Do we need to disclose Epic Online Services in our privacy policy?

Yes. Epic Online Services processes personal data including account identity, friends lists, achievements, voice communications, and anti-cheat telemetry. Under GDPR and CCPA, you must disclose any service that collects, processes, or shares user data. You must identify Epic Games Inc. as the data processor and explain what data flows to their systems.

What data does Epic Online Services collect?

Epic Online Services collects Epic Account identity information, cross-platform friends and presence data, player achievements and statistics, voice chat communications, and anti-cheat system telemetry. Note that voice chat may constitute biometric data under GDPR in certain jurisdictions. Easy Anti-Cheat, Epic's anti-cheat component, may collect kernel-level system data for security analysis.

Does Epic Online Services require a cookie consent banner?

No documented cookies are used by Epic Online Services itself. However, if you embed Epic Games' authentication or other services on your website, you should audit whether Epic's domains set cookies. Review Epic Games' current cookie practices at https://www.epicgames.com/site/en-US/privacypolicy to ensure compliance with your banner configuration.

Who processes data from Epic Online Services and where?

Epic Games Inc., headquartered in the United States, is the primary data processor. Data transfers to US servers; users in the EU or other regions should be informed of international data transfer mechanisms (Standard Contractual Clauses or adequacy decisions). Review Epic's processor terms at https://www.epicgames.com/site/en-US/privacypolicy for current transfer safeguards.

Gaming

Privacy policy clauses for Epic Online Services

Epic Online Services is a cross-platform gaming infrastructure by Epic Games that enables multiplayer connectivity, social features, and anti-cheat protection across devices. Websites and games integrate it to provide unified accounts, friend systems, voice chat, and gameplay security.

Scan my site free →Copy sample clause ↓

Free scan · No signup · Results in 60 seconds

What data Epic Online Services collects

Your privacy policy must disclose each of the following data types when you use Epic Online Services.

Epic Account identity

Cross-platform friends and presence

Achievements and stats

Voice chat data

Anti-cheat telemetry

When does Epic Online Services trigger privacy obligations?

Installation & Immediate Data Flow

The moment you integrate Epic Online Services into your game or app, you begin collecting and transmitting Epic Account identity data, cross-platform friend lists, presence status, achievement records, and anti-cheat telemetry to Epic Games Inc. (United States). Voice chat integration adds biometric data (voice) in jurisdictions recognizing audio as biometric under GDPR Article 4(14) or similar regional definitions.

Privacy policy clauses for Epic Online Services

What data Epic Online Services collects

When does Epic Online Services trigger privacy obligations?

Installation & Immediate Data Flow

Regulatory Triggers

First Concrete Step

Where data goes

Common compliance pitfalls

Pitfall 1: Failing to Disclose Anti-Cheat Kernel-Level Collection

Pitfall 2: Missing the DPA or Signing Epic's Terms Without Legal Review

Pitfall 3: Conflating Presence and Friend Data as "Engagement Analytics"

Legal note

Sample privacy policy clause

What regulators look for

Primary Audit Focus: Data Processing Agreement & Kernel-Level Collection

Specific Enforcement Pattern

Secondary Focus: Children & Consent

Practical Red Flag

Frequently asked questions

Do we need to disclose Epic Online Services in our privacy policy?

What data does Epic Online Services collect?

Does Epic Online Services require a cookie consent banner?

Who processes data from Epic Online Services and where?

Don't ship without Bandit.