Roku presents this Privacy Policy with a single version label above the policy text: "Last updated: July 1, 2026". The document identifies that date as the point the policy text was last revised; it does not here use the words "effective" or name a different coming-into-force date. Anything Roku says in this policy is therefore the practice the publisher described as current on that date, and later changes would appear in a later update of this page rather than in this text.
Details
When
July 1, 2026
Supporting quotations
Last updated: July 1, 2026
Qualifications & exceptions
The policy labels the date "Last updated", not as an effective date, and no separate coming-into-force date is stated with it.
Not stated here
Whether this version became operative on July 1, 2026 rather than being published later is not stated in this text.
Legal Rights & Agreement Rules · Restriction or exception
"Roku" excludes the Frndly TV and TOH companies from the companies this policy covers
The policy is issued by Roku, Inc. together with its affiliated companies, but it names an exclusion: Frndly TV, Inc., TOH Intermediate Holdings, LLC and their subsidiaries are left out of the group the words "Roku", "we" and "us" mean. The exclusion is stated in the same sentence that defines who collects the information, so it shapes every statement that follows: a practice described here is a practice of Roku, Inc. and its other affiliates, and nothing in this text tells a reader what Frndly TV or the TOH companies do with information they hold. The rest of the sentence also fixes the audience, using "consumers" and defining you as both the individual and the household.
Details
Who
Roku, Inc. and affiliated companies except Frndly TV, Inc., TOH Intermediate Holdings, LLC and their subsidiaries
Exception
Frndly TV, Inc., TOH Intermediate Holdings, LLC and the subsidiaries of both
Supporting quotations
This Privacy Policy describes the information that Roku, Inc. and our affiliated companies other than Frndly TV, Inc., TOH Intermediate Holdings, LLC and the subsidiaries of Frndly TV, Inc. and TOH Intermediate Holdings, LLC (“Roku”, “we”, or “us”) collect about consumers (“you” and “your household”) and how we use and disclose that information.
Roku Privacy Policy
Qualifications & exceptions
The exclusion covers Frndly TV, Inc., TOH Intermediate Holdings, LLC and the subsidiaries of both, not all affiliates.
Not stated here
This text does not say how Frndly TV, Inc. or TOH Intermediate Holdings, LLC handle information about their own users.
What counts as the "Roku Services" under this policy
The policy applies to information Roku collects through the "Roku Services", and it lists what that covers: Roku's websites, Roku players and Roku TV models plus other products built on Roku's streaming platform or operating system (including Roku Smart Home devices, speakers and other audio-enabled products) as "Roku Devices", the mobile apps (named as the Roku Mobile App and Roku Smart Home App), Roku-branded services named as the Roku Media Player, The Roku Channel and Roku Sports Channel, Roku's advertising services, Roku emails and newsletters, and Roku's accounts on third-party social networking sites. Two reach points matter for a reader: Roku's own Channels count even when you reach them through someone else's platform or service, and devices count even when a different company built them on Roku's platform or operating system.
Details
What it covers
information collected through the Roku Services
Condition
collection through the Roku Services as listed: sites, devices, mobile apps, channels, advertising services, emails and newsletters, and social-networking accounts
Supporting quotations
This Privacy Policy applies to information collected by Roku through the “Roku Services”, which includes: Roku's websites (“Roku Sites”), Roku’s products and certain other products utilizing Roku’s streaming platform or operating systems (including Roku players, Roku TV models, Roku Smart Home devices, speakers and other audio-enabled products) (collectively, “Roku Devices”), Roku’s mobile apps (including the Roku Mobile App and Roku Smart Home App), Roku branded services like the Roku Media Player, The Roku Channel and Roku Sports Channel, including when you access them from third-party platforms and services (“Roku’s Channels”), Roku’s advertising services, Roku emails and newsletters, and Roku’s accounts on third-party social networking sites.
Qualifications & exceptions
"Roku's Channels" includes use through third-party platforms and services, so the policy follows the channel rather than the device it is watched on.
"Roku Devices" reaches certain other companies' products that use Roku's streaming platform or operating system, not only products Roku sells itself.
Not stated here
The text does not name which other companies' products use Roku's platform or operating system.
Legal Rights & Agreement Rules · Restriction or exception
This policy does not cover third-party channel providers or other platform operators
Roku states plainly that its own Privacy Policy does not cover "the actions and privacy practices of these app providers, platform operators or their partners", meaning third-party channel publishers and the companies operating platforms where Roku's Channels appear. Whoever runs the app governs that relationship, and Roku directs the reader to those companies' own privacy policies instead of describing them here.
Details
Exception
third-party app (channel) providers, platform operators and their partners
Supporting quotations
This Privacy Policy does not cover the actions and privacy practices of these app providers, platform operators or their partners.
Qualifications & exceptions
The exclusion is limited to app providers, platform operators and their partners; acts Roku describes as its own elsewhere in this document remain within the policy.
Not stated here
The document does not list any third-party channel provider or platform operator by name.
Getting permission from people you give Roku data about is left to you
Right after saying it collects personal information about other people, Roku states "We rely on you to obtain any required permissions in advance to allow us to collect their personal information." Roku does not describe itself as checking that consent exists or as notifying those people; the step is placed on the user who supplies the referral, the gift address or runs the smart home device. "Any required permissions" points outside this document to whatever consent a given situation requires, and "in advance" makes it a precondition rather than something Roku cures later.
Details
Condition
permissions obtained in advance by the user supplying the information
What it covers
personal information of other people, including through Smart Home devices and services
Supporting quotations
We rely on you to obtain any required permissions in advance to allow us to collect their personal information.
We also collect the personal information of other people.
Personal information about other people may be collected and used when you use Roku Smart Home devices and services.
Qualifications & exceptions
Spoken about the people whose information the user supplies — invitees, gift recipients and individuals captured by smart home devices.
The permission is due "in advance", before the collection.
Not stated here
This text does not say what happens if the user does not obtain permission, nor which permissions are "required".
Legal Rights & Agreement Rules · Restriction or exception
Once you make something public, Roku says it cannot control who sees it
Roku disclaims responsibility for information the user makes public: "We cannot control the privacy or security of information you choose to make public." The disclaimer is about control after publication, not about collecting — it sits alongside the reminder to weigh one's own privacy needs and those of others before posting. Read with the "available to the public" sentence, the practical result is that a public post is outside Roku's protection, and no withdrawal or deletion right is offered here.
Details
Exception
information you choose to make public
Supporting quotations
We cannot control the privacy or security of information you choose to make public.
Qualifications & exceptions
Limited to information the user chooses to make public.
The disclaimer covers privacy and security of that information, not its collection by Roku.
Not stated here
Whether a user can later remove a public post is not stated in this passage.
Enforcing terms, protecting users and meeting legal duties are stated uses
The last purpose covers protection: enforcing Roku's terms and conditions, protecting its business, partners or users, and complying with contractual and legal obligations. This is the purpose that lets Roku use collected information against a user's interests in a dispute, and it reaches legal obligations without naming which ones.
Details
Why
enforce terms, protect business, partners or users, and comply with contractual and legal obligations
Supporting quotations
Protect Roku, our Users and Others. We use your information to enforce our terms and conditions or protect our business, partners or users, and to comply with our contractual and legal obligations; and
Qualifications & exceptions
Includes enforcing Roku's terms and conditions and protecting its business, partners or users.
Includes complying with contractual and legal obligations, unnamed here.
Not stated here
Which legal obligations Roku has in mind are not specified.
Legal Rights & Agreement Rules · Company practice
Law, enforcement of Roku's terms, emergencies and suspected illegality are grounds to disclose
Roku lists four grounds for disclosing information without the user asking: complying with laws or responding to lawful requests and legal process; protecting the rights and property of Roku, its employees, agents, customers and others, including enforcing its agreements, policies and terms of use; acting in an emergency to protect personal safety of Roku, its employees or customers or any person; and investigating, preventing or taking action regarding illegal or suspected illegal activities. The reach is broad: the second ground covers civil enforcement of Roku's own agreements, and the fourth turns on suspicion rather than proof.
Details
Why
legal compliance, protection of rights and property, emergencies and addressing illegal activity
Supporting quotations
We may also disclose your information (1) to comply with laws or to respond to lawful requests and legal process, (2) to protect the rights and property of Roku, our employees, agents, customers, and others, including to enforce our agreements, policies, and terms of use, (3) in an emergency to protect the personal safety of Roku, its employees or customers, or any person, or (4) to investigate, prevent, or take action regarding illegal or suspected illegal activities.
Qualifications & exceptions
Grounds are stated in the alternative; any one is enough.
Includes enforcing Roku's own agreements, policies and terms of use, and acting on suspected illegal activity.
Not stated here
Roku does not say whether it notifies users about such disclosures, or what it requires of requesters.
Legal Rights & Agreement Rules · Context
The children's notice is stated to be provided under COPPA
Roku says the notice that follows is provided pursuant to the Children's Online Privacy Protection Act (COPPA). The reference frames Part IV as a children's privacy notice given under that statute; the text of the Act is not part of this document, and nothing here resolves what COPPA requires beyond what Roku states.
Details
Why
children's privacy notice given under COPPA
Supporting quotations
This notice is provided pursuant to the Children’s Online Privacy Protection Act (COPPA).
Qualifications & exceptions
Stated as the basis for this Part IV notice specifically.
Not stated here
COPPA's own text and requirements are not supplied by this document.
Legal Rights & Agreement Rules · Restriction or exception
The children's notice does not reach third-party services reached through Roku
Roku states that the disclosure in this notice does not apply to the practices of any third-party services, including Third-Party Channels, that may be accessed through the Roku Services, and it advises reviewing the applicable terms and policies before a child uses such a service, including its data collection and use practices. The protections described above therefore stop at Roku's own parts; a child's use of another company's channel is governed by that company's terms.
Details
Exception
third-party services including Third-Party Channels
Supporting quotations
The disclosure in this notice does not apply to the practices of any third-party services (including Third-Party Channels) that may be accessed through the Roku Services.
Qualifications & exceptions
Names Third-Party Channels among the services it does not cover.
Advice given is to review each service's terms and policies before use.
Not stated here
Roku does not say it screens those services for child appropriateness.
Legal Rights & Agreement Rules · Context
A supplemental notice covers twenty listed US states and their privacy statutes
Roku adds a notice for residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, supplementing the rest of the policy and applying to residents of those states whose data Roku processes as a business or controller. It says it describes how to exercise rights under the named state statutes, which it collects together as the U.S. State Privacy Laws — the California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia acts. The statutes themselves are not part of this document; their requirements are outside what this text supplies.
Details
Where
residents of the twenty named US states
Supporting quotations
It also describes how you exercise the rights under the California Consumer Privacy Act, the Colorado Privacy Act, the Connecticut Act Concerning Personal Data Privacy and Online Monitoring, the Delaware Personal Data Privacy Act, the Florida Digital Bill of Rights, the Indiana Consumer Data Protection Act, the Iowa Consumer Data Protection Act, the Kentucky Consumer Data Protection Act, the Maryland Online Data Privacy Act, the Minnesota Consumer Data Privacy Act, the Montana Consumer Data Privacy Act, the Nebraska Data Privacy Act, the New Hampshire Data Privacy Act, the New Jersey Data Privacy Act, the Oregon Consumer Privacy Act, the Rhode Island Data Transparency and Privacy Protection Act, the Tennessee Information Protection Act, the Texas Data Privacy and Security Act, the Utah Consumer Privacy Act, and the Virginia Consumer Data Protection Act (collectively the “U.S. State Privacy Laws”).
Qualifications & exceptions
Applies to residents of the twenty named states whose data Roku processes as a business or controller.
Supplements, rather than replaces, the rest of the policy.
Not stated here
The text of the named state statutes is not supplied here, so what each requires is not resolved by this document.
The notice defines Personal Information by reference to the listed state laws
For this part the notice defines Personal Information as information that the laws listed in the part define as Personal Information or Personal Data, and then excludes three things: information that is publicly available as those laws define it, information that is deidentified or aggregated, and information otherwise excluded from those laws' scope. The definition is therefore circular by design — it inherits whatever the listed state statutes say rather than fixing a meaning here. The text also refers to itself as Part VI while appearing under the heading for Part VII; the document's own section numbering is inconsistent at this point, which is worth flagging rather than silently correcting.
Details
Exception
publicly available, deidentified or aggregated, and otherwise excluded information
Supporting quotations
For the purpose of this section (Part VI), “Personal Information” means information that the laws listed in this Part VI define as “Personal Information or “Personal Data”. Personal Information does not include information that is:
Publicly available, as defined by the applicable U.S. State Privacy Laws.
Deidentified or aggregated.
Otherwise excluded from the scope of the applicable U.S. State Privacy Laws.
Qualifications & exceptions
Excludes publicly available information as the applicable state laws define it.
Excludes deidentified or aggregated information.
Excludes information otherwise outside the scope of those laws.
Not stated here
The notice names itself Part VI in this sentence though it sits under Part VII; this text does not resolve which numbering governs.
Legal Rights & Agreement Rules · Context
Where state laws differ, the law of your own state supplies the meaning
The notice resolves conflicts by reference to the reader's own state: if a term used there has a different meaning under different U.S. State Privacy Laws, the term takes the meaning under the law of the state where the user resides. The notice again calls itself Part VI in this sentence. Which meaning applies therefore depends on residency, and the document does not tell a user which state's law is treated as theirs.
Details
Where
the US state where the user resides
Supporting quotations
In the event that a term used in this Part VI has a different meaning under different U.S. State Privacy Laws, such term shall have the meaning under the laws of the state in which you reside.
Qualifications & exceptions
Applies only where a term differs between the listed state laws.
Resolved by the law of the resident's own state.
Not stated here
How Roku determines a user's state of residence is not stated.
Legal Rights & Agreement Rules · User right or choice
California residents get the listed rights subject to exceptions
The notice states that California residents may exercise the following rights, subject to certain exceptions. The exceptions are not enumerated in this introduction, so each listed right is qualified by them without saying what they are.
Details
Where
California
Condition
subject to certain exceptions
Supporting quotations
Your California Privacy Rights
If you are a California resident, subject to certain exceptions, you may exercise the following rights:
Qualifications & exceptions
Every right in the list is stated as subject to unspecified exceptions.
The rights are offered to California residents.
Not stated here
The introduction does not say what the exceptions are or where they are stated.
Legal Rights & Agreement Rules · User right or choice
Shine the Light requests are free, once a calendar year, by email
The notice's Shine the Light item says California residents may request and receive, once per calendar year and free of charge, information about Roku's sharing of Personal Information with third parties for those third parties' own direct marketing use. Requests go to privacy@roku.com.
Details
Where
California
What it does
request disclosure of direct-marketing sharing once a year
Supporting quotations
California’s Shine-the-Light Law.
California’s Shine the Light law permits California residents to request and receive, once per calendar year and free of charge, information about our sharing of your Personal Information (if any) with third parties for their own direct marketing use. If you are a California resident and would like to make such a request, please email privacy@roku.com. In your request, please include your name and attest to the fact that you are a California resident and provide a current California address. We may ask you for additional information to confirm your identity before responding to this request.
Qualifications & exceptions
Limited to one request per calendar year.
The information concerns sharing with third parties for their own direct marketing use.
A Shine the Light request must attest California residency and give a California address
The Shine the Light paragraph sets out what a request must contain: the requester's name, an attestation that the person is a California resident, and a current California address, sent by email to privacy@roku.com. Roku may ask for additional information to confirm identity before responding, so the statutory right is exercised through an identity-checked written request rather than an automatic disclosure.
Details
Where
California
Condition
name, residency attestation and current California address
Supporting quotations
California’s Shine the Light law permits California residents to request and receive, once per calendar year and free of charge, information about our sharing of your Personal Information (if any) with third parties for their own direct marketing use. If you are a California resident and would like to make such a request, please email privacy@roku.com. In your request, please include your name and attest to the fact that you are a California resident and provide a current California address. We may ask you for additional information to confirm your identity before responding to this request.
Qualifications & exceptions
The right is limited to California residents who provide a current California address.
Roku may request additional identity-confirming information before it responds.
The general state part names seventeen states, without Iowa or Utah
The notice's general state part opens with its own list: Colorado, Connecticut, Delaware, Florida, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas and Virginia. That is seventeen states, while the notice's introduction describes it as applying to residents of twenty states, adding California, Iowa and Utah. California has its own part in the same notice; Iowa and Utah are not named in this list.
Details
Where
seventeen named states plus California, Iowa and Utah in the introduction
Supporting quotations
B. Colorado, Connecticut, Delaware, Florida, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, and Virginia
This additional notice is for residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, and supplements the information contained in the Privacy Policy and applies to residents of those states whose data we process as a business or controller. It also describes how you exercise the rights under the California Consumer Privacy Act, the Colorado Privacy Act, the Connecticut Act Concerning Personal Data Privacy and Online Monitoring, the Delaware Personal Data Privacy Act, the Florida Digital Bill of Rights, the Indiana Consumer Data Protection Act, the Iowa Consumer Data Protection Act, the Kentucky Consumer Data Protection Act, the Maryland Online Data Privacy Act, the Minnesota Consumer Data Privacy Act, the Montana Consumer Data Privacy Act, the Nebraska Data Privacy Act, the New Hampshire Data Privacy Act, the New Jersey Data Privacy Act, the Oregon Consumer Privacy Act, the Rhode Island Data Transparency and Privacy Protection Act, the Tennessee Information Protection Act, the Texas Data Privacy and Security Act, the Utah Consumer Privacy Act, and the Virginia Consumer Data Protection Act (collectively the “U.S. State Privacy Laws”).
Qualifications & exceptions
California is covered by a separate part of the same notice, so its absence from this list is expected.
Iowa and Utah appear only in the introduction's longer list.
Not stated here
The notice does not say here whether Iowa and Utah residents are covered by this part or another part.
Cross-references
qualifies (model-proposed): Iowa and Utah residents get a separate sensitive-data opt-out sub-part — The general state part lists seventeen states and leaves Iowa and Utah unnamed, and the later Iowa and Utah sub-part supplies the treatment for those two states: a sensitive-data opt-out rather than the general rights list. The two cards together account for the twenty states the notice's introduction names.
The under-16 statement after the general chart addresses sale only
After the general state chart, Roku states that it does not have actual knowledge that it sells the Personal Information of consumers under 16 years of age. This sentence mentions sale but not sharing for cross-context behavioral advertising, which the earlier California-part statement named alongside sale.
Details
Condition
no actual knowledge of sale to consumers under 16
Supporting quotations
Roku does not have actual knowledge that it sells Personal Information of consumers under 16 years of age.
Qualifications & exceptions
The statement is framed as absence of actual knowledge rather than a guarantee.
Only sale is named in this sentence.
Not stated here
Whether the omission of sharing here is deliberate is not stated.
Legal Rights & Agreement Rules · User right or choice
Rights in the general part depend on where the person lives
The general part introduces the rights by saying that some states provide consumers certain rights over their Personal Information and that, depending on where the person lives and subject to certain exceptions, the listed rights may be exercised. The list is therefore offered conditionally rather than as a nationwide guarantee.
Details
Condition
depending on state of residence and subject to exceptions
Supporting quotations
Your Privacy Rights
Some states provide consumers certain rights regarding their Personal Information. Depending on where you live and subject to certain exceptions, you may exercise the following rights:
Qualifications & exceptions
Availability depends on the person's state of residence.
All listed rights are subject to certain exceptions.
Not stated here
The introduction does not map each right to the states that provide it.
Legal Rights & Agreement Rules · Company practice
After the Iowa and Utah chart Roku disclaims knowledge of processing under-13 data
Directly after the chart, Roku states that it does not have actual knowledge that it processes the Personal Information of consumers under 13 years of age. The statement is about processing rather than sale or sharing, and is framed as absence of actual knowledge.
Details
Condition
no actual knowledge of processing under-13 Personal Information
Supporting quotations
Roku does not have actual knowledge that it processes the Personal Information of consumers under 13 years of age.
Qualifications & exceptions
Framed as absence of actual knowledge, not as an absolute prohibition.
The statement addresses processing generally rather than sale or sharing.
Not stated here
The notice does not describe how Roku would respond if it learned that it processed a child's information.
Legal Rights & Agreement Rules · User right or choice
Iowa and Utah residents get their own rights list subject to exceptions
The part states that if a person is an Iowa or Utah resident, subject to certain exceptions, the listed rights may be exercised. The exceptions are not enumerated in this introduction.
Details
Where
Iowa and Utah
Condition
subject to certain exceptions
Supporting quotations
Your Iowa and Utah Privacy Rights
If you are an Iowa or Utah resident, subject to certain exceptions, you may exercise the following rights:
Qualifications & exceptions
The rights are addressed to Iowa and Utah residents.
All listed rights are subject to certain exceptions.
Not stated here
The introduction does not say what the exceptions are.
Legal Rights & Agreement Rules · Company practice
Roku may amend the policy at any time by posting it or giving required notice
Part VIII states that Roku may amend the Privacy Policy at any time by posting the amended version on the applicable Roku Site, or by providing notice about the changes or obtaining consent where applicable law requires it. The policy therefore offers no fixed notice period of its own; the notice or consent step is tied to what the law requires.
Details
What it does
amend the policy at any time by posting or by notice or consent as required by law
Supporting quotations
Part VIII. Modifications
We may amend this Privacy Policy at any time by posting the amended version on the applicable Roku Site or by providing such notice about or obtaining consent to changes as may be required by applicable law.
Qualifications & exceptions
Posting the amended version on the applicable Roku Site is stated as a sufficient route.
Notice or consent applies as may be required by applicable law.
Not stated here
The policy does not state how far in advance changes take effect.