Roblox, the popular gaming platform favored by children and teens, is embroiled in a class action lawsuit alleging that it has been secretly tracking and harvesting data from its young users without proper consent. The lawsuit, filed in a California federal court by plaintiffs Michael and Salena Garcia, claims the company has been covertly monitoring players through hidden tracking tools, according to the 45-page complaint.
The accusation centers around Roblox’s alleged collection of various types of data, including keystrokes, chat messages, and mouse activity, along with unique identifiers that enable the company to create detailed behavioral profiles of its players. These profiles, as per the complaint, are purportedly used for targeted advertising purposes, raising serious concerns about user privacy.
In a striking assertion, the lawsuit suggests that Roblox’s data collection begins the moment a user visits the site or launches the app, before any account login or consent is obtained. This continual tracking spans across multiple platforms, including web, iOS, and Android devices, utilizing fingerprinting techniques to retain persistent identifiers.
The lawsuit highlights a growing public concern regarding how companies handle data involving minors, particularly under federal laws such as the Children’s Online Privacy Protection Act (COPPA), which mandates that companies obtain verifiable parental consent before collecting personal data from children under 13. The plaintiffs argue that Roblox has circumvented these regulations through its undisclosed tracking methods.
Experts in mobile security, such as Kern Smith from Zimperium, have noted the lack of emphasis on mobile security in discussions about child safety online. Smith warns that popular apps can become targets for attackers, leading to data breaches that may expose sensitive information. He stresses the importance for parents to remain vigilant regarding both the content of apps and the security of the devices their children use.
As the case progresses, it could result in significant repercussions for Roblox, including potential financial penalties and increased scrutiny over its data handling practices. Parents are encouraged to utilize tools that provide real-time threat detection to protect against unauthorized data collection.
As of now, Roblox Corporation has not publicly responded to the lawsuit, and the case remains in its early stages.