US State Privacy Policy Addendum

In the past 12 months, we have collected personal information as set out in Section 3 of the Roblox Privacy and Cookie Policy. Using California-specific terms, we have collected the following categories of Personal Information:

• Account credentials, including username, password, and other information for authentication or account access.
• Contact identifiers, including name, email address, and phone number.
• Characteristics or demographics, including age, gender, and country.
• Commercial or transaction information, including records of products or services purchased or obtained.
• Device identifiers, including device IP address, device ID or other identifiers that identify a computer or mobile device.
• Device information, including device operating software and browser (e.g., type, version, and configuration), internet service provider, and regional and language settings.
• Internet activity, including information about browsing history and interactions, such as the features used, pages visited, content viewed, purchases made or considered, the time of day browsed, and referring and exiting pages.
• Non-precise location data, such as location derived from an IP address or data that indicates a city or postal code level.
• Biometric data, which Roblox does not collect directly, but which is collected on our behalf as described in the Roblox Biometric Privacy Notice.
• Payment information, including full name, credit card (last four digits only), and card expiration date.
• Content, including content within any messages sent to us (such as feedback, questions, or survey responses) or publicly posted on the Service (such as in chat messages or blog comments).

For the categories of sources from which Personal Information is collected, see Section 3 of the Roblox Privacy and Cookie Policy.

For the specific business and commercial purposes for collecting and using your Personal Information, see Section 3 of the Roblox Privacy and Cookie Policy.

We retain Personal Information, including Sensitive Personal Information, as long as we need it to provide our products, comply with legal obligations or protect our or other’s interests. We decide how long we need information based on several factors.

Here’s how we decide:

• If we need it to operate or provide our products.
• How long we need to retain the information to comply with certain legal obligations.
• If we need it for other legitimate purposes, such as to prevent harm; investigate possible violations of our terms or policies; promote safety, security and integrity; or protect ourselves, including our rights, property or products.

If you are interested in learning more about Roblox’s practices regarding Personal Information, please review Sections 3 and 4 of our Privacy and Cookie Policy.

For the business and commercial purposes for disclosing Personal Information, see Section 4 of the Roblox Privacy and Cookie Policy.

We have disclosed Personal Information to the following types of recipients:

• The Creators of the experiences you interact with on Roblox’s platform;
• Account integrity and security services;
• Analytics services;
• User acquisition services;
• Community filtering and moderation services;
• Customer support services;
• Surveys and promotions;
• Social media log-in services;
• Billing and payment services;
• Hosting and content delivery services.

Some of the Personal Information we collect may be considered sensitive Personal Information under the CCPA. For example, our service providers process biometric information on our behalf, as described in the Roblox Biometric Privacy Notice. We collect, use, and disclose such sensitive personal information only for the permissible business purposes for sensitive personal information under the CCPA or without the purpose of inferring characteristics about consumers. We do not sell or share sensitive personal information.

We do not sell your Personal Information as that term is traditionally understood. However, some of our disclosures of Personal Information may be considered a “sale” or “share” as those terms are defined under the CCPA. A “sale” is broadly defined under the CPRA to include a disclosure for something of value, and a “share” is broadly defined under the CCPA to include a disclosure for cross-context behavioral advertising.

We disclose Contact Identifiers and Device identifiers to third-party advertising companies and advertising measurement companies to provide you with personalized ads, or measure and improve advertising effectiveness on Roblox and/or third-party platforms, which may constitute a “sale” or “sharing” of your Personal Information. You have the right to opt-out of our selling or sharing (for purposes of targeted advertising) of your Personal Information. To opt-out of the sale or sharing of Personal Information, use the “My Privacy Choices” link on the bottom of Roblox’s main webpages or turn on a recognized opt-out preference signal, such as Global Privacy Control, in your browser or extension.

Please note that when you opt-out through either of the above methods we do not know who you are within our systems, and your opt-out will apply only to information collected from tracking technologies on the specific browser from which you opt-out. If you delete or reset your cookies, or use a different browser or device, you will need to reconfigure your settings. We have no actual knowledge of selling or sharing the Personal Information of minors under 16 years of age.

In accordance with California law, you have the following rights:

• The right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which personal information is collected, the business or commercial purposes for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you.
• The right to correct inaccurate personal information that we maintain about you.
• The right to delete personal information we have collected from you.

To exercise any of these rights, submit a request through our Customer Support Form (specifying the rights you wish to exercise) or call our toll-free number at (888) 858 - BLOX. If you have an account with us, we may require you to submit the request through your account. Please note these rights are subject to exceptions. If you have an account with us, we may require you to use the account to submit the request. In the request, please specify which right you are seeking to exercise and the scope of the request. We will confirm receipt of your request within 10 days and respond to your request within 45 days. To verify your identity, we may require you to confirm receipt of an email sent to an email address that matches our records, provide us with details relating to your history with us, or provide additional information. If we are unable to verify your identity, we may deny your request.

All rights requests must be exercised through the designated methods listed above. You may make a rights request using an authorized agent. Except for rights requests made by opt-out preference signal, we will require written and signed proof of the agent’s permission to do so and we may verify your identity directly with you.

2023

If you are a California resident under 18 years old and registered to use the Service, under California’s Online Eraser Law, you can ask us to remove any content or information you have publicly posted on the Service. To make a request, please write to us at the email address set out in the Contact Us section above with “California Under 18 Online Eraser Request” in the subject line, and tell us what you want removed. We will make reasonable, good faith efforts to remove the post from prospective public view, although we cannot ensure the complete or comprehensive removal of the content and may retain the content as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Under California’s Shine the Light law, customers who are residents of California may request (i) a list of the categories of personal information disclosed by us to third parties during the immediately preceding calendar year for those third parties’ own direct marketing purposes; and (ii) a list of the categories of third parties to whom we disclosed such information. To make a request, please write us at the email or postal address set out in the Contact Us section above and specify that you are making a “California Shine the Light Request.” We may require additional information from you to allow us to verify your identity and are only required to respond to requests once during any calendar year.

Your state's law may provide some or all of the following rights:

• To confirm whether or not we are processing your personal data
• To access your personal data
• To correct inaccuracies in your personal data
• To delete your personal data
• To obtain a copy of your personal data that you previously provided to us in a portable and readily usable format
• To obtain a list of third parties to which we have disclosed your personal data.

To exercise any of these rights, submit a request through our Customer Support Form (specifying the rights you wish to exercise) or call our toll-free number at (888) 858 - BLOX. Please note these rights are subject to exceptions. If you have an account with us, we may require you to use the account to submit the request. In the request, please specify which right you are seeking to exercise and the scope of the request. We will confirm receipt of your request within 10 days and respond to your request within 45 days. To verify your identity, we may require you to confirm receipt of an email sent to an email address that matches our records, provide us with details relating to your history with us, or provide additional information. If we are unable to verify your identity, we may deny your request.

We disclose personal data (e.g., identifiers and service and platform usage) to advertising partners to provide you with personalized ads on third-party platforms, which may constitute a “sale” or processing of your personal data for targeted advertising purposes. You have the right to opt-out of the processing of personal data for purposes of targeted advertising or the sale of personal data. To opt-out, use the “My Privacy Choices” link on the bottom of Roblox’s main webpages or turn on a recognized opt-out preference signal, such as Global Privacy Control, in your browser or extension. Please note that when you opt-out through either of the above methods we do not know who you are within our systems, and your opt-out will apply only to information collected from tracking technologies on the specific browser from which you opt-out. If you delete or reset your cookies, or use a different browser or device, you will need to reconfigure your settings.

We do not process personal data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

All rights requests must be exercised through the designated methods listed above. You may make a rights request using an authorized agent. Except for rights requests made by opt-out preference signal, we will require written and signed proof of the agent’s permission to do so and we may verify your identity directly with you.

You may have the right to appeal our decision if we deny your request. To appeal, please contact us at the email address set out in the Contact Us section above and specify what you wish to appeal. We will review and respond to your appeal in accordance with applicable law. If we deny your appeal, you may submit a complaint as follows:

• For Colorado residents, visit https://coag.gov/file-complaint/
• For Connecticut residents, visit https://www.dir.ct.gov/ag/complaint/
• For Oregon residents, visit https://www.doj.state.or.us/oregon-department-of-justice/contact-us/
• For Texas residents, visit https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint
• For Utah residents, visit https://attorneygeneral.utah.gov/contact/complaint-form/
• For Virginia residents, visit https://www.oag.state.va.us/consumercomplaintform