Data and privacy · Consumer privacy and consent
Because a large number of our DAUs are historically under 13, we face significant risks under the Children's Online Privacy Protection Act ('COPPA'), Article 8 of the GDPR, and similar regulations. COPPA imposes requirements on operators of websites or online services directed to children under 13 years of age to obtain verifiable parental consent.
Data and privacy · Regulatory investigations and penalties
Allegations of noncompliance with the DSA can and have led to investigations and other proceedings, such as the Roblox investigation announced in January 2026 by the Netherlands. The DSA imposes significant penalties for non-compliance including fines of up to 6% of annual global revenues.
Tax and financial reporting · Tax compliance and changes in tax law
Changes in tax laws and unclaimed property audits by governmental authorities could have a material adverse effect on our business, cash flow, results of operations, or financial conditions. We are subject to tax laws, regulations, and policies of several taxing jurisdictions.
Tax and financial reporting · Transfer pricing and international tax
Double taxation of our international earnings and potentially adverse tax consequences due to changes in the tax laws of the U.S. or the foreign jurisdictions in which we operate.
Legal and litigation · Product liability and warranty claims
We may incur liability as a result of content published using our Platform or as a result of claims related to content generated by our creators and users, including copyright infringement, and legislation regulating content on our Platform may require us to change our Platform or business practices.
Legal and litigation · Litigation and legal proceedings
We are subject to numerous legal proceedings and expect to continue to be the target of litigation and regulatory scrutiny globally. The legal proceedings have involved or could involve claims by private parties as well as regulators such as state Attorneys General that arise in the ordinary course of business, including intellectual property, privacy, biometrics, cybersecurity, data protection, consumer protection, product liability, social media and video game addiction.