cfx.re
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
Rockstar/Take-Two collect broad data, sell it for ads with an opt-out, and bind U.S.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account IDs, gameplay, ads IDs, browsing, chat audio, photos, and sometimes precise location.
Read the exact line
Privacy policy
“Identifiers / Contact Information: Name, user name, gamertag, postal and email address, phone number, unique IDs, mobile device ID, platform ID, gaming service ID, advertising ID (IDFA, Android ID), and IP address”
Training
They run the games, improve products, and show targeted ads for themselves and partners.
Read the exact line
Privacy policy
“Provide you and other users with customized content, targeted offers, and targeted advertising on the Services, via email and text message, or on other sites, mobile applications, or social media”
Sharing
Vendors, Take-Two companies, ad partners, and other players on public boards and leaderboards.
Read the exact line
Privacy policy
“In the last 12 months, Take-Two has sold and/or shared unique identifiers, IP address, as well as Internet/Electronic Activity and Profile Inferences with third-party advertising providers”
Kept
Kept while your account is active, then longer if they expect you to come back or for legal reasons.
Read the exact line
Privacy policy
“We'll keep your information for as long as necessary to provide you with the Services, fulfil our legal obligations, and/or exercise, defend or establish our rights.”
Controls
You can request access or deletion and opt out of sale/sharing and targeted ads.
Read the exact line
Privacy policy
“To opt out of targeted advertising, please click on the Do Not Sell or Share My Personal Information on our site footer (and available here) and follow the instructions on that page.”
Fine print
U.S. they can change the policy and shut marketplaces without notice.
No exact line could be verified.
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Opt out of sale/sharing and targeted ads
Do Not Sell or Share My Personal Information in the site footer
Request access or deletion of your data
https://www.take2games.com/data-request or privacypolicy@take2games.com
Turn on Global Privacy Control
Browser GPC setting; they honor it per device/browser
Manage account and marketing settings
Account, communications, and privacy settings in your Services account; unsubscribe link in emails
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They admit they sold or shared IDs and activity data so others can target ads at you.
Read the exact line
Privacy policy
“In the last 12 months, Take-Two has sold and/or shared unique identifiers, IP address, as well as Internet/Electronic Activity and Profile Inferences with third-party advertising providers”
For example, an ad network could use your IP and game activity to show you ads on other sites.
They can collect chat contents and, if you allow it, exact location, plus passwords.
Read the exact line
Privacy policy
“Sensitive Information: Precise location information (if you allow the Services to collect your location), account credentials (user name and password), contents of communications via chat features and functionality”
For example, in-game voice or text chat can be stored as sensitive information.
Trackers can send how you browse and what you watch to ad companies.
Read the exact line
Privacy policy
“These technologies may transmit personal information (e.g., how you navigate specific pages on our website, which links you click, and similar information) and video viewing information to our advertising partners and other third parties.”
For example, clicking a promo on the forum can be reported to an ad network.
Rockstar claims ownership of game-based mods and servers except rights you already have in your own work.
Read the exact line
Terms of service
“you acknowledge and agree that, as between you and Rockstar, we own all copyrights, interest, and title to the Covered Games, the elements thereof, and any derivative works based thereon including, without limitation, Creator Content”
For example, a custom map built on GTA assets may be treated as their derivative work.
If an update breaks your server or paid content, they say they do not have to refund you.
Read the exact line
Terms of service
“Rockstar is not or responsible to you for any perceived loss or damages that may result from such changes or Updates including, without limitation, the loss of or failure to receive a refund of any money you may have spent”
For example, a game patch could kill a paid vehicle pack with no money back.
They can shut the marketplace or features anytime without warning.
Read the exact line
Terms of service
“Rockstar may temporarily or permanently cease providing Marketplaces (or any features thereof) to users generally at its sole discretion, without prior notice.”
For example, a store you rely on for server assets could disappear overnight.
If they change the privacy rules, keeping using the service can count as agreeing.
Read the exact line
Privacy policy
“As permitted by applicable law, your continued use of the Services means that you accept these changes.”
For example, a new ad-sharing practice could apply after you next log in.
A GPC setting in your browser can stop some sale/sharing of data on that device.
Read the exact line
Privacy policy
“We recognize and honor Global Privacy Control (GPC) browser opt-out signals.”
For example, turning on GPC in Firefox can block sale of that browser’s data.
They say they are not aimed at kids under 13 and will delete if they find that data.
Read the exact line
Privacy policy
“Generally, we direct our Services to a general audience and we do not knowingly collect personal information from children under 13 years old”
For example, a 12-year-old account they discover should be deleted.
Words to know
Legal words from the lines above, in plain English.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
- profiling
- Building a picture of who you are, what you like and what you might do next from your data. For example, an app may guess your income, health or politics from what you watch and tap.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- opt out
- Something is on by default and stays on until you find the setting and turn it off. For example, your chats may be used for training unless you go into settings and switch it off.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- sensitive personal information
- Data that could hurt you if exposed, like health, religion, sexuality, race, exact location or bank details. For example, telling a chatbot about a medical condition creates sensitive data that some laws protect more strictly.
- precise geolocation
- Your exact position, usually from GPS, often accurate to within a few metres. For example, an app can tell not just your city but which building you are in right now.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
How we got here · grade F · score 33/100 · 15 of 15 policy answers backed by a verified quote · 2 not stated
What does the app collect beyond what it needs to work?
They collect far more than account and chat: ads IDs, browsing, gameplay, inferences, photos, audio, and optional precise location.
Does it record your voice, face or body, and what happens to that?
They collect audio from chat and gameplay recordings and photos/avatars, listed as account-related information, not as session-only.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
Third-party ad partners get identifiers, activity, and profile inferences for targeted ads.
Do they sell or share your data, and can you opt out?
They say they have sold or shared data with ad providers and offer a Do Not Sell or Share opt-out and GPC.
What rights do they take over what you type and what the AI makes?
Rockstar claims ownership of the games and derivative Creator Content, while you keep only separate IP you already hold.
How long do they keep your data after you delete it, and can you delete it in the app?
Deletion is by contacting them; they keep data while the account is active and may keep some after for legal and security reasons.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They build profile inferences for personalization; the policy does not describe viewing or turning that profile off.
Do they commit to basic security, and have they leaked data?
They say they follow industry standards and safeguards but do not guarantee security and do not describe audits.
Is there a real age gate, and are teens protected?
They say they do not knowingly collect from children under 13 and may use an age gate on some services.
Will they tell you when the rules change, and is the policy specific?
The privacy policy is dated March 2026; they say they will give notice of material changes, but continued use can mean you accept.
Can they close your account without warning, and can you get your data out first?
They can take adverse action and shut marketplaces or features without prior notice, with no export promise in these docs.
If something goes wrong, who pays?
Creator services are subject to Rockstar TOS warranty disclaimers and liability limits, and they disclaim refunds and damages from updates.
Do subscriptions renew on their own, and can you get a refund?
Marketplace items can be sold on subscription; they say they are not responsible if you do not get a refund after updates or bans.
The privacy policy is 4,813 words at a college graduate level (Flesch reading ease 35.7); the terms are 3,493 words at a college graduate level.
