Roblox Privacy and Cookie Policy

Retention & Deletion · Company commitment

If a child gives more Personal Information than needed, Roblox deletes it, cancels the account or turns on protections

The policy says that a user under 13 will only be asked for the information needed to set up or protect the account. If the user gives more of their Personal Information, Roblox says it will do one of three things: delete any additional Personal Information it collected (unless the law requires it to keep it), cancel the account, or turn on age-appropriate protections on the account. The policy does not say what decides which of the three applies.

Supporting quotations

We don’t want more Personal Information

If you’re under 13 years old, we will only ask you to tell us the information we need to set up or protect your account. If you give us more of your Personal Information, we will:

delete any additional Personal Information we’ve collected from you (unless the law requires us to keep it),

cancel your account, or

turn on age-appropriate protections on your account

“Personal Information” means any information relating to a natural person who can be identified, directly or indirectly

Qualifications & exceptions

• Applies when a user under 13 gives more information than is needed to set up or protect the account.
• Deletion of the additional information is subject to a legal-retention exception.
• The three actions are listed as alternatives ("or").

Not stated here

• What decides which of the three actions is taken is not stated.

Retention & Deletion · Company practice

Persistent identifiers are kept while you have an account, and up to two years after deletion for safety

Roblox says it maintains a retention policy designed to limit retention to what is reasonably necessary for the purposes it collected the information and to stop persistent identifiers being kept indefinitely, and that it uses access controls, purpose-based tagging, employee training and data segregation. It says it may retain persistent identifiers for different periods based on its business needs. To maintain an account (for example remembering its configuration and activity history) it stores persistent identifiers for as long as the account exists. When you delete your account Roblox initiates permanent deletion of data in its systems, but for safety and security (for example bot prevention) it may process persistent identifiers for up to two years after account deletion.

Supporting quotations

Roblox maintains a retention policy designed to limit data retention to what is reasonably necessary to fulfill the specific purposes for which we collected your information and to prevent persistent identifiers from being retained indefinitely.

Roblox may retain the persistent identifiers that we collect from you for different periods of time based on our specific business needs

Roblox stores persistent identifiers for the amount of time you have an account.

When you delete your account, Roblox initiates permanent deletion of data in our systems.

For safety and security purposes (e.g., bot prevention), Roblox may process persistent identifiers for up to two years after account deletion.

Qualifications & exceptions

• Retention periods vary by business need.
• Persistent identifiers are stored for as long as you have an account.
• Up to two years after account deletion for safety and security purposes; stated as "may".

Not stated here

• The retention periods for categories other than persistent identifiers are not given in this passage.
• What counts as a "business need" beyond the listed examples is not defined.

Cross-references

• refers to (model-proposed): Roblox keeps Personal Information as long as needed for its purposes, then de-identifies or deletes it — The data retention statement for persistent identifiers sits within the under-13 part, while the general retention passage in the looking-after-information part covers Personal Information more broadly; neither states fixed periods for all categories.

Retention & Deletion · Company commitment

A parent email given to set up a parent account is deleted within 24 hours if the parent does not finish linking

The policy says that if you give Roblox your parent's email in order to establish a parental account, Roblox deletes that email within 24 hours if your parent does not complete the linking process.

Supporting quotations

Linking to Parent Accounts

If you provide Roblox with your parent’s email for the purposes of establishing a parental account, Roblox deletes your parent’s email within 24 hours if your parent does not complete the linking process.

Qualifications & exceptions

• Applies when the parent email is provided to establish a parental account and the parent does not complete linking.

Not stated here

• What happens to the email if the parent does complete linking is not stated in this passage.

Retention & Deletion · Restriction or exception

Roblox may keep information longer when law or regulation requires it

The policy says Roblox may also retain information for longer periods if it is required to do so for legal or regulatory compliance. This applies on top of the retention periods described above.

Supporting quotations

Meeting Legal Obligations

Roblox may also retain information for longer periods if we are required to do so for legal or regulatory compliance.

Qualifications & exceptions

• Applies where retention is required for legal or regulatory compliance.

Not stated here

• Which laws or the length of such retention are not specified.

Retention & Deletion · Company commitment

Roblox keeps Personal Information as long as needed for its purposes, then de-identifies or deletes it

The policy says Roblox may keep your Personal Information for specific purposes as long as it needs it to fulfill those purposes, sometimes even if you have stopped using the Services. When it no longer requires the information, it says it will de-identify or delete it.

Supporting quotations

How long we keep your information

We may keep your Personal Information for specific purposes as long as we need it to fulfill those purposes, sometimes even if you’ve stopped using Roblox’s Services. When we no longer require your Personal Information, we will de-identify or delete the information.

Qualifications & exceptions

• Retention lasts as long as needed for the specific purposes; this may continue after you stop using the Services.

Not stated here

• No fixed retention periods are given in this passage.

Cross-references

• referred to by (model-proposed): Persistent identifiers are kept while you have an account, and up to two years after deletion for safety — The data retention statement for persistent identifiers sits within the under-13 part, while the general retention passage in the looking-after-information part covers Personal Information more broadly; neither states fixed periods for all categories.

Retention & Deletion · Company practice

Roblox may keep billing and account history, safety information and information needed for legal reasons

The policy lists reasons Roblox may need to keep information. To resolve problems it keeps billing information and transaction histories for billing disputes or inquiries, and user account history to solve customer service issues and to provide, improve and develop its service. To make services safer it may keep information that helps make the Service safer and more secure, such as to stop bad actors misusing Roblox. For legal reasons it may keep information for establishing legal defenses, conducting audits, pursuing legitimate business purposes, enforcing agreements, exercising rights or complying with legal obligations.

Supporting quotations

For resolving problems

We keep billing information and transaction histories so that we can resolve billing disputes or inquiries.

We keep user account history to solve any customer service issues and to provide, improve, and develop our service.

To make our services safer

We may keep information if it will help us make our Service safer and more secure, such as to stop bad actors who try to misuse Roblox.

For legal reasons

We may keep information for legal reasons, like establishing legal defenses, conducting audits, pursuing legitimate business purposes, enforcing our agreements, exercising our rights, or complying with legal obligations.

Qualifications & exceptions

• Billing and account history are kept to resolve problems.
• The safety and legal reasons are stated as things Roblox "may" keep information for.
• "Pursuing legitimate business purposes" is a broad legal-reason ground.

Not stated here

• How long information is kept for each reason is not stated.

Retention & Deletion · Restriction or exception

Other users may keep publicly shared content and virtual items you give them

The policy says other users may keep publicly shared content and virtual items on the platform, giving the example that if you create a virtual shirt and sell it to another user, the shirt will be kept on the platform because the other user now possesses it.

Supporting quotations

Letting other users keep your information

Other users may keep publicly shared content and virtual items on our platform (e.g., if you create a virtual shirt and then sell it to another user, the virtual shirt will be kept on the platform because the other user now possesses it).

Qualifications & exceptions

• Covers publicly shared content and virtual items other users possess.
• The shirt is an example.

Not stated here

• Whether other kinds of content stay after account deletion is not stated in this passage.