Epic Games's privacy changed

EPIC GAMES PRIVACY POLICY

REMOVEDLast Updated: July 18, 2025 For Children's Privacy , see Section 5

ADDEDLast Updated: April 22, 2026

Welcome to Epic!

REMOVEDEpic Games, Inc. is headquartered in Cary, North Carolina. We and our subsidiaries have offices and operations located around the world that help create and deliver some of your favorite products and services, including games like Fortnite and development tools like Unreal Engine (see "Our Global Operations" below). This privacy policy describes the different ways we may collect, use, and share information on, through, or in connection with the Epic Services (see "What are the Epic Services?" below). If you have any questions, you can always reach out to us as described in "Contact Us" below. When we refer to "Epic" (or any similar terms like "we" or "us") in this privacy policy, we mean the Epic Games entity that controls and is responsible for your information, including Epic Games, Inc. and its subsidiaries that help provide and support the Epic Services. You can also find details about the data controller for personal information we collect through different Epic Services in "Contact Us" below. 1. WHAT ARE THE EPIC SERVICES? We use the term "Epic Services" to describe any Epic products or services that directly link to this privacy policy. These include, for example: • games like Fortnite , Rocket League (through our subsidiary Psyonix), Fall Guys (through our subsidiary Mediatonic), and Horizon Chase 2 (through our subsidiary Aquiris Game Studio LLC); • websites, and applications such as www.epicgames.com and the Epic Games Store , Postparty (through Life on Air), www.rocketleague.com (through Psyonix), and www.fallguys.com (through Mediatonic); • live events where this privacy policy is posted; and • developer tools, including the Developer Portal and Unreal Engine . Note that your use of the Epic Services may also be subject to additional terms and conditions. For example, you must review and accept the Fortnite End User License Agreement to play Fortnite, the Psyonix End User License Agreement to play Rocket League, the Fall Guys: Ultimate Knockout - End User License Agreement to play Fall Guys, and the Horizon Chase 2 End User License Agreement to play Horizon Chase 2. Please read this entire privacy policy. You should also carefully review any other agreements that apply to the Epic Services you use, and confirm you understand and agree to them, before using those products or services. 2. WHAT INFORMATION DO WE COLLECT? The types of information we collect depend on how you interact with us. Generally speaking, we collect information in three main ways: A) when you provide it to us, B) automatically when you use the Epic Services, and C) from service providers and third parties.

ADDEDIf you are a child, please see our Privacy Information for Young Players . If you are the parent/guardian of a child, please see Section 2 (How Do We Process Children's Information?) . Epic Games, Inc. is headquartered in Cary, North Carolina. We and our subsidiaries have offices and operations located around the world that help create and deliver some of your favorite products and services, including games like Fortnite and developer tools like Unreal Engine. This Epic Games Privacy Policy (this " Policy ") describes the different ways we may collect, use, secure, retain, disclose, and otherwise process information that can be used to identify you on, through, or in connection with the Epic Services (defined below). Please read this entire Policy carefully and any other agreements that apply to your use of the Epic Services, and confirm you understand and agree to them, before using any of the Epic Services. If you have any questions, you can always reach out to us using the contact information listed in Section 12 (How Can You Contact Us?). 1. WHAT DOES THIS POLICY COVER? When we refer to " Epic " (or any similar terms like " we ," " us ," or " our ") in this Policy, we mean the Epic entity that controls and is responsible for your information, such as Epic Games, Inc. and its subsidiaries and affiliates that provide the Epic Services. This Policy applies when Epic acts as a data controller of your information. You can find details about the data controller responsible for your information in Section 12 (How Can You Contact Us?). We use the term " Epic Services " to describe any Epic products or services that directly link to this Policy, including: our games (e.g., Fortnite , Rocket League , Fall Guys , and Horizon Chase 2 ); our marketplaces (e.g., Epic Games Store and Fab ); our developer tools (e.g., Unreal Engine , MetaHuman , and Unreal Editor For Fortnite ); our applications (e.g., Postparty ); our websites and their respective subdomains (e.g., www.epicgames.com , www.fortnite.com , www.rocketleague.com , and www.fallguys.com ); and live events where this Policy is posted. Note that your use of the Epic Services is also subject to additional terms and conditions. For example, you must review and accept the Epic Games Terms of Service to play Fortnite, Rocket League, Fall Guys, and Horizon Chase 2. 2. HOW DO WE PROCESS CHILDREN'S INFORMATION? When a user indicates they are a child, they are placed in a " Cabined Account " until they are no longer a child as defined above or until their parent/guardian provides additional privacy permissions and enables parental controls. Cabined Accounts can play Epic's games (e.g., Fortnite, Rocket League, or Fall Guys), but features like voice chat and real money purchases are disabled. Epic collects limited personal information from Cabined Accounts to operate them, in each case according to applicable youth privacy and protection laws: child's date of birth and country to determine age and apply appropriate settings; child's email address for sign-in (which is only stored in an unreadable hashed and salted form); parent/guardian's email address to provide notice and seek their consent for additional features; and persistent identifiers of the child like IP address, Epic account ID, gaming platform account IDs, device IDs, and similar data collected with website tracking technologies to provide and maintain the Epic Services (including analytics to improve them), authenticate users, protect the security and integrity of users and the Epic Services, comply with legal and regulatory requirements, facilitate personalization, and maintain user driven preferences (e.g., game advancement and avatar choice). We use technical and organizational means designed to ensure that those persistent identifiers of Cabined Accounts are not used for other purposes. When we disclose personal information of our Cabined Accounts externally, it is to help us carry out these limited purposes (e.g., to gaming consoles to help run the game or to our cloud storage providers). Learn more about Cabined Accounts . A. Notice, Consent, and Parental Controls We collect a parent/guardian's email address from a child to send the parent/guardian an email notice that their child has created a Cabined Account. This notice also lets them review our privacy practices for non-Cabined Accounts, provide consent to a non-Cabined Account for their child to enable additional features, and set up parental controls. Please note that parents/guardians must complete our parent verification process to provide consent for a non-Cabined Account. We use Kids Web Services (" KWS "), a service offered by our subsidiary Kids Web Services Ltd, for parent/guardian and user age verification purposes. Learn more about Verifiable Parental Consent . Once an email address is verified, KWS will recognize it across other games or services powered by KWS technology, so there will be no need to verify it again. Learn more about KWS . When a parent/guardian provides consent for a non-Cabined Account for their child, parental controls are enabled automatically. Parental controls can then be accessed using a PIN code and allow the parent/guardian to review and change feature settings selected during the permission flow and further customize their child's experience. Learn more about Parental Controls . Once a parent/guardian has authorized a non-Cabined Account for their child, the privacy practices described elsewhere in this Policy generally apply, but younger users may not have access to all content or features (because of our default privacy settings, age requirements for certain services and features, and/or parental controls in place). For example, depending on the parental control settings and the child's age, a child may access communication features (like voice and text chat) and interact with most of the Epic Services (including downloading other games or apps from the Epic Games Store). For additional details, please see Sections 3 (What Information Do We Collect and How?) and 4 (Why Do We Process Information?). We disclose a child's account information to third parties: (1) for purposes integral to the operation and protection of our Epic Services (e.g., to gaming consoles, publishers of games or apps acquired through Epic Games Store, professional advisors, and law enforcement), or (2) with a parent/guardian's permission (e.g., for account linking and signing into third-party services). For additional details, please see Section 5 (Who Do We Disclose Information To?). If you have any questions, please reach out to us using the contact information listed in Section 12 (How Can You Contact Us?). B. Retention of Personal Information We generally retain personal information collected from a child only for as long as we reasonably need it for the purposes it was collected. For example: If a child with a Cabined Account contacts us with a question or request, any personal information provided will be deleted after the inquiry is resolved. If a child provides their parent/guardian's email address to receive notice and provide consent for additional features, their email address will be deleted if the parent/guardian does not respond within 14 days. Starting in April 2026, if a child's account remains inactive for 18 months, personal information associated with the account will be deleted (as defined by Children's Online Privacy Protection Rule, 16 CFR 312.2). For additional details, please see Section 7 (How Do We Handle Information?). C. Child and Parent/Guardian Privacy Rights In addition to the parental controls that enable parents/guardians to change the choices they've made about their child's use of specific features like voice and text chat, children and their parents/guardians can exercise their individual privacy rights as described in Section 9 (What Choices and Controls Do You Have?). Those rights include the right to review their child's personal information retained by Epic and delete their child's Epic account (which deletes their personal information and stops further collection). To exercise those rights or ask any questions about how we handle children's personal information, please use the contact information listed in Section 12 (How Can You Contact Us?) or head straight to our Parent Support Request Form . 3. WHAT INFORMATION DO WE COLLECT AND HOW? The types of information we collect depend on how you interact with the Epic Services. Generally speaking, we collect information in three ways: A) when you provide it to us, B) automatically when you use the Epic Services, and C) from third parties. This Policy is designed to help you understand how we handle information that can be used to identify you. In some cases, we may also create or collect information that does not identify you individually, such as de-identified or aggregated information. If we combine this type of information with information that identifies you, we will treat the combined information as information that can be used to identify you subject to this Policy.

A. Information You Provide

REMOVEDYou can provide us with different kinds of information depending on how you interact with the Epic Services. Sometimes we'll ask you to provide specific pieces of information, such as when we require it to provide parts of the Epic Services to you (for example, by prompting you to provide your date of birth or complete an online registration process). If we ask you to provide us with information in these cases and you choose not to, you may not be able to access the relevant Epic Services and/or some features may not operate as intended. For instance, in order to make purchases on the Epic Games Store and to play some of our games, you'll need an Epic account. To create one, you'll need to provide us with basic registration information like your name, a public-facing display name, password, the country you live in, and email address. If you want to make a purchase, we may ask you to provide payment-related information (like your credit card number and expiration date) to complete the transaction. In addition, many of our services require your date of birth to determine which features we can offer you and which settings to apply to your account based on your age and location. We also collect the information you voluntarily provide to sign up for email alerts, use social features like forums or chat, register for early access to our games, use our developer tools (including to create and publish games and other content), enable two-factor authentication, register for or attend our events, complete surveys, or contact us through Player Support requests or customer service. If you use our voice chat feature and voice reporting is enabled in a voice channel, snippets of voice chat audio data will be stored on your device and the devices of participants in the voice channel. If a violation of our Community Rules is reported, these snippets may be transmitted to Epic to help us enforce those Community Rules . If you enter a contest or competitive event, or participate in our Support-A-Creator or Island Creator programs, we'll collect your application information and other information we may need to help confirm your eligibility and process payouts. We collect whatever information you choose to provide to us in those or other similar cases.

ADDEDYou can choose to provide us with different types of information depending on how you use the Epic Services. In some cases, we will ask you for specific information because we need it for the Epic Services or their respective features. If you choose not to provide the requested information, you may be unable to access those Epic Services or features may not work properly. For example: When you access the Epic Services, we may collect your date of birth to determine age and apply appropriate settings, and if you indicate you are a child, we also collect your parent/guardian's email address to provide notice and seek their consent for additional features. When you create an Epic account, we may collect basic registration information (e.g., name, public-facing display name, password, country, and email address) to create and maintain your account, provide the Epic Services you requested, enforce any terms or policies that apply and govern your use of the Epic Services, and maintain appropriate records to reflect how we deliver the Epic Services to you. When you make a purchase on the Epic Games Store, depending on which payment method you use, we may collect your payment information (e.g., credit card number and expiration date, name, and region information) to complete the transaction. When you sign up for email alerts, we collect your email address to keep you informed about updates you've opted into. When you enable two-factor authentication, depending on which authentication method you use, we may collect your phone number and email address to help secure your account. When you use social features like our forums or chat, we may collect the information you choose to share on or through them (e.g., the posts you share on our forums). When you use our voice chat feature and voice reporting is enabled in a voice channel, snippets of voice chat are stored on your device and the devices of participants in the voice channel. If a violation of our terms or policies (e.g., Community Rules ) is reported, these snippets may be transmitted to Epic to review that reported violation and enforce our terms and policies. For more information on our retention of your voice and text chat, please read our FAQs . When you use AI-powered features (e.g., Epic Developer Assistant), we use your inputs (e.g., information you submit that may identify you) to generate outputs (e.g., responses that may identify you). When you use MetaHuman to create in-game characters, we collect images of you to generate a mesh solely to provide the requested functionality, not to identify you. When you use our other developer tools, we collect the information, including any content, you create and publish. When you enter a contest or competitive event, or participate in our Support-A-Creator or Fortnite Developer programs, we may collect your application information and other information you provide to us to confirm your eligibility and process payouts. When you register for our events or early access to our games, we collect your registration information. When you submit a takedown request, we collect the information you provide (e.g., name, contact details, signature, and evidence supporting your claim to assess and respond to those requests). When you complete our surveys or questionnaires, we may collect your responses and feedback. When you contact us through player support or another support channel, we collect your correspondence and contact information.

B. Information We Collect Automatically

REMOVEDWe collect some information automatically when you visit, access, or use the Epic Services. This includes information about your gameplay or application usage, purchases, entitlements, and other activity in the Epic Services, that are typically associated with your account (if you are logged into your Epic account or use a third-party account to access the Epic Services) or with an identifier we have assigned to your device or profile. While the specific types of information that we automatically collect may vary, they generally include: • Usage information and statistics about how you interact with the Epic Services, including the application you used or the game you played, how long you used or played it and when, gameplay attempts, progression and results, saved preferences, crash reports, the URLs of our websites that you have visited, URLs of referring and exiting pages, page views, time spent on a page, number of clicks, and platform type; • Technical information about your computer, device, hardware, or software you use to access our services, such as IP address, device identifiers, your internet service provider, plugins, or other transactional or identifier information for your device (such as device make and model, information about device operating systems and browsers, or other device or system-related specifications); and • The general location of your device, which we typically derive from your device's IP address. The Epic Services use technologies such as cookies, log files, and web beacons to automatically collect the types of information listed above. Some of these technologies may create small files or record-keeping tools that may be stored on your device. They help us, our service providers, and third parties recognize your device and provide information about how you use and interact with the Epic Services. For example, they support our ability to authenticate users, remember preferences, manage advertising, personalize experiences, and conduct data analytics. Please note that if certain features on the Epic Services are provided by third parties, those third parties may also use automated means of data collection and may record information about your use of the Epic Services, their services, or others' websites over time. For example, when you use Epic Services (like Unreal Engine) that include third-party software, those third-party providers may collect information through their technology. These features are subject to those third parties' privacy notices and policies. C. Information We Collect from Other Sources In some cases, we may also receive information about you from service providers and third parties in connection with your use of the Epic Services or your interactions with us on other platforms. For example, some other developers allow you to use your Epic account to log in to their service. And if you choose to link your Epic account with your account on a third-party social media (like Facebook), gaming (like Steam), or other similar website or service, or if you interact with an ad for one of the Epic Services on an external website or service, the company that operates that website or service may share some information with Epic in accordance with their own privacy practices. Your privacy settings on the other company's website or service typically control the specific types of information they can share with Epic, so please be sure to review and update them regularly. Common examples for linked accounts might include your third-party account display name and user ID, as well as associated device information, name, and email address. For participants in our Support-a-Creator program, we may also collect the number of social media account followers you have for program eligibility purposes. You can also buy, download, or access some Epic Services on or through services operated by third parties. If you do, they may provide us with information to facilitate your access to and use of the Epic Services. This typically includes information like your display name, user ID, and device and region information. For example, you can choose to download and play games like Fortnite on gaming consoles (like PlayStation®, Microsoft Xbox, and Nintendo Switch) through your gaming console account. When you do, the company operating that platform or service may share some information with us, which helps us do things like facilitate your gameplay and track your progression and entitlements. D. Fraud Prevention & Anti-Cheat Providing users with a fair, balanced, and competitive experience on the Epic Services is extremely important to us. We strictly enforce prohibitions against cheating, hacking, account stealing, and any other unauthorized or fraudulent activity on the Epic Services. We use a variety of anti-cheat and fraud prevention technologies to help us identify and prevent malicious activity. These services may collect and analyze data about your computer and the software on your computer to detect cheating and may be provided by Epic or by service providers. 3. HOW DO WE USE INFORMATION? As a general matter, we use the information we collect (either individually or in combination with other information collected as described in this policy) to help us provide, improve, customize, analyze, and promote the Epic Services. This includes using it for purposes such as: • Creating, verifying, and managing user accounts and features; • Providing the Epic Services, as well as support and assistance for them, including by responding to inquiries, processing transactions or requests, and communicating with users (such as by sending service and account-related messages and updates); • Developing, delivering, and improving the Epic Services and other offerings, some of which may be offered in partnership with other parties; • Personalizing your experience, including by presenting content or features better tailored to you or your interests, or our inferences about your interests (for instance, if you frequently play games in a certain genre, we may infer that you'd be interested in that genre and suggest similar games to you); • Promoting the Epic Services, including managing, customizing, and measuring the effectiveness of our advertisements, promotional offers, surveys, and events; • Managing alpha, beta, or early access tests (and collecting feedback); • Conducting data analytics (like analyzing how the Epic Services are used so we can better understand, improve, and personalize them); • Complying with our legal or contractual obligations and enforcing our terms; • Securing the Epic Services, such as by detecting fraud and otherwise protecting Epic and other users from illegal or harmful actions; and • Improving technologies or processes used to accomplish these purposes (like training machine learning models used to help detect or moderate toxic, illegal, or harmful content or conduct and enforce our terms and policies like our Community Rules ). We may also process information that does not identify you individually, including aggregate or de-identified information that we create or collect from other sources. This information helps us better understand larger groups of users. If we combine this information with information that identifies you, we will treat it as described in this privacy policy. But please note that this privacy policy does not restrict our ability to process information that does not individually identify you, and we may use and disclose aggregated or de-identified information for any reason permitted by law. 4. HOW DO WE SHARE INFORMATION? We may share some of the information we collect to help operate and improve the Epic Services. Depending on how you interact with us, common examples might include sharing: • With console and platform partners (for example, to facilitate gameplay when you access the Epic Services through a third-party console provider); • With other game developers (such as to enable features for games you acquire through the Epic Games Store); • With other users (like if you use social features such as chat); • Publicly (for example, your display name, content you create or share, basic game statistics, and other similar information may be generally accessible to others); • With service providers that operate on our behalf to help support the Epic Services in accordance with our instructions (for example, cloud storage providers, payment processors, or marketing and advertising partners); • When we believe we must in order to comply with the law or to protect you, Epic, or others (for example, in response to court order or subpoena, as part of an investigation of fraud or other illegal activity, or violation of our terms or policies, or if necessary to protect others from death or serious harm to body or property); • With other Epic entities (including to help provide support for the Epic Services internationally); • In connection with certain types of corporate transactions (like in the event of a restructuring or the sale of all or a significant part of our business); • With your permission (for example, if you link external accounts with your Epic account, or use your Epic account to sign in to third-party games and services or participate in cross-promotional events); and • We may also share information that does not identify you with third parties, including aggregate or de-identified information. No mobile phone numbers provided to Epic for security purposes will be shared with third parties or affiliates for marketing/promotional purposes. To the extent that we share your personal information with third parties, we endeavor to ensure these third parties provide the same or substantially similar protections as those that Epic describes in this privacy policy. Third parties you interact with through Epic Services may have different privacy practices than Epic, so we encourage you to review their privacy policies before sharing your information with them. 5. CHILDREN'S PRIVACY We are designing the Epic Services to be welcoming to users of all ages around the world. This means that we collect age information from users, and some of our services will provide a different experience based on what we know about the age of a user and where they live. The information below is for parents and guardians to understand our privacy practices with respect to children (under 13 or the age of digital consent in the user's region, whichever is higher). When a user indicates that they are a child, they are placed in a "Cabined Account" until they are no longer a child as defined above or until their parent or guardian provides additional privacy permission and enables parental controls. Cabined Accounts can play Epic's games such as Fortnite and Fall Guys, but features like voice chat and real money purchases are disabled. Epic collects limited personal information from Cabined Accounts to operate them, in each case according to applicable youth privacy and protection laws: • Date of birth and country to determine age and apply appropriate settings; • Parent or guardian email address to provide notice and seek consent to additional features (which is deleted if the parent does not respond within 14 days); • User email address for sign-in (which is only stored in an unreadable hashed and salted form); and • Persistent identifiers like IP address, gaming platform account IDs, device identifiers, and similar data collected with website tracking technologies to provide and maintain the Epic Services (including analytics to improve them), protect the security and integrity of users, ensure legal and regulatory compliance, and facilitate in-game personalization such as game advancement and avatar choice. If a user with a Cabined Account contacts us with a question or request, any personal information provided will be deleted after the inquiry is resolved. When we share personal information from Cabined Accounts externally, it is to help us carry out these limited purposes (like sharing with consoles to help run your game or with our cloud storage providers). Learn more about Cabined Accounts . A. Notice, Consent, and Parental Controls We collect a parent or guardian email address from a child player in order to send the parent or guardian an email notice that the child has created a Cabined Account. This notice also lets them review our privacy practices for non-Cabined Accounts, provide consent to a non-Cabined Account for their child to enable additional features, and set up Parental Controls. Please note that parents/guardians must complete our parent verification process in order to provide consent to a non-Cabined Account. We use Kids Web Services (KWS), a service offered by our subsidiary Kids Web Services Ltd, for parent/guardian and user age verification purposes. KWS will remember that you have verified your age the next time you use your email address to access other games/services powered by KWS technology, so that you won't need to verify again. Epic and KWS are jointly responsible for handling some of your personal information in this context. Learn more about verifiable parental consent and KWS in the KWS Privacy Policy . When a parent or guardian gives permission for a non-Cabined Account for their child, Parental Controls are enabled automatically. Parental Controls can then be accessed using a PIN code, let you change choices about particular features made during the permission flow, and further customize your child's experience. Learn more about Parental Controls . Once a parent has authorized a non-Cabined Account for their child, the privacy practices described elsewhere in this Privacy Policy generally apply, but younger users may not have access to all content or features (because of our default privacy settings, age requirements for certain service and features, and/or Parental Controls in place). Depending on the parental control settings and the user's age, users may access communications and social features (like chat), and freely interact with most of the Epic Services (including downloading other games from the Epic Games Store). When a user accesses a third-party game or app through the Epic Games Store, some account information is shared with the publisher or developer of that game or app to enable the transaction and product features. You can see the developer and publisher on each product listing before download, or review our Publisher Index . Please contact us as described below with any questions about Epic's data sharing with these third parties. For additional details, please see "What Information Do We Collect?", "How Do We Use Information?", and "How Do We Share Information?" above. B. Child and Parent Privacy Rights Child users and their parents can exercise their individual privacy rights as described in Section 6 below . Parental Controls enable parents and guardians to change the choices they've made about their child's use of specific features like voice chat. Parents and Guardians can also review the child's personal information held by Epic Games, and delete their child's Epic account (which deletes the personal information and stops further collection). To exercise these rights or ask any questions about how we handle children's personal information, please see the "Contact Us" section below, or head straight to our Parent Support Request Form . 6. YOUR CHOICES AND CONTROLS We seek to provide you with meaningful choices about the personal information we collect. The specific choices available to you often vary depending on the exact nature of our relationship with you, such as the Epic Services you use. Common examples include: • You can request that we provide access to, or that we correct or delete, personal information we've collected from you. Please submit requests to access, update, or delete personal information associated with your Epic account by reaching out to us as described in "Contact Us" below. Note that we may ask you for additional information to help us verify who you are before completing your request. • If applicable, you may also have the option to appeal or otherwise request human review of decisions made by automated means. • You can change your email marketing preferences at any time, such as by using the opt-out mechanism provided in our marketing emails, updating your Epic account settings, or contacting us with your request (see "Contact Us" below). • You can change your privacy settings on other parties' websites (such as social networks) or platforms (like console providers) to limit the information they may share with us. • You can change your browser or mobile device settings to block, manage, delete, or limit tracking technologies like cookies. In some cases, blocking or disabling cookies may cause the Epic Services not to work as intended and some features may not be available. • If you're under the age of 18 and have an Epic account, you can ask that we remove or anonymize certain content you've provided on the Epic Services. Please direct requests to help delete or edit content on the Epic Services to Epic as described in "Contact Us" below. • Parents and guardians can adjust settings for their child's Epic account using Parental Controls . Some parts of the world provide individuals with specific choices related to their personal information by right under local law. 7. RETENTION Because the specific personal information we process and our reasons for doing so often vary depending on how you use the Epic Services, how long we retain it can also vary. We generally store personal information for as long as we reasonably need it for the purposes described in this policy (like complying with our legal obligations, managing internal records, enforcing our terms, and resolving disputes), unless a longer retention period is required or permitted by law. The main criteria we consider in determining specific retention periods often include minimum requirements under applicable law, relevant industry standards, the types of information in question (such as its level of sensitivity), relevance to potential litigation or similar proceedings (like defending ourselves against legal claims), and whether the information is required to prevent fraud or similar abuse of the Epic Services (including to enforce prohibitions against cheating and other unauthorized behavior). For example, if you create an Epic account, we will generally store the personal information associated with your Epic account for as long as needed to maintain your account, provide the Epic Services you requested, enforce any terms that apply and govern your use of the Epic Services, and maintain appropriate records to reflect how we deliver the Epic Services to you. To learn more about requesting that Epic delete your personal data, please see "Your Choices and Controls" above. 8. SECURITY We maintain appropriate administrative, technical, and physical safeguards to protect your personal information from accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use and other unlawful forms of processing. In some cases, your information is accessible when you log into a feature we offer, and in those cases you need to keep your user credentials and password confidential and secure so that your information is protected. If we become aware of unauthorized disclosure of your personal information, we will notify you as required by law and take steps to help secure your information. 9. UPDATES We'll update this policy from time to time to reflect changes in our practices or relevant laws. When we do, we'll change the date noted at the top of the policy. In some cases, we may also notify you of the relevant changes by email or within the Epic Services. Please review this policy regularly to make sure that you understand your relationship with Epic and the ways we may collect, use, and share information in connection with the Epic Services. 10. OUR GLOBAL OPERATIONS Epic Games, Inc. is based in the United States, but we operate globally to help provide users all around the world with a better experience on the Epic Services. We have subsidiaries, offices, service providers, and partners worldwide to support these operations in a number of different ways -- for example, the developer of Fall Guys is a subsidiary called Mediatonic Limited that is based in the United Kingdom. This means that Epic may process the information we collect in connection with your use of the Epic Services in places outside the region where you reside. A. Data Transfers When you use the Epic Services, your information may be transferred to or stored in the United States or other countries where we or our service providers operate. The data protection laws and rules in these countries may be different than those where you live. We rely on various legal mechanisms to help lawfully support transfers of information outside the country of collection where appropriate. If permissible under local law, you're authorizing Epic to process your information in any of the locations where we operate (including the United States) by using the Epic Services. To learn more about the Epic entity responsible for operating the Epic Services you use, see "Contact Us" below. B. US State Comprehensive Privacy Laws For California Residents The California Consumer Privacy Act or "CCPA" provides residents of California with certain rights to their personal information. Terms used in this subsection are defined by the CCPA.

ADDEDWe collect some information automatically when you visit, access, or use the Epic Services. This includes information like your gameplay or application usage that are typically associated with your Epic account, your third-party account (if you access the Epic Services through one), or an identifier we assign to your device or profile. While the specific types of information that we automatically collect may vary, they generally include: usage information and statistics about how you interact with the Epic Services, including the application or game used, duration and timing of use, gameplay attempts, progression and results, saved preferences (e.g., language), crash reports, URLs of our websites you visited, URLs of referring and exiting pages, page views, time spent on a page, number of clicks, and platform type; technical information about the computer, device, hardware, or software you use to access the Epic Services, including IP address, device ID, internet service provider, browser plugins, and other transactional or identifier information (e.g., device make and model, operating system, browser type, and other system-related specifications); and general location information about your device, typically inferred from its IP address. The Epic Services use technologies such as cookies, log files, and web beacons to automatically collect the types of information listed above. Some of these technologies may create small files or record-keeping tools stored on your device. These technologies help us recognize your device and collect information about your interactions with the Epic Services, and we use that information to, for example, provide and operate the Epic Services (e.g., authenticate you and save preferences); monitor the Epic Services (e.g., detect and report crashes); understand and improve the Epic Services (e.g., conduct data analytics); personalize the Epic Services (e.g., display local currencies); and promote the Epic Services (e.g., manage advertising). When features of the Epic Services are provided by third parties, those third parties may also use automatic data collection technologies and collect information about your use of the Epic Services, their services, or others' websites over time. For example, when you use the Epic Services (e.g., Unreal Engine) that include third-party software, those third parties may collect your information through their technologies. Features provided by third parties are subject to their applicable privacy notices and policies. C. Information We Receive from Others In some cases, we may receive information about you from third parties in connection with your use of the Epic Services or your interactions with us on or using third-party platforms, websites, or services. For example: When you buy, download, or access our games through third-party gaming consoles (e.g., PlayStation®, Microsoft Xbox, and Nintendo Switch), we may receive information from those consoles (e.g., your third-party display name, user ID, device information, and country) to facilitate gameplay, track your progression and entitlements, and support your use of the Epic Services. When you link your Epic account with your account on a third-party social media (e.g., Facebook), gaming (e.g., Steam), or similar platform, we may receive information from that platform (e.g., your third-party display name, user ID, device information, name, and email address). When you use your Epic account to log into a third-party developer's product or service, we may receive your information from that developer (e.g., information about your in-game interactions including achievements to help track, display, and unlock achievements in the Epic Games Store). When you interact with an ad for the Epic Services on a third-party website or service, we may receive related information from the company operating that website or service. If another user reports that you violated our terms or policies, we may receive information about you from that user. If you are a parent/guardian of a child, we may receive your email address directly from your child to contact you for verifiable parental consent. Your privacy settings on third-party platforms, websites, and services typically control what information they disclose to Epic, so we encourage you to review and update those settings regularly. While we follow this Policy when using information provided by third parties, we do not control how third parties collect or use your information. For more details, please refer to their privacy notices and policies. 4. WHY DO WE PROCESS INFORMATION? We process the information we collect, either individually or in combination with other information as described in this Policy, for the purposes outlined below. If you are located in the European Economic Area, the United Kingdom, or Switzerland, the relevant lawful bases are identified in parentheses below. For more information on lawful bases, please see Section 11 (Additional Notice for Individuals Located in the European Economic Area, the United Kingdom, or Switzerland). To provide and operate the Epic Services (contractual necessity or legitimate interests): For example, we may use your information to create and maintain your Epic account, grant you access to the Epic Services, including verifying your identity, enable features of the Epic Services, including cross-progression features that allow gameplay across platforms and AI-powered features, complete and manage your transactions, save your preferences, enforce our terms and policies, notify you about changes to our terms and policies, and contact you about your Epic account, transactions, and other service-related messages necessary for the operation of the Epic Services. To support and monitor the Epic Services (legitimate interests or contractual necessity): For example, we may use your information to respond to support requests and general inquiries sent by you, and detect and report crashes. To secure and protect the Epic Services and others (legitimate interests, contractual necessity, or legal obligations): For example, we may use your information to detect and prevent fraud, cheating, hacking, account theft, misuse, and other unauthorized activities on the Epic Services, and protect the rights, property, and safety of Epic, our users, and others. To moderate the Epic Services (legitimate interests, legal obligations, or contractual necessity): For example, we may use your information to detect, moderate, and respond to reported illegal, harmful, toxic, and fraudulent content and conduct that violates applicable laws or our terms and policies. To develop the Epic Services (legitimate interests): For example, we may use your information to manage alpha, beta, and early access tests and gather feedback. To understand and improve the Epic Services (legitimate interests): For example, we may use your information to analyze your use of the Epic Services, support auditing, and improve features, technologies, and processes, including by training machine learning technologies to detect and moderate illegal, harmful, toxic, and fraudulent conduct and content that violates applicable laws or our terms and policies. To personalize the Epic Services (consent or legitimate interests): For example, we may use your information to present content, features, and recommendations tailored to you, or inferred from your activity, including by suggesting games, Islands, items, and game levels, and to improve the machine learning technologies that help deliver these personalized recommendations. For more information on these recommendations, please read here . To promote the Epic Services (consent or legitimate interests): For example, we may use your information to manage, customize, and measure the effectiveness of our advertisements, promotional offers, surveys, and events. To facilitate corporate transactions (legitimate interests): For example, we may transfer your information within our corporate group in the event of a company restructure and to a third-party company in connection with, or during negotiations for, a sale, merger, divestiture, restructuring, reorganization, dissolution, bankruptcy, liquidation, or other transfer of some or all our assets, or another similar corporate activity. To establish and defend legal claims (legitimate interests or legal obligations): For example, if you bring a legal claim against us, we may use your information to investigate and respond to that claim and defend ourselves; and where we detect misuse of the Epic Services, we may use your information to establish and pursue our legal claims. To comply with applicable laws, regulations, and legal processes (legal obligations): For example, we may use your information to respond to valid requests from law enforcement and government authorities, including subpoenas, court orders, and search warrants; and we may use your date of birth to facilitate compliance with youth protection laws. To purposes you've consented to (consent): For example, with your consent, we may use your information to send you marketing communications. You are not required to provide your consent, and you may withdraw your consent at any time. We may also process your information for additional purposes in the future, compatible with those described above, and we may explain the purpose to you at the time of collection. In addition, we may use information that does not identify you individually, such as de-identified or aggregated information, for business, operational, or other purposes permitted under applicable law. 5. WHO DO WE DISCLOSE INFORMATION TO? We may disclose some of your information to our subsidiaries and affiliates, our service providers, and third parties for the purposes set forth above. When we disclose information to our service providers, we endeavor to ensure these service providers provide protections that are the same as, or substantially similar to, those described in this Policy (e.g., by limiting the use of your information to the services provided). Our service providers include: database hosting and storage providers; customer relationship management tools; email service providers; anti-cheat and fraud prevention technology providers; payment processors; large language model providers to enable AI-powered features; and marketing and advertising partners. Depending on the Epic Services you use and how you interact with them, third parties include: publishers of games you buy or play through the Epic Games Store to enable the transaction and product features (publisher information can be found on the product listing in the Epic Games Store, our Publisher Index , and your Library menu within the Epic Games Launcher); developers to authenticate you and enable features like friends lists and crossplay if you sign into their games or apps using your Epic account (developer information is available in our EAS Developer Index , and these connections can be viewed and managed in your Epic account settings under 'Linked accounts') or developers who publish Islands in Fortnite (e.g., to help with login or support requests); mobile platforms or gaming consoles to help run our games (e.g., PlayStation®, Microsoft Xbox, and Nintendo Switch); social media platforms (e.g., Facebook) and gaming storefronts (e.g., Steam) if you link your Epic account to a third-party platform (these links can be viewed and managed in your Epic account settings under 'Linked accounts'); other users (e.g., when you use social features like chat) or the public (e.g., when you play our games or use our developer tools, information like your display name, game statistics, and content created or shared may be publicly accessible); our lawyers, consultants, accountants, business advisors, and similar third parties who owe us duties of confidentiality; a buyer or other successor in the event of a sale, merger, divestiture, restructuring, reorganization, dissolution, or other transfer of some or all our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which information retained by us pertaining to users of the Epic Services is among the assets transferred; law enforcement, government authorities, or others as required to comply with applicable laws, regulations, or legal processes, or if we believe disclosure is necessary to protect the rights, property, or safety of Epic, our users, or others (e.g., to investigate fraud or other illegal activities, enforce our terms and policies, or protect our users or others from death or serious harm); and others with your permission (e.g., if you participate in cross-promotional events or use certain payment methods). No mobile phone numbers provided to Epic for security purposes will be shared with third parties or affiliates for marketing or promotional purposes. 6. WHERE DO WE PROCESS INFORMATION? Epic Games, Inc. is based in the United States, but we operate globally to help provide users all around the world with a better experience on the Epic Services. This means that Epic may process, store, and transfer your information outside the country where you live. The data protection laws in these countries may be different than those where you live. When we transfer your information outside the country where it was collected, we rely on appropriate legal mechanisms to support the transfer and implement technical, organizational, and physical safeguards to secure your information. These measures include model contractual clauses (such as the European Commission's Standard Contractual Clauses) and, if applicable, adequacy decisions by regulatory authorities. Where permitted by law, your use of the Epic Services authorizes us to process your information in any country where we operate, including the United States. To learn more about the location of the Epic entity responsible for operating the Epic Services you use, please see Section 12 (How Can You Contact Us?). 7. HOW DO WE HANDLE INFORMATION? A. Retention Because the specific information we process and our reasons for doing so often vary depending on how you use the Epic Services, how long we retain your information can also vary. We generally retain information for as long as we reasonably need it for the purposes described in Section 4 (Why Do We Process Information?), unless a longer retention period is required or permitted by law. For example, if you create an Epic account, we will generally retain the information associated with your account (e.g., name, public-facing display name, password, country, and email address) for as long as needed to maintain your account, provide the Epic Services you requested, enforce any terms and policies that apply to and govern your use of the Epic Services, and record how we deliver the Epic Services to you. The main criteria we consider in determining specific retention periods often include minimum requirements under applicable law, relevant industry standards, the types of information in question (e.g., its level of sensitivity), the purposes for which we process the information (e.g., complying with our legal obligations, managing internal records, enforcing our terms and policies, and resolving disputes), whether we can achieve those purposes through other means, the potential risk of harm from unauthorized use or disclosure of the information, the information's relevance to potential litigation or similar proceedings (e.g., defending ourselves against legal claims), and whether the information is required to prevent fraud or similar abuse of the Epic Services (e.g., enforcing prohibitions against cheating and other unauthorized behavior). You may request that Epic delete your information. Please see Sections 9 (What Choices and Controls Do You Have?), 10 (Additional Notice For Residents of Certain US States), and 11 (Additional Notice for Individuals Located in the European Economic Area, the United Kingdom, or Switzerland) for more information on requesting deletion of your information. B. Security We maintain appropriate administrative, technical, contractual, and physical safeguards to secure your information from accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, use, or other unlawful forms of processing. In some cases, your information may be accessible when you use the Epic Services. To help keep your information secure, you must maintain the confidentiality of your login information. If we become aware of unauthorized disclosure of your information, we will notify you as required by law and take appropriate steps to help secure your information. 8. WILL THIS POLICY BE UPDATED? Yes, we'll update this Policy from time to time to reflect changes in our practices and relevant laws. When we do so, we'll change the date noted at the top of this Policy. In some cases, we may also notify you of the changes by email or within the applicable Epic Services. Please review this Policy regularly to make sure that you understand your relationship with Epic and the ways we collect, use, secure, retain, disclose, and otherwise process your information that can be used to identify you on, through, or in connection with the Epic Services. 9. WHAT CHOICES AND CONTROLS DO YOU HAVE? We seek to provide you with meaningful choices about the information we collect. The specific choices available to you often vary depending on the exact nature of our relationship with you, such as the Epic Services you use. Common examples include: You can correct your information through your Epic account. You can request that we provide access to, or correct or delete, information we have collected from you. You can change your email marketing preferences at any time (e.g., by using the opt-out mechanism in our marketing emails, updating your Epic account settings, or contacting us directly). You can change your privacy settings on third-party platforms, websites, and services to limit the information they disclose to us. You can manage cookies and other automatic data collection technologies through your browser or device settings (e.g., by blocking, deleting, or limiting them). Please note that disabling cookies may cause parts of the Epic Services to not work properly and some features may become unavailable. You can appeal or request human review of decisions made by automated means as required by applicable law. If you're under the age of 18 and have an Epic account, you can request that we remove or anonymize certain content you provided on the Epic Services. Parents/guardians can adjust settings for their child's Epic account using Parental Controls . To submit a request, please contact us using the contact information listed in Section 12 (How Can You Contact Us?). We may ask for additional information to verify your identity before completing your request. Some parts of the world provide individuals with specific choices related to their information by right under applicable law. Please see Sections 10 (Additional Notice For Residents of Certain US States) and 11 (Additional Notice for Individuals Located in the European Economic Area, the United Kingdom, or Switzerland) for more information. 10. ADDITIONAL NOTICE FOR RESIDENTS OF CERTAIN US STATES A. For California Residents The California Consumer Privacy Act (CCPA) requires us to provide residents of California with information regarding their personal information in a different format. Terms used in this subsection are defined by the CCPA.

If you are a California resident, you have the right to:

REMOVED• know and access what personal information we collect about you, including the categories of personal information collected and sources, the business or commercial purposes for collection, the categories of third parties with whom we disclose personal information, and the specific pieces of personal information collected; • correct your personal information; and • deletion of your personal information.

ADDEDknow and access what personal information we collect about you, including the categories of personal information collected and sources, the business or commercial purposes for collection, the categories of third parties with whom we disclose personal information, and the specific pieces of personal information collected; correct your personal information; and deletion of your personal information.

We will delete your personal information, unless retention is necessary for operational or legal reasons, including to:

REMOVED• provide the Epic Services you requested, complete transactions, or perform our contract with you; • ensure the security or integrity of the Epic Services, or debug the Epic Services; • exercise legal rights on behalf of ourselves or others; • enable internal uses aligned with user expectations; or • comply with a legal obligation.

ADDEDprovide the Epic Services you requested, complete transactions, or perform our contract with you; ensure the security or integrity of the Epic Services, or debug the Epic Services; exercise legal rights on behalf of ourselves or others; enable internal uses aligned with user expectations; or comply with the California Electronic Communications Privacy Act, or another legal obligation.

We may also limit how we respond to your requests, including when necessary to:

REMOVED• handle legal claims; • comply with applicable laws or legal obligations; or • cooperate with law enforcement. As described in greater detail in "What Information Do We Collect?" section above, the specific information we collect from you typically depends on how you choose to interact with us on or through the Epic Services. In the past 12 months, we've collected the following categories of personal information: • identifiers (e.g., email address); • commercial information (e.g., entitlements or purchase history); • internet or other electronic network activity information (e.g., gameplay or website usage details); • audio, electronic, visual, or similar information (e.g., voice chat); • geolocation data (e.g., as may be derived from your IP address or included in your billing information); • characteristics of protected classifications under California or federal law (e.g., age); • personal information described in Section 1798.80(e) of the California Civil Code (e.g., name or credit or debit card information); • in some cases, sensitive personal information (e.g., account log-in credentials and, if you list, sell, or trade creative content in one of our marketplaces, government ID); and • inferences drawn from any of the above categories (e.g., the genres of games you may prefer to play based on your purchase history).

ADDEDhandle legal claims; comply with applicable laws or legal obligations; or cooperate with law enforcement. As described in greater detail in Section 3 (What Information Do We Collect and How?), the specific information we collect from you typically depends on how you choose to interact with us on the Epic Services. In the past 12 months, we've collected the following categories of personal information: identifiers (e.g., name, display name, account ID, device ID, IP address, phone number, or email address); commercial information (e.g., entitlements or purchase history); internet or other electronic network activity information (e.g., gameplay information or website usage); audio, electronic, visual, or similar information (e.g., voice chat or images of you); geolocation data (e.g., as may be derived from your IP address or included in your payment information); characteristics of protected classifications under California or federal law (e.g., age); personal information described in Section 1798.80(e) of the California Civil Code (e.g., name, signature, phone number, or credit or debit card information); in some cases, sensitive personal information (e.g., account log-in credentials and, if you list, sell, or trade creative content in one of our marketplaces, government ID); and inferences drawn from any of the above categories (e.g., the genres of games you may prefer to play based on your purchases or play history).

Epic does not use or disclose sensitive personal information for purposes other than those that are necessary to provide the Epic Services or permissible under the CCPA. Epic also does not sell or share the personal information it collects. This includes for users for whom we have actual knowledge are under 16.

REMOVEDFor more information on (1) the categories of sources from which your personal information is collected, please see "What Information Do We Collect?" section above; (2) the business or commercial purposes for collecting your personal information, including sensitive personal information, please see "How Do We Use Information?" section above; and (3) the categories of third parties to whom we disclose your personal information, please see "How Do We Share Information?" section above. For Other US State Residents Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, and Virginia have each enacted a comprehensive privacy law, providing residents of those states with certain rights to their personal data. Terms used in this subsection are defined by the applicable privacy law in your state of residence.

ADDEDShine the Light : We also do not disclose your personal information to third parties for their own direct marketing purposes unless you opt-in to that disclosure (as defined by California's Shine the Light Law). For more information on (1) the categories of sources from which your personal information is collected, please see Section 3 (What Information Do We Collect and How?); (2) the business or commercial purposes for collecting your personal information, including sensitive personal information, please see Section 4 (Why Do We Process Information?); and (3) the categories of third parties to whom we disclose your personal information, please see Section 5 (Who Do We Disclose Information To?). B. For Other US State Residents Certain US states, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have each enacted a comprehensive privacy law, which is in effect as of the date of this Policy. Other states may enact comprehensive privacy laws in the future. These laws require us to provide residents of those states with information regarding their personal data in a different format. Terms used in this subsection are defined by the applicable privacy law in your state of residence.

If you are a resident of those states, you have the right to:

REMOVED• know whether we are processing your personal data; • access and obtain a copy of your personal data; • correct your personal data (except for residents of Utah and Iowa); and • deletion of your personal data.

ADDEDknow whether we are processing your personal data; access and obtain a copy of your personal data; correct your personal data (except for residents of Iowa); and deletion of your personal data.

Certain legal obligations and operational needs may limit how we respond to your requests. These exceptions may include:

REMOVED• providing the Epic Services you request or performing our contracts; • conducting research to develop or improve the Epic Services; • identifying and fixing technical issues; • performing other internal operations consistent with user expectations; • preventing or responding to security incidents, fraud, identity theft, or other illegal or harmful activities; • handling legal claims; • complying with applicable laws or legal obligations; or • cooperating with law enforcement.

ADDEDproviding the Epic Services you request or performing our contracts; conducting research to develop or improve the Epic Services; identifying and fixing technical issues; performing other internal operations consistent with user expectations; preventing or responding to security incidents, fraud, identity theft, or other illegal or harmful activities; handling legal claims; complying with applicable laws or legal obligations; or cooperating with law enforcement.

Epic does not sell personal data it collects or process it for targeted advertising. Epic also does not profile its users through automated means to make decisions that have legal or similarly significant effects. This includes for users for whom we have actual knowledge are under 18.

REMOVEDFor more information on (1) the categories of personal data processed by us, please see "What Information Do We Collect?" section above; (2) our processing of sensitive data from a known child under the age of 13, please see "Children's Privacy" section above; (3) our purposes for processing personal data, please see "How Do We Use Information?" section above; and (4) the categories of third parties with whom we share personal data and the categories of personal data we shared, please see "How Do We Share Information?" section above. Exercising Your Privacy Rights To exercise your privacy rights, use one of the methods listed in the "Contact Us" section below. Only you (or an authorized representative on behalf of a California resident) may submit a verifiable request, which must include enough information for us to confirm your identity and understand the request. If you have an Epic Games account, we may ask you to log in to verify your identity. Authorized agents of California residents must include written permission signed by the resident, who may also need to verify their identity directly. Requests may be denied if we cannot verify your identity or authority. Appeals can be submitted using the same contact methods listed in the "Contact Us" section below.

ADDEDFor more information on (1) our processing of sensitive data from a known child under the age of 13, please see Section 2 (How Do We Process Children's Information?); (2) the categories of personal data processed by us, please see Section 3 (What Information Do We Collect and How?); (3) our purposes for processing personal data, please see Section 4 (Why Do We Process Information?); and (4) the categories of third parties with whom we disclose personal data and the categories of personal data we disclosed, please see Section 5 (Who Do We Disclose Information To?). C. Exercising Your Privacy Rights To exercise your privacy rights, please contact us using the contact information listed in Section 12 (How Can You Contact Us?). Only you (or an authorized representative on behalf of a California resident) may submit a verifiable request, which must include enough information for us to confirm your identity and understand the request. If you have an Epic account, we may ask you to log in to verify your identity. Authorized agents of California residents must include written permission signed by the resident, who may also need to verify their identity directly. Requests may be denied if we cannot verify your identity or authority. Appeals can be submitted using the same contact information listed in Section 12 (How Can You Contact Us?).

We will not discriminate against you for exercising any of your privacy rights under applicable law.

REMOVEDC. Residents Of The European Economic Area, The United Kingdom, And Switzerland If you're located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, you have certain rights regarding how your personal data is processed. Data Subject Rights You may have the right to access, correct, or delete personal data we have collected about you through the Epic Services. You may also have the right to a portable copy of the personal data you have provided, and to object to or restrict processing of your personal data, such as for direct marketing. If applicable, you can request human review or contest decisions made by automated means. Where you have provided your consent to our data processing, you have the right to withdraw consent. You also have the right to make a complaint against us by contacting your local supervisory authority for data protection (if one exists in your country). We would, however, appreciate the chance to address your concerns before you contact a data protection regulator, and ask that you direct your complaint to us first. Please see the "Contact Us" section below to learn more about reaching out to Epic with any relevant concerns you may have. You can find more details about your local Data Protection Authority as follows: • EEA: European Data Protection Authorities • UK: Information Commissioner's Office • Switzerland: Federal Data Protection and Information Commissioner Basis for Processing The legal bases we rely on to process your personal data depend on the Epic Services you use and how you interact with them. They primarily include: • Contractual Necessity : we process personal data to perform the Epic Services you requested under our Terms of Service or other similar contractual agreements with you. For example, we process personal data to set up and maintain your account; process your purchases; authenticate users; provide user-experience features (like saving your preferences); monitor and analyze the Epic Services; detect and prevent fraud, cheating, or other similar misuse; facilitate features like cross-progression that allow you to play a game on one platform and continue your progress on another, which may require us to share your information with third-party partners; and contact you about your account, transactions, or other updates. We also rely on performance of a contract to manage our relationship with you, which includes responding to your support requests or general inquiries, and notifying you about changes to our applicable terms or policies. • Legitimate Interests : we process personal data as needed for Epic's business purposes, as balanced against the potential impact on your privacy rights. This includes many common purposes that you'd reasonably expect, such as to: communicate with you, respond to your requests, or provide you with updates and information; better understand our users and their preferences; personalize your experience, save your preferences, authenticate our users, and provide similar user experience features; develop, deliver, and improve the Epic Services and other offerings (some of which may be offered in partnership with other parties); manage and customize advertisements or promotional offers; manage (in-game) purchases; secure and protect the Epic Services; supporting auditing, data analysis, and other legitimate business operations; prevent or moderate fraudulent, toxic, harmful, or illegal content or conduct that breaches our terms. To support these business purposes, we may build, improve, and use machine learning technologies to help identify harmful, toxic, or fraudulent content in our services. The content identified by these technologies may be subject to human review. Otherwise, if applicable, you may have the ability to request human review of automated decisions. • Legal Obligations : we process personal data when necessary to comply with legal obligations, such as responding to legitimate requests from law enforcement authorities or other government officials in accordance with relevant legal processes; to identify or moderate illegal content or conduct on the Epic Services; or processing date of birth to facilitate compliance with applicable youth protection laws. • Consent : we process personal data when you provide us with your consent to do so. You aren't required to provide consent if you do not want your personal data to be processed for the requested purposes, and you may withdraw your consent at any time. 11. CONTACT US If you have questions or concerns about the Epic Services (such as game-related issues, trouble accessing your Epic account, bugs or other technical problems, payment matters, or content and entitlement issues), please contact our Player Support teams. You can learn more about submitting support requests for products and services from: • Epic Games (like Fortnite) • Psyonix (such as Rocket League) • Life on Air (Postparty) • Mediatonic (including Fall Guys) If you want to learn more about our privacy practices or this policy, or exercise your data subject rights, please email [email protected] , [email protected] , or the appropriate contact information listed below for the entity responsible for providing the relevant Epic Services in your region. You can also contact us via postal mail (marked "Attn: Legal Department") to Epic Games, Inc., located at 620 Crossroads Blvd., Cary, NC 27518, USA. If you live outside of the United States, please see the additional contact information below related to the products or services you are using: If you are using the Epic Games Store: • Data Controller: Epic Games, Inc. • Address: 620 Crossroads Blvd., Cary, NC 27518, USA • Data Protection Officer: [email protected] • EU/UK Representative: Mishcon de Reya ( [email protected] ) If you are using any games provided by Epic Games, such as Fortnite, that link to this privacy policy: • Data Controller: Epic Games Entertainment International GmbH • Address: Platz 10, 6039 Root D4, Switzerland If you are using any other products or services provided by Epic Games, such as Unreal Engine, that link to this privacy policy: • Data Controller: Epic Games Commerce GmbH If you are using products or services provided by Mediatonic, such as Fall Guys, that link to this privacy policy: • Data Controller: Mediatonic Limited • Address: Octagon Point, 5 Cheapside, London, EC2V 6AA, United Kingdom • Contact: [email protected] If you are using products or services provided by Psyonix, such as Rocket League, that link to this privacy policy: • Data Controller: Psyonix LLC • Address: 401 A St. #4200, San Diego, CA 92101, USA If you are using KWS services provided by Kids Web Services Ltd: • Data Controller: Kids Web Services Ltd as a joint controller with Epic If you are using products or services provided by Life on Air, such as Postparty, that link to this privacy policy: • Data Controller: Life on Air, Inc. If you are using products or services provided by Aquiris, such as Horizon Chase 2, that link to this privacy policy: • Data Controller: Aquiris Games Studio LLC • Address: c/o IBCPA, 20801 Biscayne Blvd, Ste 403, Office 415, Aventura, Florida, 33180, USA • Data Protection Officer: [email protected] .

ADDED11. ADDITIONAL NOTICE FOR INDIVIDUALS LOCATED IN THE EUROPEAN ECONOMIC AREA, THE UNITED KINGDOM, OR SWITZERLAND The General Data Protection Regulation (GDPR), along with similar laws in the United Kingdom (UK) and Switzerland, requires us to provide individuals located in the European Economic Area (EEA), the UK, or Switzerland with information regarding their personal data in a different format. Terms used in this section are defined by the GDPR. If you are located in the EEA, the UK, or Switzerland, you have the right to: access your personal data; correct your personal data; deletion of your personal data; temporarily restrict our use of your personal data; object to some types of processing, including processing for direct marketing purposes and based on our legitimate interests; data portability, including receiving a copy of your personal data; and withdraw your consent, where our processing is based on consent (if you withdraw your consent, this does not affect the lawfulness of any processing based on your consent before it was withdrawn). We may ask for additional information to verify your identity before fulfilling a rights request. We may also limit our response in certain circumstances, including when: the request is manifestly unfounded or excessive; the request would adversely affect the rights and freedoms of others; there are overriding legitimate grounds for processing that overweigh your interests, rights, and freedoms; or the processing is necessary to establish, exercise, or defend our legal claims, perform a contract with you, or comply with our legal obligations. You also have the right to make a complaint with your local data protection supervisory authority (please see links below) or to contact us directly with any complaint (please see Section 12 (How Can You Contact Us?)). We would appreciate the chance to address your issues first. EEA: European Data Protection Authorities UK: Information Commissioner's Office Switzerland: Federal Data Protection and Information Commissioner The lawful bases we rely on to process your personal data depend on the Epic Services you use and how you interact with them. These lawful bases are: Contractual necessity: when we process your personal data to perform the Epic Services you requested under our Terms of Service or other similar contractual agreements with you. Legitimate interests: when we process your personal data to support Epic's business purposes, as balanced against the potential impact on your privacy rights. Legal obligations: when we process your personal data to comply with our legal obligations. Consent: when you give us your consent to process your personal data. You are not required to provide consent, and you may withdraw your consent at any time. For more information on how these lawful bases apply to different purposes of processing, please see Section 4 (Why Do We Process Information?). 12. HOW CAN YOU CONTACT US? A. Support Requests If you have questions or concerns about the Epic Services (e.g., issues related to a game, accessing your Epic account, bugs, payments, content, or entitlements), please contact the relevant support channel through the links provided below. • Fortnite • Rocket League • Fall Guys • Epic Games Store • Fab • Unreal Engine B. Privacy Requests If you want to learn more about our privacy practices or this Policy, or exercise your data subject rights, please email privacy@support.epicgames.com or dpo@support.epicgames.com. You can also contact us via email or postal mail (marked "Attn: Legal Department") using the contact information listed below for the entity responsible for providing the applicable Epic Services. • Fortnite : Epic Games, Inc. (for US residents) or Epic Games Entertainment International GmbH (for non-US residents) • Rocket League : Psyonix LLC • Fall Guys : Epic Games, Inc. • Horizon Chase 2 : Aquiris Game Studio LLC • Rock Band : Harmonix Music Systems, Inc. • Epic Games Store and Fab : Epic Games, Inc. (for US residents) or Epic Games Commerce GmbH (for non-US residents) • Unreal Engine and MetaHuman : Epic Games, Inc. (for US residents) or Epic Games Commerce GmbH (for non-US residents) • Unreal Editor For Fortnite : Epic Games, Inc. (for US residents) or Epic Games Entertainment International GmbH (for non-US residents) • Postparty : Life on Air Inc. • Our websites and their respective subdomains that link to this Policy : Epic Games, Inc. • Other Epic Services : Please see the relevant terms and conditions for the licensing entity listed in your region Contact Information Aquiris Game Studio LLC Address: C/O C T Corporation System, 1200 South Pine Island Road, Plantation, Florida 33324, USA EU/UK Representative: Mishcon de Reya (representative@mishcon.com) Brazil Data Protection Officer: Henrique Fabretti of Opice Blum, Bruno Advogados Associados (dpo@support.epicgames.com) Epic Games Commerce GmbH Address: Platz 10, 6039 Root D4, Switzerland EU/UK Data Protection Officer: dpo@support.epicgames.com Epic Games Entertainment International GmbH Epic Games, Inc. Address: 620 Crossroads Boulevard, Cary, North Carolina 27518, USA Harmonix Music Systems, Inc. Address: 40 Broad Street, Floor 7, Boston, Massachusetts 02109, USA Contact: privacy@harmonixmusic.com Life on Air Inc. Contact: privacy@support.epicgames.com Psyonix LLC Address: 401 West A. Street, Suite 2400, San Diego, California 92101, USA