Case guide
Keep your child’s account notices and data requests. Check the policy date and the rights that apply to the events.
Updated Oct 4, 202615 sources
See If You Qualify
Free · No obligation · About 2 minutes
Updated Oct 4, 202615 sources
This may apply to you if
These are cited sources. Their inclusion does not imply that they endorse People’s Justice or reviewed this page.
Federal Trade Commission · Issuer of the final privacy rule
Finding: The final rule gives parents ways to review and limit covered collection of children’s personal information.
FTC final amended children's online privacy rule, April 22, 2025 (opens in a new tab) · Apr 22, 2025 · Checked Oct 3, 2026
The process
You answer a few questions
About two minutes. Nothing is sent until you agree on the last step and press submit.
A lawyer looks at it
A lawyer at the firm reads your answers and checks them against the current case criteria.
The firm decides and gets in touch
If the firm takes your case, you get the terms in writing to read before you sign. You can always say no.
Name the data, account and dates involved. Ask whether the issue is about consent, access, sharing or deletion.
FTC guidance describes parental rights over covered collection of children’s information. A legal review starts with what the operator collected or did, not a general claim that all gaming data is unlawful. Keep the notice or request that relates to your child’s account.
Check the policy date before using its terms. The page checked here shows a version with a November 1, 2026 start date.
That date is after October 3, 2026. The future version does not establish which policy governed an earlier event. Ask for the version in force when the information was collected and any notices your family received. Keep the date and region with the copy.
For covered data, parents can review it and ask for deletion. The company may need to check that the person asking is the parent.
The federal rule defines a child as under 13 and applies to child-directed services and other covered operators with actual knowledge. It includes notice, consent and stated exceptions. The rule is not a finding that Roblox violated the law in your child’s case.
Keep your request, date and the full reply. Ask what data it covers and what steps remain.
FTC guidance explains review, refusal of further use and deletion rights. Use the operator’s stated process and keep the response in full. Ask what identity check is needed before sending documents, and do not assume a request must be anonymous.
The facts may overlap, but the questions differ. Ask a lawyer which harm and law fit the account history.
A complaint about collected data is not itself proof of grooming, illness or another injury. Give the lawyer the actual privacy notice and any separate records of harmful contact. Ask which party controlled the information and what relief the law allows.
The rule does not set a payment for your child. Ask what claim, remedy and evidence a lawyer would assess.
A civil claim seeks relief for alleged harm and responsibility. Do not use a penalty in another case as a price for your family’s privacy concern. Keep any payment or release offer with the account records it concerns and ask for the terms in writing.
Ask about costs for the specific data concern. A request to a company is different from hiring a lawyer.
Ask whether a proposed fee covers a data request, advice about a response or filing a claim. Check who pays for records and court expenses if the case loses. Keep the written legal terms separate from the operator’s policy or support reply.
Keep the collection, consent and data-request dates you know. Ask which legal rules and time limit apply.
Give the lawyer the policy version, request and full response for the relevant period. A future policy date does not set the deadline for an earlier event. Ask what remains to be checked and whether the firm has agreed to represent you before relying on a filing plan.
The review is free and private. Asking for it doesn’t commit you to anything.
Register your interestRoblox collects: account registration information (username, email, birth date), geolocation data (IP address, device GPS if enabled), chat logs and private messages, behavioral analytics (play sessions, engagement patterns, game preferences), device identifiers and hardware specifications, transaction and spending history, social graph data (friend lists, group memberships), and potentially voice data through voice chat features. This data is used to optimize engagement algorithms and target monetization opportunities.
Under COPPA and state privacy laws (CCPA in California, for example), parents have the right to request deletion of their children's personal data. However, Roblox's data deletion processes are opaque and slow, deletion may not extend to data already shared with third parties or used to train algorithms, and Roblox may retain certain data under claimed legal exceptions. File a formal data deletion request in writing and preserve a copy. If Roblox fails to comply, this non-compliance strengthens your legal claims.
Roblox's privacy policy allows sharing of data with "business partners" and "service providers." While Roblox claims it does not "sell" children's data in the traditional sense, it uses children's behavioral data to inform advertising strategies, engagement optimization, and business development decisions that generate revenue. Under the broad definition of "sale" in the California Consumer Privacy Act, certain data sharing practices may constitute a sale. The FTC investigation examined these data sharing practices as part of the COPPA inquiry.
Checked against 10 primary sources by People's Justice editors · Updated
How we make moneyPeople's Justice research team · Updated Oct 4, 2026