California Residents
The following disclosures are made pursuant to the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (“CCPA”). These disclosures supplement any privacy notices we previously or contemporaneously provided to you, including any California-specific privacy notice provided to you if you are an employee of Roblox.
Right to Know
California residents have the right to be informed of the categories and specific pieces of personal information collected about them, including sensitive personal information, collected, used, and disclosed, the categories of sources from which that information is collected, whether that information is sold or shared, the categories of third parties to whom that information has been disclosed, the business or commercial purposes for collecting and using each category of personal information, and the intended retention period for each category of personal information.
The below chart reflects the categories of personal information we have collected from California residents during the past twelve months, the categories of sources from which the information was collected, the business or commercial purpose for which the information was collected, the categories of third parties to whom we disclosed that information, and our anticipated retention period for each category of information.
| Personal Information Category set forth in Cal. Civ. Code § 1798.140 | Source(s) of Personal Information Collection | Business or Commercial Purpose(s) for Collection/Use | Third Parties, Service Providers, and Contractors Receiving Personal Information Category | Retention Period |
| Personal identifiers, including real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers. |
Directly from you; indirectly from you as you navigate or use our Service; devices you use to access our Service; internet or mobile service providers; creators; social networks; analytics services; other users.
For employees and applicants:
Directly from you; indirectly from you as you navigate or use our Service; devices you use to access our Service; internet or mobile service providers; recruiters; background check providers; former employers; lead generation platforms. |
Provide you with our Service; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors; advertise or market to you.
For employees and applicants:
Assess your application; meet our legal obligations; perform human resource management; communicate with you; administer payroll and benefits; protect and secure our workforce and environment. |
Account integrity and security providers; affiliates; analytics services; billing services and payment gateway providers; community filtering and moderation services; creators; customer support services; gaming platforms; hosting and content delivery network services; mobile application platforms; other users; social media log-in providers; survey and promotion providers; technology service providers; user acquisition services; VR platforms.
For employees and applicants:
Background check providers; human resources software providers; affiliates; benefits administration providers; data storage or hosting providers; payroll processors; professional advisors; subsidiaries. |
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer.
For employees:
The length of your employment plus any legally required retention period for this category of personal information post-employment or 7 years, post-employment, whichever is longer.
For applicants:
Barring any legally required additional retention period, up to 7 years for non-hired applicants. |
| California Customer Records personal information (Cal. Civ. Code § 1798.80(e)), including name, signature, social security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. |
Directly from you; creators; social networks; analytics services; other users.
For employees and applicants:
Directly from you; recruiters; background check providers; former employers; lead generation platforms. |
Provide you with our Service; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors; advertise or market to you.
For employees and applicants:
Assess your application; meet our legal obligations; perform human resource management; communicate with you; administer payroll and benefits; protect and secure our workforce and environment. |
Account integrity and security providers; affiliates; analytics services; billing services and payment gateway providers; community filtering and moderation services; creators; customer support services; gaming platforms; hosting and content delivery network services; mobile application platforms; other users; social media log-in providers; survey and promotion providers; technology service providers; user acquisition services; VR platforms.
For employees and applicants:
Background check providers; human resources software providers; affiliates; benefits administration providers; data storage or hosting providers; payroll processors; professional advisors; subsidiaries. |
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer.
For employees:
The length of your employment plus any legally required retention period for this category of personal information post-employment or 7 years, post-employment, whichever is longer.
For applicants:
Barring any legally required additional retention period, up to 7 years for non-hired applicants. |
| Characteristics of protected classifications under California or federal law. |
Directly from you; indirectly from you as you navigate or use our Service; devices you use to access our Service; internet or mobile service providers; creators; social networks; analytics services; other users.
For employees and applicants:
Directly from you; recruiters; background check providers; former employers; lead generation platforms. |
Provide you with our Services; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors; advertise or market to you; meet our legal obligations.
For employees and applicants:
Assess your application; meet our legal obligations; perform human resource management; communicate with you; administer payroll and benefits; protect and secure our workforce and environment. |
Account integrity and security providers; affiliates; analytics services; billing services and payment gateway providers; community filtering and moderation services; creators; customer support services; gaming platforms; hosting and content delivery network services; mobile application platforms; other users; social media log-in providers; survey and promotion providers; technology service providers; user acquisition services; VR platforms.
For employees and applicants:
Background check providers; human resources software providers; affiliates; benefits administration providers; data storage or hosting providers; payroll processors; professional advisors; subsidiaries. |
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer.
For employees:
The length of your employment plus any legally required retention period for this category of personal information post-employment or 7 years, post-employment, whichever is longer.
For applicants:
Barring any legally required additional retention period, up to 7 years for non-hired applicants. |
| Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | Directly from you; indirectly from you as you navigate or use our Service; devices you use to access our Service; internet or mobile service providers; creators; social networks; analytics services. | Provide you with our Service; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors; advertise or market to you; meet our legal obligations; maintain transaction records. | Account integrity and security providers; affiliates; analytics services; billing services and payment gateway providers; community filtering and moderation services; creators; customer support services; gaming platforms; hosting and content delivery network services; mobile application platforms; other users; social media log-in providers; survey and promotion providers; technology service providers; user acquisition services; VR platforms. | The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer. |
| Biometric information. | Directly from you; indirectly from you as you navigate or use our Service; devices you use to access our Service. | Provide you with our Service; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors. | Account integrity and security providers; affiliates; community filtering and moderation services; customer support services; technology service providers. | Barring any legal requirements, up to 90 days after collection. |
| Internet and other electronic network activity information, including, but not limited to, browsing history, search history, and information about individual interactions with an Internet website, application, or advertisement. |
Indirectly from you as you navigate or use our Service; devices you use to access our Service; internet or mobile service providers; social networks; analytics services.
For employees and applicants:
Directly from you; indirectly from you as you navigate or use our Service; devices you use to access our Service; internet or mobile service providers; lead generation platforms. |
Detect security incidents; protect against malicious, deceptive, fraudulent, or illegal activity; verify, maintain, improve, upgrade, or enhance a service or device that is owned or controlled by us; identify and repair errors; advertise or market to you; perform analytics.
For employees and applicants:
Assess your application; meet our legal obligations; perform human resource management; communicate with you; administer payroll and benefits; protect and secure our workforce and environment. |
Account integrity and security providers; affiliates; analytics services; billing services and payment gateway providers; community filtering and moderation services; creators; customer support services; gaming platforms; hosting and content delivery network services; mobile application platforms; other users; social media log-in providers; survey and promotion providers; technology service providers; user acquisition services; VR platforms.
For employees and applicants:
Human resources software providers; affiliates; benefits administration providers; data storage or hosting providers; payroll processors; professional advisors; subsidiaries. |
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer.
For employees:
The length of your employment plus any legally required retention period for this category of personal information post-employment or 7 years, post-employment, whichever is longer.
For applicants:
Barring any legally required additional retention period, up to 7 years for non-hired applicants. |
| Geolocation data |
Indirectly from you; devices you use to access our Service; internet or mobile service providers; social networks; analytics services.
For employees and applicants:
Directly from you; indirectly from you as you navigate or use our Service; devices you use to access our Service; internet or mobile service providers; lead generation platforms. |
Protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors; advertise or market to you.
For employees and applicants:
Assess your application; meet our legal obligations; perform human resource management; communicate with you; administer payroll and benefits; protect and secure our workforce and environment. |
Account integrity and security providers; affiliates; analytics services; community filtering and moderation services; creators; customer support services; gaming platforms; hosting and content delivery network services; mobile application platforms; survey and promotion providers; technology service providers; user acquisition services; VR platforms.
For employees and applicants:
Human resources software providers; affiliates; data storage or hosting providers; subsidiaries. |
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer.
For employees:
The length of your employment plus any legally required retention period for this category of personal information post-employment or 7 years, post-employment, whichever is longer.
For applicants:
Barring any legally required additional retention period, up to 7 years for non-hired applicants. |
| Sensory data including audio, electronic, visual, or similar information. |
Directly from you; indirectly from you as you navigate or use our Service; devices you use to access our Service; internet or mobile service providers.
For employees and applicants:
Directly from you; indirectly from you as you navigate or use our Service; devices you use to access our Service; internet or mobile service providers; lead generation platforms. |
Provide you with our Service; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors.
For employees and applicants:
Assess your application; meet our legal obligations; perform human resource management; communicate with you; administer payroll and benefits; protect and secure our workforce and environment. |
Account integrity and security providers; affiliates; community filtering and moderation services; creators; customer support services; gaming platforms; hosting and content delivery network services; mobile application platforms; other users; technology service providers; VR platforms.
For employees and applicants:
Human resources software providers; affiliates; data storage or hosting providers; professional advisors; subsidiaries.
|
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer.
For employees:
The length of your employment plus any legally required retention period for this category of personal information post-employment or 7 years, post-employment, whichever is longer.
For applicants:
Barring any legally required additional retention period, up to 7 years for non-hired applicants. |
| Professional or employment-related information. |
Directly from you.
For employees and applicants:
Directly from you; recruiters; background check providers; former employers; lead generation platforms. |
Provide you with our Service; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors.
For employees and applicants:
Assess your application; meet our legal obligations; perform human resource management; communicate with you; administer payroll and benefits; protect and secure our workforce and environment. |
Account integrity and security providers; affiliates; analytics services; community filtering and moderation services; creators; customer support services; hosting and content delivery network services; other users; social media log-in providers; technology service providers; user acquisition services; VR platforms.
For employees and applicants:
Background check providers; human resources software providers; affiliates; benefits administration providers; data storage or hosting providers; payroll processors; professional advisors; subsidiaries. |
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer.
For employees:
The length of your employment plus any legally required retention period for this category of personal information post-employment or 7 years, post-employment, whichever is longer.
For applicants:
Barring any legally required additional retention period, up to 7 years for non-hired applicants. |
| Non-public education information as defined in the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g; 34 C.F.R. Part 99) |
Directly from you; creators; social networks; other users.
For employees and applicants:
Directly from you; recruiters; background check providers; former employers; lead generation platforms. |
Provide you with our Service; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors.
For employees and applicants:
Assess your application; meet our legal obligations; perform human resource management; communicate with you; administer payroll and benefits; protect and secure our workforce and environment. |
Account integrity and security providers; affiliates; analytics services; community filtering and moderation services; creators; customer support services; hosting and content delivery network services; other users; social media log-in providers; technology service providers.
For employees and applicants:
Background check providers; human resources software providers; affiliates; benefits administration providers; data storage or hosting providers; payroll processors; professional advisors; subsidiaries. |
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer.
For employees:
The length of your employment plus any legally required retention period for this category of personal information post-employment or 7 years, post-employment, whichever is longer.
For applicants:
Barring any legally required additional retention period, up to 7 years for non-hired applicants. |
|
Inferences drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
Indirectly from you; devices you use to access our Service; internet or mobile service providers; social networks; analytics services; creators. | Advertise or market to you; perform analytics; maintain, improve, upgrade, or enhance a product or service. | Account integrity and security providers; affiliates; analytics services; community filtering and moderation services; creators; customer support services; gaming platforms; hosting and content delivery network services; mobile application platforms; other users; technology service providers; user acquisition services; VR platforms. |
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer.
For employees:
The length of your employment plus any legally required retention period for this category of personal information post-employment or 7 years, post-employment, whichever is longer.
For applicants:
Barring any legally required additional retention period, up to 7 years for non-hired applicants. |
| Sensitive Personal Information Category as set forth in Cal. Civ. Code § 1798.140 | Sources from which Information was Collected | Purposes for Collection; Use | Third Parties, Service Providers, and Contractors Receiving Personal Information | Retention Period |
| Social security number, driver’s license number, state identification card, or passport number. |
Directly from you.
For employees and applicants:
Directly from you; background check providers. |
Provide you with our Service; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors.
For employees and applicants:
Assess your application; meet our legal obligations; perform human resource management; administer payroll and benefits; protect and secure our workforce and environment. |
Account integrity and security providers; affiliates; community filtering and moderation services; customer support services; technology service providers.
For employees and applicants:
Background check providers; human resources software providers; affiliates; benefits administration providers; data storage or hosting providers; payroll processors; professional advisors; subsidiaries. |
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer.
For employees:
The length of your employment plus any legally required retention period for this category of personal information post-employment or 7 years, post-employment, whichever is longer.
For applicants:
Barring any legally required additional retention period, up to 7 years for non-hired applicants. |
| Account access credentials (user names, account numbers, or card numbers combined with required access code, security code or password to access an account). |
Directly from you; indirectly from you as you navigate or use our Service; internet or mobile service providers.
For employees and applicants:
Directly from you; indirectly from you as you navigate or use our Service; devices you use to access our Service. |
Provide you with our Service; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors.
For employees and applicants:
Assess your application; meet our legal obligations; perform human resource management; communicate with you; administer payroll and benefits; protect and secure our workforce and environment. |
Technology service providers.
For employees and applicants:
Background check providers; human resources software providers; affiliates; benefits administration providers; data storage or hosting providers; payroll processors; professional advisors; subsidiaries. |
The length of your business relationship with us plus any legally required additional retention period for this category of personal information following conclusion of your business relationship with us or 7 years post-relationship, whichever is longer.
For employees:
The length of your employment plus any legally required retention period for this category of personal information post-employment or 7 years, post-employment, whichever is longer.
For applicants:
Barring any legally required additional retention period, up to 7 years for non-hired applicants. |
| Precise geolocation (location within a geographical area of a circle with a radius of 1850 feet or less). | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Racial or ethnic origin |
For employees and applicants:
Directly from you; lead generation platforms. |
For employees and applicants:
Assess your application; meet our legal obligations; perform human resource management. |
For employees and applicants:
Background check providers; human resources software providers; affiliates; data storage or hosting providers; professional advisors; subsidiaries. |
For employees:
The length of your employment plus any legally required retention period for this category of personal information post-employment or 7 years, post-employment, whichever is longer.
For applicants:
Barring any legally required additional retention period, up to 7 years for non-hired applicants. |
| Religious or philosophical beliefs | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Union membership | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Genetic Data | We do not collect. | We do not collect. | Not applicable. | Not applicable. |
| Mail, email, or text messages where the content is not directed to us. | We do not collect. | Not applicable. | Not applicable. | Not applicable. |
| Unique identifying biometric information | Directly from you; indirectly from you as you navigate or use our Service; devices you use to access our Service. | Provide you with our Service; communicate with you; protect and secure our environment; verify, maintain, improve, upgrade, or enhance a product or service; identify and repair errors. | Account integrity and security providers; affiliates; community filtering and moderation services; customer support services; technology service providers. | Barring any legal requirements, up to 90 days after collection. |
|
Personal information collected and analyzed concerning health. |
We do not collect. | We do not collect. | Not applicable. | Not applicable. |
| Personal information collected and analyzed concerning sex life, or sexual orientation. | We do not collect. | We do not collect. | Not applicable. | Not applicable. |
Right to Limit Use and Disclosure of Sensitive Personal Information
We do not collect or process sensitive personal information for the purpose of inferring characteristics about consumers. We also do not disclose sensitive personal information for purposes other than those specified in section 7027(m) of the CPRA regulations promulgated by the California Privacy Protection Agency. Therefore, we do not offer consumers the option to limit the use of their sensitive personal information.
Right to Opt Out of Sharing for Cross-Context Behavioral Advertising
In the past twelve months, we have not shared the categories of personal information listed above for cross-context behavioral advertising. Under California law, consumers have the right to opt out of the sharing of their personal information for cross-context behavioral advertising. Because we do not share data for this purpose, we do not offer this opt out.
Right to Opt Out of Sale
In the past twelve months, we have not sold the categories of personal information listed above, as that term is defined under California law. Under California law, consumers have the right to opt out of the sale of their personal information. Because we do not sell data, we do not offer this opt out.
We have no actual knowledge of selling the personal information or the sensitive personal information or minors under 16 years of age.
Right to Delete Personal Information
You have the right to request the deletion of your personal information, subject to certain exceptions.
Right to Correct Inaccurate Personal Information
You have the right to request the correction of any inaccurate personal information that we maintain about you.
Right to Access
You have the right to request the categories and specific pieces of personal information we have collected about you.
Right of Non-Retaliation and Non-Discrimination
You have the right to exercise the privacy rights conferred to you under the CCPA without receiving retaliatory or discriminatory treatment. Roblox does not retaliate or discriminate against you for exercising the privacy rights conferred to you under the CCPA.
Exercising Your Rights
To exercise your rights, you may contact us via phone at (888) 858 - BLOX or via email at privacy@roblox.com. You may also submit a request through our website by https://www.roblox.com/support. Requesters will need to provide us with personal information in order to verify their identity and residency, including name, email, and state of residence. We will compare the information you provide with our internal records. The personal information that we use to verify identity and residency will not be used for any other purpose.
You may authorize an agent to submit a request on your behalf if you provide the authorized agent with written permission signed by you. Roblox may require you to verify your identity directly with us and confirm that you provided the authorized agent with permission to submit a request on your behalf.
Contact Information
If you have questions or concerns about our privacy practices, contact us at:
Roblox Corporation
Attn: Roblox Privacy Manager
Address: 970 Park Place, Suite 100
San Mateo, California, 94403
privacy@roblox.com
2021
| Number of requests to know received |
16 |
| Number of requests to know complied with in whole or in part | 8 |
| Number of requests to know denied | 0 |
| Median number of days to substantively respond to requests to know | 11.25 |
| Number of requests to delete received | 438 |
| Number of requests to delete complied with in whole or in part | 104 |
| Number of requests to delete denied | 14 |
| Median number of days to substantively respond to requests to delete | 6.58 |
We do not sell personal information under the CCPA.