Last Updated: November 28, 2025
Welcome to Epic!
If you are a child user, please see our Privacy Information for Young Players.
If you are the parent/guardian of a child user, please see Section 2 (How Do We Process Children’s Information?).
Epic Games, Inc. is headquartered in Cary, North Carolina. We and our subsidiaries have offices and operations located around the world that help create and deliver some of your favorite products and services, including games like Fortnite and developer tools like Unreal Engine.
This Epic Games Privacy Policy (this “Policy”) describes the different ways we may collect, use, secure, retain, disclose, and otherwise process information that can be used to identify you on, through, or in connection with the Epic Services (defined below).
Please read this entire Policy carefully and any other agreements that apply to your use of the Epic Services, and confirm you understand and agree to them, before using any of the Epic Services. If you have any questions, you can always reach out to us using the contact information listed in Section 12 (How Can You Contact Us?).
When we refer to “Epic” (or any similar terms like “we,” “us,” or “our”) in this Policy, we mean the Epic entity that controls and is responsible for your information, such as Epic Games, Inc. and its subsidiaries and affiliates that provide the Epic Services. This Policy applies when Epic acts as a data controller of your information. You can find details about the data controller responsible for your information in Section 12 (How Can You Contact Us?).
We use the term “Epic Services” to describe any Epic products or services that directly link to this Policy, including:
Note that your use of the Epic Services is also subject to additional terms and conditions. For example, you must review and accept the Epic Games Terms of Service to play Fortnite, Rocket League, Fall Guys, and Horizon Chase 2.
We are designing the Epic Services to be welcoming to users of all ages around the world. This means that we collect age information from users, and some of the Epic Services will provide a different experience based on what we know about the age of a user and where they live. The information below is for parents/guardians to understand our privacy practices with respect to children (under 13 or the age of digital consent in the user’s region, whichever is higher).
When a user indicates they are a child, they are placed in a “Cabined Account” until they are no longer a child as defined above or until their parent/guardian provides additional privacy permissions and enables parental controls. Cabined Accounts can play Epic’s games (e.g., Fortnite, Rocket League, or Fall Guys), but features like voice chat and real money purchases are disabled. Epic collects limited personal information from Cabined Accounts to operate them, in each case according to applicable youth privacy and protection laws:
If a user with a Cabined Account contacts us with a question or request, any personal information provided will be deleted after the inquiry is resolved. When we disclose personal information of our Cabined Accounts externally, it is to help us carry out these limited purposes (e.g., to consoles to help run the game or to our cloud storage providers). Learn more about Cabined Accounts.
A. Notice, Consent, and Parental Controls
We collect a parent/guardian’s email address from a child user in order to send the parent/guardian an email notice that the child has created a Cabined Account. This notice also lets them review our privacy practices for non-Cabined Accounts, provide consent to a non-Cabined Account for their child to enable additional features, and set up parental controls. Please note that parents/guardians must complete our parent verification process in order to provide consent for a non-Cabined Account.
We use Kids Web Services (“KWS”), a service offered by our subsidiary Kids Web Services Ltd, for parent/guardian and user age verification purposes. Learn more about Verifiable Parental Consent. Once an email address is verified, KWS will recognize it across other games or services powered by KWS technology, so there will be no need to verify it again. Learn more about KWS.
When a parent/guardian provides consent for a non-Cabined Account for their child, parental controls are enabled automatically. Parental controls can then be accessed using a PIN code and allow the parent/guardian to review and change feature settings selected during the permission flow and further customize their child’s experience. Learn more about Parental Controls.
Once a parent/guardian has authorized a non-Cabined Account for their child, the privacy practices described elsewhere in this Policy generally apply, but younger users may not have access to all content or features (because of our default privacy settings, age requirements for certain services and features, and/or parental controls in place). For example, depending on the parental control settings and the user’s age, users may access communication features (like voice and text chat) and interact with most of the Epic Services (including downloading other games or apps from the Epic Games Store). When a user accesses a third-party game or app through the Epic Games Store, some account information is disclosed to the publisher and developer of that game or app to enable the transaction and product features. The developer and publisher information can be found on the product listing or in our Index. For additional details about our privacy practices, please see Sections 3 (What Information Do We Collect and How?), 4 (Why Do We Process Information?), and 5 (Who Do We Disclose Information To?). If you have any questions about Epic’s disclosure of personal information, please reach out to us using the contact information listed in Section 12 (How Can You Contact Us?).
B. Child and Parent/Guardian Privacy Rights
In addition to the parental controls that enable parents/guardians to change the choices they’ve made about their child’s use of specific features like voice and text chat, child users and their parents/guardians can exercise their individual privacy rights as described in Section 9 (What Choices and Controls Do You Have?). Those rights include the right to review their child’s personal information retained by Epic and delete their child’s Epic account (which deletes their personal information and stops further collection). To exercise those rights or ask any questions about how we handle children’s personal information, please use the contact information listed in Section 12 (How Can You Contact Us?) or head straight to our Parent Support Request Form.
The types of information we collect depend on how you interact with the Epic Services. Generally speaking, we collect information in three ways: A) when you provide it to us, B) automatically when you use the Epic Services, and C) from third parties.
This Policy is designed to help you understand how we handle information that can be used to identify you. In some cases, we may also create or collect information that does not identify you individually, such as de-identified or aggregated information. If we combine this type of information with information that identifies you, we will treat the combined information as information that can be used to identify you subject to this Policy.
A. Information You Provide
You can choose to provide us with different types of information depending on how you use the Epic Services. In some cases, we will ask you for specific information because we need it for the Epic Services or their respective features. If you choose not to provide the requested information, you may be unable to access those Epic Services or features may not work properly. For example:
B. Information We Collect Automatically
We collect some information automatically when you visit, access, or use the Epic Services. This includes information like your gameplay or application usage that are typically associated with your Epic account, your third-party account (if you access the Epic Services through one), or an identifier we assign to your device or profile. While the specific types of information that we automatically collect may vary, they generally include:
The Epic Services use technologies such as cookies, log files, and web beacons to automatically collect the types of information listed above. Some of these technologies may create small files or record-keeping tools stored on your device. These technologies help us recognize your device and collect information about your interactions with the Epic Services, and we use that information to, for example, provide and operate the Epic Services (e.g., authenticate you and save preferences); monitor the Epic Services (e.g., detect and report crashes); understand and improve the Epic Services (e.g., conduct data analytics); personalize the Epic Services (e.g., display local currencies); and promote the Epic Services (e.g., manage advertising).
When features of the Epic Services are provided by third parties, those third parties may also use automatic data collection technologies and collect information about your use of the Epic Services, their services, or others’ websites over time. For example, when you use the Epic Services (e.g., Unreal Engine) that include third-party software, those third parties may collect your information through their technologies. Features provided by third parties are subject to their applicable privacy notices and policies.
C. Information We Receive from Others
In some cases, we may receive information about you from third parties in connection with your use of the Epic Services or your interactions with us on or using third-party platforms, websites, or services. For example:
Your privacy settings on third-party platforms, websites, and services typically control what information they disclose to Epic, so we encourage you to review and update those settings regularly. While we follow this Policy when using information provided by third parties, we do not control how third parties collect or use your information. For more details, please refer to their privacy notices and policies.
We process the information we collect, either individually or in combination with other information as described in this Policy, for the purposes outlined below. If you are located in the European Economic Area, the United Kingdom, or Switzerland, the relevant lawful bases are identified in parentheses below. For more information on lawful bases, please see Section 11 (Additional Notice for Individuals Located in the European Economic Area, the United Kingdom, or Switzerland).
We may also process your information for additional purposes in the future, compatible with those described above, and we may explain the purpose to you at the time of collection. In addition, we may use information that does not identify you individually, such as de-identified or aggregated information, for business, operational, or other purposes permitted under applicable law.
We may disclose some of your information to our subsidiaries and affiliates, our service providers, and third parties for the purposes set forth above.
When we disclose information to our service providers, we endeavor to ensure these service providers provide protections that are the same as, or substantially similar to, those described in this Policy (e.g., by limiting the use of your information to the services provided). Our service providers include:
Depending on the Epic Services you use and how you interact with them, third parties include:
No mobile phone numbers provided to Epic for security purposes will be shared with third parties or affiliates for marketing or promotional purposes.
Epic Games, Inc. is based in the United States, but we operate globally to help provide users all around the world with a better experience on the Epic Services. This means that Epic may process, store, and transfer your information outside the country where you live.
The data protection laws in these countries may be different than those where you live. When we transfer your information outside the country where it was collected, we rely on appropriate legal mechanisms to support the transfer and implement technical, organizational, and physical safeguards to secure your information. These measures include model contractual clauses (such as the European Commission’s Standard Contractual Clauses) and, if applicable, adequacy decisions by regulatory authorities.
Where permitted by law, your use of the Epic Services authorizes us to process your information in any country where we operate, including the United States. To learn more about the location of the Epic entity responsible for operating the Epic Services you use, please see Section 12 (How Can You Contact Us?).
A. Retention
Because the specific information we process and our reasons for doing so often vary depending on how you use the Epic Services, how long we retain your information can also vary. We generally retain information for as long as we reasonably need it for the purposes described in Section 4 (Why Do We Process Information?), unless a longer retention period is required or permitted by law. For example, if you create an Epic account, we will generally retain the information associated with your account (e.g., name, public-facing display name, password, country, and email address) for as long as needed to maintain your account, provide the Epic Services you requested, enforce any terms and policies that apply to and govern your use of the Epic Services, and record how we deliver the Epic Services to you.
The main criteria we consider in determining specific retention periods often include minimum requirements under applicable law, relevant industry standards, the types of information in question (e.g., its level of sensitivity), the purposes for which we process the information (e.g., complying with our legal obligations, managing internal records, enforcing our terms and policies, and resolving disputes), whether we can achieve those purposes through other means, the potential risk of harm from unauthorized use or disclosure of the information, the information’s relevance to potential litigation or similar proceedings (e.g., defending ourselves against legal claims), and whether the information is required to prevent fraud or similar abuse of the Epic Services (e.g., enforcing prohibitions against cheating and other unauthorized behavior).
You may request that Epic delete your information. Please see Sections 9 (What Choices and Controls Do You Have?), 10 (Additional Notice For Residents of Certain US States), and 11 (Additional Notice for Individuals Located in the European Economic Area, the United Kingdom, or Switzerland) for more information on requesting deletion of your information.
B. Security
We maintain appropriate administrative, technical, contractual, and physical safeguards to secure your information from accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, use, or other unlawful forms of processing. In some cases, your information may be accessible when you use the Epic Services. To help keep your information secure, you must maintain the confidentiality of your login information. If we become aware of unauthorized disclosure of your information, we will notify you as required by law and take appropriate steps to help secure your information.
Yes, we’ll update this Policy from time to time to reflect changes in our practices and relevant laws. When we do so, we’ll change the date noted at the top of this Policy. In some cases, we may also notify you of the changes by email or within the applicable Epic Services. Please review this Policy regularly to make sure that you understand your relationship with Epic and the ways we collect, use, secure, retain, disclose, and otherwise process your information that can be used to identify you on, through, or in connection with the Epic Services.
We seek to provide you with meaningful choices about the information we collect. The specific choices available to you often vary depending on the exact nature of our relationship with you, such as the Epic Services you use. Common examples include:
To submit a request, please contact us using the contact information listed in Section 12 (How Can You Contact Us?). We may ask for additional information to verify your identity before completing your request.
Some parts of the world provide individuals with specific choices related to their information by right under applicable law. Please see Sections 10 (Additional Notice For Residents of Certain US States) and 11 (Additional Notice for Individuals Located in the European Economic Area, the United Kingdom, or Switzerland) for more information.
A. For California Residents
The California Consumer Privacy Act (CCPA) requires us to provide residents of California with information regarding their personal information in a different format. Terms used in this subsection are defined by the CCPA.
If you are a California resident, you have the right to:
We will delete your personal information, unless retention is necessary for operational or legal reasons, including to:
We may also limit how we respond to your requests, including when necessary to:
As described in greater detail in Section 3 (What Information Do We Collect and How?), the specific information we collect from you typically depends on how you choose to interact with us on the Epic Services. In the past 12 months, we’ve collected the following categories of personal information:
Epic does not use or disclose sensitive personal information for purposes other than those that are necessary to provide the Epic Services or permissible under the CCPA. Epic also does not sell or share the personal information it collects. This includes for users for whom we have actual knowledge are under 16.
For more information on (1) the categories of sources from which your personal information is collected, please see Section 3 (What Information Do We Collect and How?); (2) the business or commercial purposes for collecting your personal information, including sensitive personal information, please see Section 4 (Why Do We Process Information?); and (3) the categories of third parties to whom we disclose your personal information, please see Section 5 (Who Do We Disclose Information To?).
B. For Other US State Residents
Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, and Virginia have each enacted a comprehensive privacy law, requiring us to provide residents of those states with information regarding their personal data in a different format. Terms used in this subsection are defined by the applicable privacy law in your state of residence.
If you are a resident of those states, you have the right to:
Certain legal obligations and operational needs may limit how we respond to your requests. These exceptions may include:
Epic does not sell personal data it collects or process it for targeted advertising. Epic also does not profile its users through automated means to make decisions that have legal or similarly significant effects. This includes for users for whom we have actual knowledge are under 18.
For more information on (1) our processing of sensitive data from a known child under the age of 13, please see Section 2 (How Do We Process Children’s Information?); (2) the categories of personal data processed by us, please see Section 3 (What Information Do We Collect and How?); (3) our purposes for processing personal data, please see Section 4 (Why Do We Process Information?); and (4) the categories of third parties with whom we disclose personal data and the categories of personal data we disclosed, please see Section 5 (Who Do We Disclose Information To?).
C. Exercising Your Privacy Rights
To exercise your privacy rights, please contact us using the contact information listed in Section 12 (How Can You Contact Us?). Only you (or an authorized representative on behalf of a California resident) may submit a verifiable request, which must include enough information for us to confirm your identity and understand the request. If you have an Epic account, we may ask you to log in to verify your identity. Authorized agents of California residents must include written permission signed by the resident, who may also need to verify their identity directly. Requests may be denied if we cannot verify your identity or authority. Appeals can be submitted using the same contact information listed in Section 12 (How Can You Contact Us?).
We will not discriminate against you for exercising any of your privacy rights under applicable law.
The General Data Protection Regulation (GDPR), along with similar laws in the United Kingdom (UK) and Switzerland, requires us to provide individuals located in the European Economic Area (EEA), the UK, or Switzerland with information regarding their personal data in a different format. Terms used in this section are defined by the GDPR.
If you are located in the EEA, the UK, or Switzerland, you have the right to:
We may ask for additional information to verify your identity before fulfilling a rights request. We may also limit our response in certain circumstances, including when:
You also have the right to make a complaint with your local data protection supervisory authority (please see links below) or to contact us directly with any complaint (please see Section 12 (How Can You Contact Us?)). We would appreciate the chance to address your issues first.
The lawful bases we rely on to process your personal data depend on the Epic Services you use and how you interact with them. These lawful bases are:
For more information on how these lawful bases apply to different purposes of processing, please see Section 4 (Why Do We Process Information?).
A. Support Requests
If you have questions or concerns about the Epic Services (e.g., issues related to a game, accessing your Epic account, bugs, payments, content, or entitlements), please contact the relevant support channel through the links provided below.
• Fortnite
• Rocket League
• Fall Guys
• Epic Games Store
• Fab
• Unreal Engine
B. Privacy Requests
If you want to learn more about our privacy practices or this Policy, or exercise your data subject rights, please email [email protected] or [email protected]. You can also contact us via email or postal mail (marked “Attn: Legal Department”) using the contact information listed below for the entity responsible for providing the applicable Epic Services.
• Fortnite: Epic Games, Inc. (for US residents) or Epic Games Entertainment International GmbH (for non-US residents)
• Rocket League: Psyonix LLC
• Fall Guys: Epic Games, Inc.
• Horizon Chase 2: Aquiris Game Studio LLC
• Rock Band: Harmonix Music Systems, Inc.
• Epic Games Store and Fab: Epic Games, Inc. (for US residents) or Epic Games Commerce GmbH (for non-US residents)
• Unreal Engine and MetaHuman: Epic Games, Inc. (for US residents) or Epic Games Commerce GmbH (for non-US residents)
• Unreal Editor For Fortnite: Epic Games, Inc. (for US residents) or Epic Games Entertainment International GmbH (for non-US residents)
• Postparty: Life on Air Inc.
• Our websites and their respective subdomains that link to this Policy: Epic Games, Inc.
• Other Epic Services: Please see the relevant terms and conditions for the licensing entity listed in your region
Contact Information
Aquiris Game Studio LLC
Epic Games Commerce GmbH
Epic Games Entertainment International GmbH
Epic Games, Inc.
Harmonix Music Systems, Inc.
Life on Air Inc.
Psyonix LLC