may receive information about you from that user. If you are a parent/guardian of a child, we may receive your email address directly from your child to contact you for verifiable parental consent.
Data Access & Collection · Company commitment
Third-party settings govern what third parties disclose to Epic
Privacy settings on third-party platforms, websites, and services typically control what information they disclose to Epic, so readers are encouraged to review and update those settings regularly. While Epic follows this Policy when using information provided by third parties, Epic does not control how third parties collect or use reader information; readers are referred to those parties' privacy notices and policies for details.
Details
Condition
third-party privacy settings typically control disclosure to Epic
Supporting quotations
Your privacy settings on third-party platforms, websites, and services typically control what information they disclose to Epic, so we encourage you to review and update those settings regularly. While we follow this Policy when using information provided by third parties, we do not control how third parties collect or use your information. For more details, please refer to their privacy notices and policies.
Qualifications & exceptions
Epic's commitment covers its own use of third-party-provided information, not third parties' collection or use.
Not stated here
Those third parties' privacy notices and policies are not supplied in this source.
Use & Processing · Context
Information is processed alone or combined for listed purposes
Epic processes the information it collects, either individually or in combination with other information as described in this Policy, for the purposes outlined in this section. Readers located in the European Economic Area, the United Kingdom, or Switzerland get the relevant lawful bases identified in parentheses below; further information on lawful bases is pointed to Section 11.
Details
Where
lawful bases identified for readers in the EEA, UK, or Switzerland
Supporting quotations
4. WHY DO WE PROCESS INFORMATION?
We process the information we collect, either individually or in combination with other information as described in this Policy, for the purposes outlined below. If you are located in the European Economic Area, the United Kingdom, or Switzerland, the relevant lawful bases are identified in parentheses below. For more information on lawful bases, please see Section 11 (Additional Notice for Individuals Located in the European Economic Area, the United Kingdom, or Switzerland).
Qualifications & exceptions
Lawful bases in parentheses apply to readers in the EEA, UK, or Switzerland.
Use & Processing · Company practice
Operating the Services: accounts, access, transactions, messages
To provide and operate the Epic Services (contractual necessity or legitimate interests): Epic may use reader information to create and maintain the Epic account, grant access to the Services including verifying identity, enable features including cross-progression across platforms and AI-powered features, complete and manage transactions, save preferences, enforce terms and policies, notify about changes to terms and policies, and contact readers about their account, transactions, and other service-related messages necessary for operating the Services.
Details
Why
provide and operate the Epic Services (contractual necessity or legitimate interests)
Supporting quotations
To provide and operate the Epic Services (contractual necessity or legitimate interests): For example, we may use your information to create and maintain your Epic account, grant you access to the Epic Services, including verifying your identity, enable features of the Epic Services, including cross-progression features that allow gameplay across platforms and AI-powered features, complete and manage your transactions, save your preferences, enforce our terms and policies, notify you about changes to our terms and policies, and contact you about your Epic account, transactions, and other service-related messages necessary for the operation of the Epic Services.
Security & Safeguards · Company practice
Support, monitoring, security, and protection purposes
To support and monitor the Epic Services (legitimate interests or contractual necessity): Epic may use reader information to respond to support requests and general inquiries and to detect and report crashes. To secure and protect the Epic Services and others (legitimate interests, contractual necessity, or legal obligations): Epic may use reader information to detect and prevent fraud, cheating, hacking, account theft, misuse, and other unauthorized activities, and to protect the rights, property, and safety of Epic, its users, and others.
Details
Why
support and monitor (legitimate interests or contractual necessity); secure and protect (legitimate interests, contractual necessity, or legal obligations)
Supporting quotations
To support and monitor the Epic Services (legitimate interests or contractual necessity): For example, we may use your information to respond to support requests and general inquiries sent by you, and detect and report crashes.
To secure and protect the Epic Services and others (legitimate interests, contractual necessity, or legal obligations): For example, we may use your information to detect and prevent fraud, cheating, hacking, account theft, misuse, and other unauthorized activities on the Epic Services, and protect the rights, property, and safety of Epic, our users, and others.
Use & Processing · Company practice
Moderation, development, and improvement including ML training
To moderate the Epic Services (legitimate interests, legal obligations, or contractual necessity): Epic may use reader information to detect, moderate, and respond to reported illegal, harmful, toxic, and fraudulent content and conduct that violates applicable laws or terms and policies. To develop the Services (legitimate interests): Epic may use reader information to manage alpha, beta, and early access tests and gather feedback. To understand and improve the Services (legitimate interests): Epic may use reader information to analyze use, support auditing, and improve features, technologies, and processes, including by training machine learning technologies to detect and moderate illegal, harmful, toxic, and fraudulent conduct and content that violates applicable laws or terms and policies.
Details
Why
moderate; develop; understand and improve, including training ML to detect and moderate violating content and conduct
Supporting quotations
To moderate the Epic Services (legitimate interests, legal obligations, or contractual necessity): For example, we may use your information to detect, moderate, and respond to reported illegal, harmful, toxic, and fraudulent content and conduct that violates applicable laws or our terms and policies.
To develop the Epic Services (legitimate interests): For example, we may use your information to manage alpha, beta, and early access tests and gather feedback.
To understand and improve the Epic Services (legitimate interests): For example, we may use your information to analyze your use of the Epic Services, support auditing, and improve features, technologies, and processes, including by training machine learning technologies to detect and moderate illegal, harmful, toxic, and fraudulent conduct and content that violates applicable laws or our terms and policies.
Use & Processing · Company practice
Personalization and promotion on consent or legitimate interests
To personalize the Epic Services (consent or legitimate interests): Epic may use reader information to present tailored content, features, and recommendations, including suggesting games, Islands, items, and game levels, and to improve the machine learning technologies behind personalized recommendations. To promote the Epic Services (consent or legitimate interests): Epic may use reader information to manage, customize, and measure the effectiveness of advertisements, promotional offers, surveys, and events.
Details
Why
personalize content and recommendations; promote via ads, offers, surveys, and events (each on consent or legitimate interests)
Supporting quotations
To personalize the Epic Services (consent or legitimate interests): For example, we may use your information to present content, features, and recommendations tailored to you, or inferred from your activity, including by suggesting games, Islands, items, and game levels, and to improve the machine learning technologies that help deliver these personalized recommendations. For more information on these recommendations, please read here.
To promote the Epic Services (consent or legitimate interests): For example, we may use your information to manage, customize, and measure the effectiveness of our advertisements, promotional offers, surveys, and events.
Not stated here
The linked recommendations notice is not supplied in this source.
Legal Rights & Agreement Rules · Company practice
Corporate transactions, legal claims, and legal compliance
To facilitate corporate transactions (legitimate interests): Epic may transfer reader information within its corporate group in a restructure and to a third-party company in connection with, or during negotiations for, a sale, merger, divestiture, restructuring, reorganization, dissolution, bankruptcy, liquidation, or other transfer of some or all assets, or another similar corporate activity. To establish and defend legal claims (legitimate interests or legal obligations): if the reader brings a legal claim, Epic may use their information to investigate, respond, and defend; where Epic detects misuse, it may use information to establish and pursue its own claims. To comply with applicable laws, regulations, and legal processes (legal obligations): Epic may use reader information to respond to valid law enforcement and government requests including subpoenas, court orders, and search warrants, and may use date of birth to facilitate compliance with youth protection laws.
Details
Why
facilitate corporate transactions; establish and defend legal claims; comply with laws, regulations, and legal processes
Supporting quotations
To facilitate corporate transactions (legitimate interests): For example, we may transfer your information within our corporate group in the event of a company restructure and to a third-party company in connection with, or during negotiations for, a sale, merger, divestiture, restructuring, reorganization, dissolution, bankruptcy, liquidation, or other transfer of some or all our assets, or another similar corporate activity.
To establish and defend legal claims (legitimate interests or legal obligations): For example, if you bring a legal claim against us, we may use your information to investigate and respond to that claim and defend ourselves; and where we detect misuse of the Epic Services, we may use your information to establish and pursue our legal claims.
To comply with applicable laws, regulations, and legal processes (legal obligations): For example, we may use your information to respond to valid requests from law enforcement and government authorities, including subpoenas, court orders, and search warrants; and we may use your date of birth to facilitate compliance with youth protection laws.
Use & Processing · Company practice
Consented marketing, future compatible purposes, de-identified use
For purposes readers have consented to (consent): with consent, Epic may use reader information to send marketing communications. Consent is not required and may be withdrawn at any time. Epic may also process reader information for additional future purposes compatible with those described above, and may explain the purpose at the time of collection. In addition, Epic may use information that does not identify the reader individually, such as de-identified or aggregated information, for business, operational, or other purposes permitted under applicable law.
Details
Why
consented purposes such as marketing; compatible future purposes; de-identified or aggregated business and operational uses
Condition
marketing on consent, which is optional and withdrawable
Supporting quotations
To purposes you’ve consented to (consent): For example, with your consent, we may use your information to send you marketing communications. You are not required to provide your consent, and you may withdraw your consent at any time.
We may also process your information for additional purposes in the future, compatible with those described above, and we may explain the purpose to you at the time of collection. In addition, we may use information that does not identify you individually, such as de-identified or aggregated information, for business, operational, or other purposes permitted under applicable law.
Qualifications & exceptions
Consent is optional and withdrawable at any time.
Future purposes are limited to compatible ones, explained at collection.
Sharing & Disclosure · Context
Information may go to affiliates, providers, and third parties
Epic may disclose some reader information to its subsidiaries and affiliates, its service providers, and third parties for the purposes set out in the preceding sections.
Details
Who
subsidiaries and affiliates, service providers, and third parties
Supporting quotations
5. WHO DO WE DISCLOSE INFORMATION TO?
We may disclose some of your information to our subsidiaries and affiliates, our service providers, and third parties for the purposes set forth above.
Sharing & Disclosure · Company commitment
Service providers with same-or-similar protections
When Epic discloses information to service providers, it endeavors to ensure they provide protections that are the same as, or substantially similar to, those described in this Policy, for example by limiting use of reader information to the services provided. Listed providers are database hosting and storage providers; customer relationship management tools; email service providers; anti-cheat and fraud prevention technology providers; payment processors; large language model providers to enable AI-powered features; and marketing and advertising partners.
Details
Who
hosting, CRM, email, anti-cheat, payment, LLM, and marketing providers
Condition
endeavors to ensure same or substantially similar protections, e.g. use limited to the services provided
Supporting quotations
When we disclose information to our service providers, we endeavor to ensure these service providers provide protections that are the same as, or substantially similar to, those described in this Policy (e.g., by limiting the use of your information to the services provided). Our service providers include:
database hosting and storage providers;
customer relationship management tools;
email service providers;
anti-cheat and fraud prevention technology providers;
payment processors;
large language model providers to enable AI-powered features; and
marketing and advertising partners.
Qualifications & exceptions
The protection commitment is stated as an endeavor, not a guarantee.
Sharing & Disclosure · Company practice
Third parties vary by service: publishers, consoles, public
Depending on the Epic Services used and how the reader interacts with them, third parties include: publishers of games bought or played through the Epic Games Store, to enable the transaction and product features; developers, to authenticate the reader and enable features like friends lists and crossplay when signing into their games or apps with an Epic account, or developers publishing Islands in Fortnite such as for login or support; mobile platforms or gaming consoles to help run games; social media platforms and gaming storefronts where the Epic account is linked; other users or the public, for example display name, game statistics, and created or shared content may be publicly accessible when playing games or using developer tools; and lawyers, consultants, accountants, business advisors, and similar third parties owing Epic duties of confidentiality.
Details
Who
publishers, developers, consoles, linked platforms, other users or the public, professional advisors
Supporting quotations
Depending on the Epic Services you use and how you interact with them, third parties include:
publishers of games you buy or play through the Epic Games Store to enable the transaction and product features (publisher information can be found on the product listing in the Epic Games Store, our Publisher Index, and your Library menu within the Epic Games Launcher);
developers to authenticate you and enable features like friends lists and crossplay if you sign into their games or apps using your Epic account (developer information is available in our EAS Developer Index, and these connections can be viewed and managed in your Epic account settings under ‘Linked accounts’) or developers who publish Islands in Fortnite (e.g., to help with login or support requests);
mobile platforms or gaming consoles to help run our games (e.g., PlayStation®, Microsoft Xbox, and Nintendo Switch);
social media platforms (e.g., Facebook) and gaming storefronts (e.g., Steam) if you link your Epic account to a third-party platform (these links can be viewed and managed in your Epic account settings under ‘Linked accounts’);
other users (e.g., when you use social features like chat) or the public (e.g., when you play our games or use our developer tools, information like your display name, game statistics, and content created or shared may be publicly accessible);
our lawyers, consultants, accountants, business advisors, and similar third parties who owe us duties of confidentiality;
Qualifications & exceptions
Recipient set depends on the Services used and the interaction.
Not stated here
The linked Publisher Index and EAS Developer Index contents are not supplied in this source.
Sharing & Disclosure · Company practice
Successors, authorities, and permitted others may receive data
Reader information may also go to a buyer or other successor in a sale, merger, divestiture, restructuring, reorganization, dissolution, or other transfer of some or all assets, whether as a going concern or in bankruptcy, liquidation, or similar proceedings, where retained user information is among the transferred assets; to law enforcement, government authorities, or others as required to comply with applicable laws, regulations, or legal processes, or if Epic believes disclosure is necessary to protect the rights, property, or safety of Epic, its users, or others, such as investigating fraud or illegal activity, enforcing terms and policies, or protecting against death or serious harm; and to others with the reader's permission, such as in cross-promotional events or with certain payment methods.
Details
Who
a buyer or successor; law enforcement and authorities; others with reader permission
Condition
asset transfer including user information; legal requirement or believed necessity to protect rights, property, or safety; reader permission
Supporting quotations
a buyer or other successor in the event of a sale, merger, divestiture, restructuring, reorganization, dissolution, or other transfer of some or all our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which information retained by us pertaining to users of the Epic Services is among the assets transferred;
law enforcement, government authorities, or others as required to comply with applicable laws, regulations, or legal processes, or if we believe disclosure is necessary to protect the rights, property, or safety of Epic, our users, or others (e.g., to investigate fraud or other illegal activities, enforce our terms and policies, or protect our users or others from death or serious harm); and
others with your permission (e.g., if you participate in cross-promotional events or use certain payment methods).
Sharing & Disclosure · Restriction or exception
Security phone numbers are never shared for marketing
No mobile phone numbers provided to Epic for security purposes will be shared with third parties or affiliates for marketing or promotional purposes.
Details
What it covers
mobile phone numbers provided for security purposes
Exception
never shared with third parties or affiliates for marketing or promotional purposes
Supporting quotations
No mobile phone numbers provided to Epic for security purposes will be shared with third parties or affiliates for marketing or promotional purposes.
Legal Rights & Agreement Rules · Context
US-based Epic may process information outside the reader's country
Epic Games, Inc. is based in the United States but operates globally to give users around the world a better experience on the Epic Services. This means Epic may process, store, and transfer reader information outside the country where the reader lives.
Details
Who
Epic Games, Inc., US-based and operating globally
Where
processing, storage, and transfer may occur outside the reader's country of residence
Supporting quotations
6. WHERE DO WE PROCESS INFORMATION?
Epic Games, Inc. is based in the United States, but we operate globally to help provide users all around the world with a better experience on the Epic Services. This means that Epic may process, store, and transfer your information outside the country where you live.
Legal Rights & Agreement Rules · Company commitment
Cross-border transfers use legal mechanisms and safeguards
Data protection laws in destination countries may differ from those where the reader lives. When Epic transfers information outside the country where it was collected, it relies on appropriate legal mechanisms to support the transfer and implements technical, organizational, and physical safeguards, including model contractual clauses such as the European Commission's Standard Contractual Clauses and, where applicable, adequacy decisions by regulatory authorities. Where permitted by law, using the Epic Services authorizes Epic to process reader information in any country where it operates, including the United States. The location of the Epic entity responsible for operating the Services used is pointed to Section 12.
Details
Condition
transfers outside the collection country use legal mechanisms plus technical, organizational, and physical safeguards
Where
any country where Epic operates, including the United States, where permitted by law
Supporting quotations
The data protection laws in these countries may be different than those where you live. When we transfer your information outside the country where it was collected, we rely on appropriate legal mechanisms to support the transfer and implement technical, organizational, and physical safeguards to secure your information. These measures include model contractual clauses (such as the European Commission’s Standard Contractual Clauses) and, if applicable, adequacy decisions by regulatory authorities.
Where permitted by law, your use of the Epic Services authorizes us to process your information in any country where we operate, including the United States. To learn more about the location of the Epic entity responsible for operating the Epic Services you use, please see Section 12 (How Can You Contact Us?).
Qualifications & exceptions
Authorization by use applies where permitted by law.
The Commission's Clauses are named as an example mechanism; their text is not stated here.
Retention & Deletion · Company commitment
Retention varies; generally as long as reasonably needed
Because the specific information Epic processes and its reasons often vary with how readers use the Epic Services, retention periods can also vary. Epic generally retains information for as long as it reasonably needs it for the purposes described in Section 4, unless a longer retention period is required or permitted by law. For example, an Epic account's associated information, such as name, public-facing display name, password, country, and email address, is generally retained as long as needed to maintain the account, provide requested Services, enforce applicable terms and policies, and record service delivery.
Details
Condition
retained generally as long as reasonably needed for Section 4 purposes
Supporting quotations
7. HOW DO WE HANDLE INFORMATION?
A. Retention
Because the specific information we process and our reasons for doing so often vary depending on how you use the Epic Services, how long we retain your information can also vary. We generally retain information for as long as we reasonably need it for the purposes described in Section 4 (Why Do We Process Information?), unless a longer retention period is required or permitted by law. For example, if you create an Epic account, we will generally retain the information associated with your account (e.g., name, public-facing display name, password, country, and email address) for as long as needed to maintain your account, provide the Epic Services you requested, enforce any terms and policies that apply to and govern your use of the Epic Services, and record how we deliver the Epic Services to you.
Qualifications & exceptions
Longer retention applies where required or permitted by law.
Retention periods weigh law, sensitivity, purpose, and risk
The main criteria Epic considers for specific retention periods often include minimum requirements under applicable law, relevant industry standards, the types of information such as sensitivity level, the processing purposes such as legal compliance, internal records, terms enforcement, and dispute resolution, whether those purposes can be achieved through other means, the potential risk of harm from unauthorized use or disclosure, the information's relevance to potential litigation or similar proceedings such as defending legal claims, and whether the information is needed to prevent fraud or similar abuse such as enforcing prohibitions against cheating and other unauthorized behavior.
The main criteria we consider in determining specific retention periods often include minimum requirements under applicable law, relevant industry standards, the types of information in question (e.g., its level of sensitivity), the purposes for which we process the information (e.g., complying with our legal obligations, managing internal records, enforcing our terms and policies, and resolving disputes), whether we can achieve those purposes through other means, the potential risk of harm from unauthorized use or disclosure of the information, the information’s relevance to potential litigation or similar proceedings (e.g., defending ourselves against legal claims), and whether the information is required to prevent fraud or similar abuse of the Epic Services (e.g., enforcing prohibitions against cheating and other unauthorized behavior).
Retention & Deletion · User right or choice
Readers may request deletion; details in Sections 9, 10, 11
Readers may request that Epic delete their information. More information on requesting deletion is pointed to Sections 9, 10, and 11.
Details
What it does
request that Epic delete your information
Supporting quotations
You may request that Epic delete your information. Please see Sections 9 (What Choices and Controls Do You Have?), 10 (Additional Notice For Residents of Certain US States), and 11 (Additional Notice for Individuals Located in the European Economic Area, the United Kingdom, or Switzerland) for more information on requesting deletion of your information.
Qualifications & exceptions
Deletion-request detail lives in Sections 9, 10, and 11, not here.
Security & Safeguards · Company commitment
Safeguards, login confidentiality, and breach notice
Under Security: Epic maintains appropriate administrative, technical, contractual, and physical safeguards to secure reader information from accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, use, or other unlawful processing. In some cases information may be accessible when readers use the Services. To help keep information secure, readers must maintain the confidentiality of their login information. If Epic becomes aware of unauthorized disclosure of reader information, it will notify readers as required by law and take appropriate steps to help secure the information.
Details
What it does
maintain administrative, technical, contractual, and physical safeguards
Condition
readers must keep login information confidential
Supporting quotations
B. Security
We maintain appropriate administrative, technical, contractual, and physical safeguards to secure your information from accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, use, or other unlawful forms of processing. In some cases, your information may be accessible when you use the Epic Services. To help keep your information secure, you must maintain the confidentiality of your login information. If we become aware of unauthorized disclosure of your information, we will notify you as required by law and take appropriate steps to help secure your information.
Qualifications & exceptions
Breach notice is given as required by law.
Legal Rights & Agreement Rules · Company practice
Policy updates change the top date, sometimes with notice
Epic will update this Policy from time to time to reflect changes in its practices and relevant laws. When it does, it will change the date noted at the top of the Policy. In some cases, Epic may also notify readers of the changes by email or within the applicable Epic Services. Readers are asked to review the Policy regularly to understand their relationship with Epic and how Epic processes information that can be used to identify them on, through, or in connection with the Services.
Details
When
updated from time to time; date at the top changes
Supporting quotations
8. WILL THIS POLICY BE UPDATED?
Yes, we’ll update this Policy from time to time to reflect changes in our practices and relevant laws. When we do so, we’ll change the date noted at the top of this Policy. In some cases, we may also notify you of the changes by email or within the applicable Epic Services. Please review this Policy regularly to make sure that you understand your relationship with Epic and the ways we collect, use, secure, retain, disclose, and otherwise process your information that can be used to identify you on, through, or in connection with the Epic Services.
Qualifications & exceptions
Direct notice of changes happens only in some cases.
Legal Rights & Agreement Rules · Context
Meaningful choices vary with the reader's relationship
Epic seeks to provide readers with meaningful choices about the information it collects. The specific choices available often vary depending on the exact nature of the relationship, such as the Epic Services used.
Details not recorded for this card
Supporting quotations
9. WHAT CHOICES AND CONTROLS DO YOU HAVE?
We seek to provide you with meaningful choices about the information we collect. The specific choices available to you often vary depending on the exact nature of our relationship with you, such as the Epic Services you use. Common examples include:
Legal Rights & Agreement Rules · User right or choice
Account, access, marketing, cookie, and youth choices
Common examples of choices: readers can correct their information through their Epic account; request that Epic provide access to, or correct or delete, collected information; change email marketing preferences at any time, such as through opt-out mechanisms in marketing emails, account settings, or direct contact; change privacy settings on third-party platforms, websites, and services to limit what they disclose to Epic; manage cookies and other automatic data collection technologies through browser or device settings, noting that disabling cookies may leave parts of the Services not working properly and some features unavailable; appeal or request human review of automated decisions as required by applicable law; readers under 18 with an Epic account can request removal or anonymization of certain content they provided; and parents or guardians can adjust settings for their child's Epic account using Parental Controls.
Details
What it does
correct via account; request access, correction, or deletion; change marketing preferences; limit third-party disclosure; manage cookies; appeal automated decisions; under-18 content removal; parental control adjustments
Supporting quotations
You can correct your information through your Epic account.
You can request that we provide access to, or correct or delete, information we have collected from you.
You can change your email marketing preferences at any time (e.g., by using the opt-out mechanism in our marketing emails, updating your Epic account settings, or contacting us directly).
You can change your privacy settings on third-party platforms, websites, and services to limit the information they disclose to us.
You can manage cookies and other automatic data collection technologies through your browser or device settings (e.g., by blocking, deleting, or limiting them). Please note that disabling cookies may cause parts of the Epic Services to not work properly and some features may become unavailable.
You can appeal or request human review of decisions made by automated means as required by applicable law.
If you’re under the age of 18 and have an Epic account, you can request that we remove or anonymize certain content you provided on the Epic Services.
Parents/guardians can adjust settings for their child’s Epic account using Parental Controls.
Qualifications & exceptions
Cookie disabling may break parts of the Services.
Automated-decision review applies as required by applicable law.
Not stated here
The linked Parental Controls page is not supplied in this source.
Legal Rights & Agreement Rules · Procedure
Requests go through Section 12 contacts with identity checks
To submit a request, readers are asked to contact Epic using the Section 12 contact information. Epic may ask for additional information to verify identity before completing the request.
Details
Condition
Epic may require additional identity-verification information
Supporting quotations
To submit a request, please contact us using the contact information listed in Section 12 (How Can You Contact Us?). We may ask for additional information to verify your identity before completing your request.
Legal Rights & Agreement Rules · Context
Some regions grant information choices by law; see Sections 10, 11
Some parts of the world provide individuals with specific choices related to their information by right under applicable law. More information is pointed to Section 10 for residents of certain US states and Section 11 for individuals in the EEA, UK, or Switzerland.
Details
Where
certain US states; the EEA, UK, or Switzerland
Supporting quotations
Some parts of the world provide individuals with specific choices related to their information by right under applicable law. Please see Sections 10 (Additional Notice For Residents of Certain US States) and 11 (Additional Notice for Individuals Located in the European Economic Area, the United Kingdom, or Switzerland) for more information.
Qualifications & exceptions
Regional-right detail lives in Sections 10 and 11, not here.
Legal Rights & Agreement Rules · Context
California notice in CCPA format with CCPA-defined terms
For California residents: the California Consumer Privacy Act (CCPA) requires Epic to provide California residents with information regarding their personal information in a different format. Terms used in this subsection are defined by the CCPA.
Details
Where
residents of California
Supporting quotations
10. ADDITIONAL NOTICE FOR RESIDENTS OF CERTAIN US STATES
A. For California Residents
The California Consumer Privacy Act (CCPA) requires us to provide residents of California with information regarding their personal information in a different format. Terms used in this subsection are defined by the CCPA.
Legal Rights & Agreement Rules · User right or choice
California residents can know, access, correct, and delete
A California resident has the right to know and access what personal information Epic collects about them, including the categories collected and sources, the business or commercial purposes for collection, the categories of third parties with whom Epic discloses personal information, and the specific pieces collected; to correct their personal information; and to deletion of their personal information.
Details
Who
California residents
What it does
know and access with category, source, purpose, and third-party detail; correct; delete
Supporting quotations
If you are a California resident, you have the right to:
know and access what personal information we collect about you, including the categories of personal information collected and sources, the business or commercial purposes for collection, the categories of third parties with whom we disclose personal information, and the specific pieces of personal information collected;
has exception (model-proposed): California responses may be limited for claims, law, or police — California request responses are granted, then limited: Epic may limit responses where necessary for legal claims, legal compliance, or law enforcement cooperation.
Legal Rights & Agreement Rules · Restriction or exception
California deletion yields to operational and legal retention
Epic will delete a California resident's personal information unless retention is necessary for operational or legal reasons, including to provide requested Services, complete transactions, or perform its contract; ensure security or integrity or debug the Services; exercise legal rights on behalf of itself or others; enable internal uses aligned with user expectations; or comply with the California Electronic Communications Privacy Act or another legal obligation.
Details
Exception
retention necessary for operations or legal reasons, including the five listed purposes
Supporting quotations
We will delete your personal information, unless retention is necessary for operational or legal reasons, including to:
provide the Epic Services you requested, complete transactions, or perform our contract with you;
ensure the security or integrity of the Epic Services, or debug the Epic Services;
exercise legal rights on behalf of ourselves or others;
enable internal uses aligned with user expectations; or
comply with the California Electronic Communications Privacy Act, or another legal obligation.
Legal Rights & Agreement Rules · Restriction or exception
California responses may be limited for claims, law, or police
Epic may also limit how it responds to California requests, including when necessary to handle legal claims, comply with applicable laws or legal obligations, or cooperate with law enforcement.
Details
Exception
limits where necessary for legal claims, legal compliance, or law enforcement cooperation
Supporting quotations
We may also limit how we respond to your requests, including when necessary to:
handle legal claims;
comply with applicable laws or legal obligations; or
cooperate with law enforcement.
Cross-references
exception to (model-proposed): California residents can know, access, correct, and delete — California request responses are granted, then limited: Epic may limit responses where necessary for legal claims, legal compliance, or law enforcement cooperation.
Data Access & Collection · Company practice
Categories collected in the past 12 months
The specific information collected typically depends on how the reader interacts with Epic on the Services. In the past 12 months, Epic collected these categories of personal information: identifiers such as name, display name, account ID, device ID, IP address, phone number, or email address; commercial information such as entitlements or purchase history; internet or other electronic network activity such as gameplay information or website usage; audio, electronic, visual, or similar information such as voice chat or images; geolocation data such as derived from IP address or in payment information; characteristics of protected classifications under California or federal law such as age; personal information described in Section 1798.80(e) of the California Civil Code such as name, signature, phone number, or credit or debit card information; in some cases, sensitive personal information such as account log-in credentials and, for marketplace sellers or traders of creative content, government ID; and inferences drawn from the above such as game genres the reader may prefer based on purchases or play history.
Details
When
in the past 12 months
What it covers
identifiers; commercial information; network activity; audio/visual; geolocation; protected-classification characteristics; Civil Code 1798.80(e) information; sensitive information in some cases; inferences
Supporting quotations
As described in greater detail in Section 3 (What Information Do We Collect and How?), the specific information we collect from you typically depends on how you choose to interact with us on the Epic Services. In the past 12 months, we’ve collected the following categories of personal information:
identifiers (e.g., name, display name, account ID, device ID, IP address, phone number, or email address);
commercial information (e.g., entitlements or purchase history);
internet or other electronic network activity information (e.g., gameplay information or website usage);
audio, electronic, visual, or similar information (e.g., voice chat or images of you);
geolocation data (e.g., as may be derived from your IP address or included in your payment information);
characteristics of protected classifications under California or federal law (e.g., age);
personal information described in Section 1798.80(e) of the California Civil Code (e.g., name, signature, phone number, or credit or debit card information);
in some cases, sensitive personal information (e.g., account log-in credentials and, if you list, sell, or trade creative content in one of our marketplaces, government ID); and
inferences drawn from any of the above categories (e.g., the genres of games you may prefer to play based on your purchases or play history).
Qualifications & exceptions
The cited Civil Code section is named as a category label; its contents are not explained here.
Collection detail beyond the categories is pointed to Section 3.
Sharing & Disclosure · Company commitment
No extra sensitive use, no sale or share, no marketing disclosure
Epic does not use or disclose sensitive personal information for purposes other than those necessary to provide the Epic Services or permissible under the CCPA. Epic also does not sell or share the personal information it collects, including for users it actually knows are under 16. Under Shine the Light, Epic also does not disclose reader personal information to third parties for their own direct marketing purposes unless the reader opts in to that disclosure, as defined by California's Shine the Light Law.
Details
Exception
no sale or sharing, including known under-16 users; no third-party direct-marketing disclosure without opt-in
Supporting quotations
Epic does not use or disclose sensitive personal information for purposes other than those that are necessary to provide the Epic Services or permissible under the CCPA. Epic also does not sell or share the personal information it collects. This includes for users for whom we have actual knowledge are under 16.
Shine the Light: We also do not disclose your personal information to third parties for their own direct marketing purposes unless you opt-in to that disclosure (as defined by California’s Shine the Light Law).
Qualifications & exceptions
The Shine the Light Law is named but not explained here.
Legal Rights & Agreement Rules · Context
California detail points to Sections 3, 4, and 5
For the categories of sources of personal information, readers are pointed to Section 3; for the business or commercial purposes of collection including sensitive personal information, to Section 4; and for the categories of third parties receiving disclosure, to Section 5.
Details not recorded for this card
Supporting quotations
For more information on (1) the categories of sources from which your personal information is collected, please see Section 3 (What Information Do We Collect and How?); (2) the business or commercial purposes for collecting your personal information, including sensitive personal information, please see Section 4 (Why Do We Process Information?); and (3) the categories of third parties to whom we disclose your personal information, please see Section 5 (Who Do We Disclose Information To?).
Legal Rights & Agreement Rules · Context
Listed states' comprehensive laws apply as of the Policy date
For other US state residents: Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have each enacted a comprehensive privacy law in effect as of the date of this Policy. Other states may enact comprehensive privacy laws in the future. These laws require Epic to provide residents of those states with information regarding their personal data in a different format. Terms used in this subsection are defined by the applicable privacy law in the reader's state of residence.
Details
Where
the eighteen listed states with comprehensive privacy laws in effect as of the Policy date
When
in effect as of the date of this Policy
Supporting quotations
B. For Other US State Residents
Certain US states, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have each enacted a comprehensive privacy law, which is in effect as of the date of this Policy. Other states may enact comprehensive privacy laws in the future. These laws require us to provide residents of those states with information regarding their personal data in a different format. Terms used in this subsection are defined by the applicable privacy law in your state of residence.
Qualifications & exceptions
Coverage is stated as of the date of this Policy; future state laws are not covered here.
Legal Rights & Agreement Rules · User right or choice
Listed-state residents can know, copy, correct, and delete
Residents of those states have the right to know whether Epic is processing their personal data; to access and obtain a copy of their personal data; to correct their personal data, except for residents of Iowa; and to deletion of their personal data.
Details
Who
residents of the listed states
What it does
know; access and copy; correct except in Iowa; delete
Supporting quotations
If you are a resident of those states, you have the right to:
know whether we are processing your personal data;
access and obtain a copy of your personal data;
correct your personal data (except for residents of Iowa); and
deletion of your personal data.
Qualifications & exceptions
Iowa residents are excepted from the correction right.
Legal Rights & Agreement Rules · Restriction or exception
Other-state responses limited by legal and operational needs
Certain legal obligations and operational needs may limit how Epic responds to these requests. Listed exceptions include providing requested Services or performing contracts; conducting research to develop or improve the Services; identifying and fixing technical issues; performing other internal operations consistent with user expectations; and preventing or responding to security incidents, fraud, identity theft, or other illegal or harmful activities.
Details
Exception
legal obligations and operational needs, including the five listed purposes
Supporting quotations
Certain legal obligations and operational needs may limit how we respond to your requests. These exceptions may include:
providing the Epic Services you request or performing our contracts;
conducting research to develop or improve the Epic Services;
identifying and fixing technical issues;
performing other internal operations consistent with user expectations;
preventing or responding to security incidents, fraud, identity theft, or other illegal or harmful activities;
Qualifications & exceptions
The exceptions list continues in the following packet; this card covers only the exceptions stated here.
Legal Rights & Agreement Rules · Restriction or exception
The remaining listed exceptions to other-state request responses are handling legal claims; complying with applicable laws or legal obligations; and cooperating with law enforcement.
Details
Exception
handling legal claims; complying with laws or legal obligations; cooperating with law enforcement
Supporting quotations
handling legal claims;
complying with applicable laws or legal obligations; or
cooperating with law enforcement.
Qualifications & exceptions
This card completes the exceptions list begun in the previous packet.
Sharing & Disclosure · Company commitment
No sale, no targeted ads, no significant automated profiling
Epic does not sell personal data it collects or process it for targeted advertising. Epic also does not profile its users through automated means to make decisions that have legal or similarly significant effects. This includes users Epic actually knows are under 18.
Details
Exception
no sale, no targeted-advertising processing, no legal-or-similarly-significant automated profiling, including known under-18 users
Supporting quotations
Epic does not sell personal data it collects or process it for targeted advertising. Epic also does not profile its users through automated means to make decisions that have legal or similarly significant effects. This includes for users for whom we have actual knowledge are under 18.
Legal Rights & Agreement Rules · Context
Other-state detail points to Sections 2 through 5
For processing of sensitive data from a known child under 13, readers are pointed to Section 2; for the categories of personal data processed, to Section 3; for processing purposes, to Section 4; and for the categories of third parties receiving disclosure and the categories of personal data disclosed, to Section 5.
Details not recorded for this card
Supporting quotations
For more information on (1) our processing of sensitive data from a known child under the age of 13, please see Section 2 (How Do We Process Children’s Information?); (2) the categories of personal data processed by us, please see Section 3 (What Information Do We Collect and How?); (3) our purposes for processing personal data, please see Section 4 (Why Do We Process Information?); and (4) the categories of third parties with whom we disclose personal data and the categories of personal data we disclosed, please see Section 5 (Who Do We Disclose Information To?).
Legal Rights & Agreement Rules · Procedure
Rights requests need verification; agents need signed permission
To exercise privacy rights, readers are asked to contact Epic through the Section 12 contacts. Only the reader, or an authorized representative on behalf of a California resident, may submit a verifiable request, which must include enough information to confirm identity and understand the request. Account holders may be asked to log in to verify identity. Authorized agents of California residents must include written permission signed by the resident, who may also need to verify identity directly. Requests may be denied where identity or authority cannot be verified. Appeals use the same Section 12 contacts.
Details
Who
the reader, or an authorized representative for a California resident
Condition
verifiable request with enough identity information; signed written permission for agents; denial if unverifiable
Supporting quotations
C. Exercising Your Privacy Rights
To exercise your privacy rights, please contact us using the contact information listed in Section 12 (How Can You Contact Us?). Only you (or an authorized representative on behalf of a California resident) may submit a verifiable request, which must include enough information for us to confirm your identity and understand the request. If you have an Epic account, we may ask you to log in to verify your identity. Authorized agents of California residents must include written permission signed by the resident, who may also need to verify their identity directly. Requests may be denied if we cannot verify your identity or authority. Appeals can be submitted using the same contact information listed in Section 12 (How Can You Contact Us?).
Legal Rights & Agreement Rules · Company commitment
No discrimination for exercising privacy rights
Epic will not discriminate against readers for exercising any of their privacy rights under applicable law.
Details not recorded for this card
Supporting quotations
We will not discriminate against you for exercising any of your privacy rights under applicable law.
Legal Rights & Agreement Rules · Context
EEA, UK, and Swiss notice in GDPR format with GDPR terms
The General Data Protection Regulation (GDPR), along with similar laws in the United Kingdom and Switzerland, requires Epic to provide individuals located in the European Economic Area, the UK, or Switzerland with information regarding their personal data in a different format. Terms used in this section are defined by the GDPR.
Details
Where
individuals located in the EEA, the UK, or Switzerland
Supporting quotations
11. ADDITIONAL NOTICE FOR INDIVIDUALS LOCATED IN THE EUROPEAN ECONOMIC AREA, THE UNITED KINGDOM, OR SWITZERLAND
The General Data Protection Regulation (GDPR), along with similar laws in the United Kingdom (UK) and Switzerland, requires us to provide individuals located in the European Economic Area (EEA), the UK, or Switzerland with information regarding their personal data in a different format. Terms used in this section are defined by the GDPR.
Qualifications & exceptions
The GDPR is named as the source of definitions; its provisions are not explained here.
Legal Rights & Agreement Rules · User right or choice
EEA, UK, and Swiss residents get seven data rights
Readers located in the EEA, the UK, or Switzerland have the right to access their personal data; correct it; delete it; temporarily restrict Epic's use of it; object to some types of processing, including direct marketing and processing based on legitimate interests; data portability, including receiving a copy; and withdraw consent where processing is based on consent, without affecting the lawfulness of processing based on consent before withdrawal.
Details
Who
readers located in the EEA, the UK, or Switzerland
If you are located in the EEA, the UK, or Switzerland, you have the right to:
access your personal data;
correct your personal data;
deletion of your personal data;
temporarily restrict our use of your personal data;
object to some types of processing, including processing for direct marketing purposes and based on our legitimate interests;
data portability, including receiving a copy of your personal data; and
withdraw your consent, where our processing is based on consent (if you withdraw your consent, this does not affect the lawfulness of any processing based on your consent before it was withdrawn).
Qualifications & exceptions
Withdrawal does not retroactively affect prior consent-based processing.
Cross-references
has exception (model-proposed): EEA responses may need identity proof or be limited — EEA/UK/Swiss rights are granted, then limited: Epic may require identity proof and limit responses in the listed circumstances.
Legal Rights & Agreement Rules · Restriction or exception
EEA responses may need identity proof or be limited
Epic may ask for additional information to verify identity before fulfilling a rights request. It may also limit its response where the request is manifestly unfounded or excessive; where it would adversely affect the rights and freedoms of others; where overriding legitimate grounds for processing outweigh the reader's interests, rights, and freedoms; or where processing is necessary to establish, exercise, or defend legal claims, perform a contract, or comply with legal obligations.
Details
Condition
identity verification may be required
Exception
unfounded or excessive requests; harm to others' rights; overriding legitimate grounds; legal claims, contract, or legal obligations
Supporting quotations
We may ask for additional information to verify your identity before fulfilling a rights request. We may also limit our response in certain circumstances, including when:
the request is manifestly unfounded or excessive;
the request would adversely affect the rights and freedoms of others;
there are overriding legitimate grounds for processing that overweigh your interests, rights, and freedoms; or
the processing is necessary to establish, exercise, or defend our legal claims, perform a contract with you, or comply with our legal obligations.
Cross-references
exception to (model-proposed): EEA, UK, and Swiss residents get seven data rights — EEA/UK/Swiss rights are granted, then limited: Epic may require identity proof and limit responses in the listed circumstances.
Legal Rights & Agreement Rules · User right or choice
EEA complaints go to regulators or Epic directly
Readers also have the right to complain to their local data protection supervisory authority, with links for the EEA's European Data Protection Authorities, the UK's Information Commissioner's Office, and Switzerland's Federal Data Protection and Information Commissioner, or to contact Epic directly with a complaint, via Section 12. Epic states it would appreciate the chance to address issues first.
Details
What it does
complain to the local supervisory authority or contact Epic directly
Supporting quotations
You also have the right to make a complaint with your local data protection supervisory authority (please see links below) or to contact us directly with any complaint (please see Section 12 (How Can You Contact Us?)). We would appreciate the chance to address your issues first.
The linked regulator pages are not supplied in this source.
Legal Rights & Agreement Rules · Context
Four lawful bases depend on service and interaction
The lawful bases Epic relies on depend on the Epic Services used and how the reader interacts with them: contractual necessity, when processing personal data to perform requested Services under the Terms of Service or similar contractual agreements; legitimate interests, when processing supports Epic's business purposes as balanced against the potential impact on privacy rights; legal obligations, when processing complies with legal obligations; and consent, when the reader gives consent, which is optional and withdrawable at any time.
The lawful bases we rely on to process your personal data depend on the Epic Services you use and how you interact with them. These lawful bases are:
Contractual necessity: when we process your personal data to perform the Epic Services you requested under our Terms of Service or other similar contractual agreements with you.
Legitimate interests: when we process your personal data to support Epic’s business purposes, as balanced against the potential impact on your privacy rights.
Legal obligations: when we process your personal data to comply with our legal obligations.
Consent: when you give us your consent to process your personal data. You are not required to provide consent, and you may withdraw your consent at any time.
Qualifications & exceptions
Consent is optional and withdrawable at any time.
Legal Rights & Agreement Rules · Context
How bases apply to purposes is in Section 4
For more information on how these lawful bases apply to different purposes of processing, readers are pointed to Section 4.
Details not recorded for this card
Supporting quotations
For more information on how these lawful bases apply to different purposes of processing, please see Section 4 (Why Do We Process Information?).
Legal Rights & Agreement Rules · Procedure
Game and store issues go to per-product support channels
Section 12 (How Can You Contact Us?) opens with support requests: readers with questions or concerns about the Epic Services, such as game issues, Epic account access, bugs, payments, content, or entitlements, are asked to contact the relevant support channel through the listed links, one each for Fortnite, Rocket League, Fall Guys, Epic Games Store, Fab, and Unreal Engine.
Details
What it does
contact the relevant per-product support channel for service questions
Supporting quotations
12. HOW CAN YOU CONTACT US?
A. Support Requests
If you have questions or concerns about the Epic Services (e.g., issues related to a game, accessing your Epic account, bugs, payments, content, or entitlements), please contact the relevant support channel through the links provided below.
The linked support pages are not supplied in this source.
Legal Rights & Agreement Rules · Procedure
Privacy questions and rights requests go to privacy emails
For privacy requests, readers who want to learn more about Epic's privacy practices or the Policy, or to exercise data subject rights, are asked to email privacy@support.epicgames.com or dpo@support.epicgames.com. They may also write by email or postal mail marked Attn: Legal Department using the contact information below for the entity responsible for the applicable Epic Services.
Details
What it does
email the privacy addresses or write Attn: Legal Department to the responsible entity
Supporting quotations
B. Privacy Requests
If you want to learn more about our privacy practices or this Policy, or exercise your data subject rights, please email privacy@support.epicgames.com or dpo@support.epicgames.com. You can also contact us via email or postal mail (marked “Attn: Legal Department”) using the contact information listed below for the entity responsible for providing the applicable Epic Services.
Each service maps to the Epic entity responsible for it
The Policy names the entity responsible for providing each service: Fortnite maps to Epic Games, Inc. for US residents or Epic Games Entertainment International GmbH for non-US residents; Rocket League to Psyonix LLC; Fall Guys to Epic Games, Inc.; Horizon Chase 2 to Aquiris Game Studio LLC; Rock Band to Harmonix Music Systems, Inc.; Epic Games Store and Fab to Epic Games, Inc. for US residents or Epic Games Commerce GmbH for non-US residents; Unreal Engine and MetaHuman to Epic Games, Inc. for US residents or Epic Games Commerce GmbH for non-US residents; Unreal Editor for Fortnite to Epic Games, Inc. for US residents or Epic Games Entertainment International GmbH for non-US residents; Postparty to Life on Air Inc.; Epic websites and subdomains linking to the Policy to Epic Games, Inc.; and other Epic Services to the licensing entity in the relevant terms for the reader's region.
Details
Who
the Epic entity responsible for each listed service
Supporting quotations
Fortnite: Epic Games, Inc. (for US residents) or Epic Games Entertainment International GmbH (for non-US residents)
Rocket League: Psyonix LLC
Fall Guys: Epic Games, Inc.
Horizon Chase 2: Aquiris Game Studio LLC
Rock Band: Harmonix Music Systems, Inc.
Epic Games Store and Fab: Epic Games, Inc. (for US residents) or Epic Games Commerce GmbH (for non-US residents)
Unreal Engine and MetaHuman: Epic Games, Inc. (for US residents) or Epic Games Commerce GmbH (for non-US residents)
Unreal Editor For Fortnite: Epic Games, Inc. (for US residents) or Epic Games Entertainment International GmbH (for non-US residents)
Postparty: Life on Air Inc.
Our websites and their respective subdomains that link to this Policy: Epic Games, Inc.
Other Epic Services: Please see the relevant terms and conditions for the licensing entity listed in your region
Qualifications & exceptions
US versus non-US splits apply where stated.
Not stated here
The relevant terms and conditions naming other-service licensing entities are not supplied in this source.
Aquiris Game Studio contact and regional representatives
Aquiris Game Studio LLC lists a Plantation, Florida address care of C T Corporation System; Mishcon de Reya as EU/UK representative; and Henrique Fabretti of Opice Blum, Bruno Advogados Associados as Brazil Data Protection Officer at dpo@support.epicgames.com.
Details
Who
Aquiris Game Studio LLC
Where
EU/UK representative and Brazil Data Protection Officer listed
Supporting quotations
Contact Information
Aquiris Game Studio LLC
Address: C/O C T Corporation System, 1200 South Pine Island Road, Plantation, Florida 33324, USA
EU/UK Representative: Mishcon de Reya (representative@mishcon.com)
Brazil Data Protection Officer: Henrique Fabretti of Opice Blum, Bruno Advogados Associados (dpo@support.epicgames.com)
Legal Rights & Agreement Rules · Context
Epic Games Commerce GmbH contact and regional officers
Epic Games Commerce GmbH lists a Root, Switzerland address; Mishcon de Reya as EU/UK representative; dpo@support.epicgames.com as EU/UK Data Protection Officer; and Henrique Fabretti of Opice Blum, Bruno Advogados Associados as Brazil Data Protection Officer at the same privacy address.
Details
Who
Epic Games Commerce GmbH
Supporting quotations
Epic Games Commerce GmbH
Address: Platz 10, 6039 Root D4, Switzerland
EU/UK Representative: Mishcon de Reya (representative@mishcon.com)
EU/UK Data Protection Officer: dpo@support.epicgames.com
Brazil Data Protection Officer: Henrique Fabretti of Opice Blum, Bruno Advogados Associados (dpo@support.epicgames.com)
Legal Rights & Agreement Rules · Context
Epic Games Entertainment International GmbH contacts
Epic Games Entertainment International GmbH lists the same Root, Switzerland address; Mishcon de Reya as EU/UK representative; dpo@support.epicgames.com as EU/UK Data Protection Officer; and Henrique Fabretti of Opice Blum, Bruno Advogados Associados as Brazil Data Protection Officer at the same privacy address.
Details
Who
Epic Games Entertainment International GmbH
Supporting quotations
Epic Games Entertainment International GmbH
Address: Platz 10, 6039 Root D4, Switzerland
EU/UK Representative: Mishcon de Reya (representative@mishcon.com)
EU/UK Data Protection Officer: dpo@support.epicgames.com
Brazil Data Protection Officer: Henrique Fabretti of Opice Blum, Bruno Advogados Associados (dpo@support.epicgames.com)
Legal Rights & Agreement Rules · Context
Epic Games, Inc. contact and regional officers
Epic Games, Inc. lists its Cary, North Carolina address; Mishcon de Reya as EU/UK representative; dpo@support.epicgames.com as EU/UK Data Protection Officer; and Henrique Fabretti of Opice Blum, Bruno Advogados Associados as Brazil Data Protection Officer at the same privacy address.
Details
Who
Epic Games, Inc.
Supporting quotations
Epic Games, Inc.
Address: 620 Crossroads Boulevard, Cary, North Carolina 27518, USA
EU/UK Representative: Mishcon de Reya (representative@mishcon.com)
EU/UK Data Protection Officer: dpo@support.epicgames.com
Brazil Data Protection Officer: Henrique Fabretti of Opice Blum, Bruno Advogados Associados (dpo@support.epicgames.com)
Legal Rights & Agreement Rules · Context
Harmonix contact and EU/UK representative
Harmonix Music Systems, Inc. lists a Boston, Massachusetts address; privacy@harmonixmusic.com as contact; and Mishcon de Reya as EU/UK representative.
Details
Who
Harmonix Music Systems, Inc.
Supporting quotations
Harmonix Music Systems, Inc.
Address: 40 Broad Street, Floor 7, Boston, Massachusetts 02109, USA
Contact: privacy@harmonixmusic.com
EU/UK Representative: Mishcon de Reya (representative@mishcon.com)
Legal Rights & Agreement Rules · Context
Life on Air contact and regional representatives
Life on Air Inc. lists a Cary, North Carolina address; privacy@support.epicgames.com as contact; Mishcon de Reya as EU/UK representative; and Henrique Fabretti of Opice Blum, Bruno Advogados Associados as Brazil Data Protection Officer at dpo@support.epicgames.com.
Details
Who
Life on Air Inc.
Supporting quotations
Life on Air Inc.
Address: 620 Crossroads Boulevard, Cary, North Carolina 27518, USA
Contact: privacy@support.epicgames.com
EU/UK Representative: Mishcon de Reya (representative@mishcon.com)
Brazil Data Protection Officer: Henrique Fabretti of Opice Blum, Bruno Advogados Associados (dpo@support.epicgames.com)
Legal Rights & Agreement Rules · Context
Psyonix contact and regional representatives
Psyonix LLC lists a San Diego, California address; privacy@support.epicgames.com as contact; Mishcon de Reya as EU/UK representative; and Henrique Fabretti of Opice Blum, Bruno Advogados Associados as Brazil Data Protection Officer at dpo@support.epicgames.com.
Details
Who
Psyonix LLC
Supporting quotations
Psyonix LLC
Address: 401 West A. Street, Suite 2400, San Diego, California 92101, USA
Contact: privacy@support.epicgames.com
EU/UK Representative: Mishcon de Reya (representative@mishcon.com)
Brazil Data Protection Officer: Henrique Fabretti of Opice Blum, Bruno Advogados Associados (dpo@support.epicgames.com)