"Epic Games collects extensive personal data across sensitive categories (government ID, voice recordings, biometric-adjacent images, geolocation, financial information) with broad sharing to gaming platforms, social media, LLM providers, and law enforcement. Cross-site behavioral tracking through third-party cookies and web beacons enables targeting across Epic and external sites, with vague retention policies and limited opt-out for core collection practices. While user controls exist for marketing communications and account linking, the policy permits indefinite retention for legal/fraud prevention purposes and allows service degradation if tracking is disabled."
epicgames Privacy Concerns & Scorecard
Epic collects an exceptionally broad range of data including sensitive categories: government ID (for marketplace sellers), voice chat recordings, images for biometric-adjacent MetaHuman features, geolocation data, payment card information, and behavioral inferences about gaming preferences. The policy states data is collected through 'cookies, log files, and web beacons' with automatic collection mechanisms.
While users have opt-out mechanisms for email marketing and can manage linked accounts, disabling cookies may cause service functionality issues. The policy does not provide explicit opt-out for core tracking and data collection practices (analytics, voice chat recording transmission, image collection for MetaHuman), only for downstream marketing uses.
Epic shares data broadly with gaming console manufacturers (PlayStation, Xbox, Nintendo Switch), social media platforms, game publishers/developers, payment processors, anti-cheat providers, LLM providers for AI features, and law enforcement/government authorities. The policy explicitly states data sharing with 'categories of third parties' referenced elsewhere but not fully enumerated here.
Epic uses cookies, log files, and web beacons for automatic data collection and advertising effectiveness measurement. Third parties integrated into Epic Services use their own automatic data collection technologies to track users' interactions across Epic and other websites over time, creating cross-site behavioral tracking.
Retention periods are vague for most data types ('as long as reasonably needed') with broad exceptions for legal claims and law enforcement cooperation that could result in indefinite retention. Children's accounts have specific deletion timelines (18 months for inactive accounts effective April 2026), but general non-child account retention lacks clear deletion mechanisms.
No recommended actions at this time.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, verification, age gating for children, payment processing, customer support, identity verification for marketplace sellers
Processing payments for games, in-game purchases, subscriptions, marketplace transactions
Technical support, service optimization, fraud prevention, cross-device recognition, analytics
Content localization, currency determination, region-specific features, fraud detection
Service improvement, personalization, analytics, game progression tracking, technical troubleshooting, analytics and product development
Moderation and policy enforcement (voice recordings), community management, customer support, fraud prevention
MetaHuman character creation feature, AI-powered avatar generation
Personalization, recommendation systems, content moderation, targeted features, advertising measurement
Single sign-on functionality, cross-platform account linking, social integration features
Contest administration, product feedback, market research, service improvement
Child account verification, parental consent documentation, age gating compliance, COPPA compliance
Cross-Platform Tracking
Epic uses cookies, log files, and web beacons to track your interactions across Epic Services. Third-party tracking technologies integrated into Epic's platforms track your behavior across Epic and other websites over time for advertising measurement purposes. Additionally, when you link your Epic account to social media (Facebook) or gaming platforms (PlayStation, Xbox, Steam, Nintendo), data flows between those platforms based on their own privacy policies.
Tracking Methods:
Cookies (First-Party & Third-Party)
Epic uses first-party cookies to maintain session state and save user preferences. Third-party cookies placed by advertising networks and analytics providers track user behavior across Epic Services and other websites for ad effectiveness measurement and retargeting.
Web Beacons and Log Files
Invisible tracking pixels (web beacons) embedded in websites and emails track interactions with Epic Services. Server log files automatically record IP addresses, user agent information, and interaction patterns.
Device Fingerprinting
Epic collects persistent device identifiers, hardware specifications, operating system, and browser information to create device fingerprints for fraud detection and cross-device user recognition across Epic ecosystem.
Third-Party Analytics & Ad Network Tracking
Analytics and advertising partners integrated into Epic Services use their own tracking technologies to monitor user interactions and build behavioral profiles across Epic and other websites for targeting and measurement purposes.
Account Linking & Authentication
When users link Epic accounts to social media (Facebook) and gaming platforms (PlayStation, Xbox, Steam), Epic receives data about those platform activities, and those platforms may receive data about Epic account activity.
AI & Data Training
epicgames uses your content to train AI
Below is what's used and how (if at all) you can object.
What Content Is Used
Voice Chat Recordings
Voice chat recordings are transmitted to Epic for policy violation review and moderation purposes. These recordings are processed for content analysis.
Text Chat Messages
Text chat messages are collected and reviewed for moderation and policy enforcement. Messages are processed for content analysis.
User Images for MetaHuman
User-submitted images are processed through AI/ML for MetaHuman character creation feature, extracting facial features and characteristics for avatar generation.
Gameplay Statistics and Behavior
Machine learning is trained on user gameplay data for moderation, recommendations, and personalization purposes. Behavioral patterns are analyzed to generate inferences about game preferences.
AI-Powered Feature Inputs
User inputs to AI-powered features are collected and processed. Data is shared with LLM providers for feature functionality, with unclear scope regarding model training.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed epicgames
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.