Does Pokémon GO Lure You in With A Dangerous Privacy Policy and Terms of Use?

by Jaburg Wilk

Jaburg Wilk

For years, we have been lamenting that our young people spend too much  time indoors playing computer games and not enough time outside or connecting with others.  Yet, those same critics now condemn young Pokémon Go players who venture out on Pokémon hunts for a myriad of perceived sins including inattentiveness and irresponsible behavior. Critics also revel in slamming Niantic, Inc., the maker of Pokémon GO, for creating another game purportedly aimed at tracking its players' every move and profiting from the data created by each player.

After stripping away the media hype, what's left is a genuinely fun game that encourages its players to trek around that has a Terms of Use and a Privacy Policy that are quite typical of games of its  type  and  no  more  onerous  than  any  of  the  popular  social  media  sites. So, what provisions are in the Terms of Use and Privacy Policy of Pokémon GO?   

Terms of Use

Pokémon GO's Terms of Use  (found at and last updated on 07/01/16) are pretty standard.  Arguably, the most privacy concerning provision found here is Niantic's requirement that users sign up with an existing Google, Facebook, or other "pre-existing third-party accounts" that Niantic allows. Niantic creates each user's account "by extracting from your ... account certain personal information (such as your email address) "that the user's privacy settings permit. This basic account information grab is no more intrusive than what many other mobile apps require for use.

For parents and others worried about children signing up and playing the game, Pokémon Go requires that the parents of children under 13 "register with The Pokémon Company International, Inc. "before an underage child's account can be created. This is pretty standard and is designed to comply with the parental consent  requirements  found  in  the federal  Children's Online Privacy Protection Act (COPPA) and certain European data protection laws.

Privacy Policy

Niantic's Privacy Policy (found at and  last updated  on  07/01/16)  contains  certain  provisions  that  some  in  the media  and elsewhere  have bemoaned but which are somewhat typical of mobile games these days. 

First, like many other apps, Niantic  collects  personally identifying  information  or "PII" from each user which "can be used to identify or recognize you (or your authorized child)." Like in the Terms of Use, the Privacy Policy specifies that collected PII will include things such as a user's "Google email address ...and/or your Facebook registered email address. "A user's privacy settings with those platforms determines what information Niantic  will  gain  access  to. Niantic also collects other information such as user names and messages sent to other Pokémon GO players.

Second, like nearly every website online, Niantic uses "automated data collection tools such as Cookies" to tell when and how users are using Pokémon GO.  Niantic's servers also automatically record "Log Data" which could include "a User's  Internet  Protocol  (IP)  address, user agent, browser type, operating system" and other information.  All of this data, the Privacy Policy states, is collected primarily so Niantic can provide and improve its services. With mobile devices, Niantic collects information such as " a device identifier, user settings, and the operating system of your (or your authorized child's) device, as well as information about your use of our services while using the mobile device." Again, none of these types of information grabs are anything new or more intrusive than most other apps or mobile games these days. 

Third, Niantic unsurprisingly collects location information (Pokémon GO is after all, an augmented reality game which relies on and is primarily about player location). Niantic collects and stores each user's location information using each  device's  cellular,  Wi-Fi,  and/or  GPS signals. When Pokémon GO players "take certain actions during gameplay, [their] user name and location may be shared through the App with other users who are playing the game." Here too, Niantic's ability to know a user's location is no more intrusive than any other mobile app or game a user gives permission to track them through.

Next is the provision that's seemingly attracted the most attention in the  media  after location data – the sharing of user data with third parties. The Privacy Policy states that Niantic "may share aggregated information and non-identifying information with third parties for research and analysis, demographic profiling, and  other  similar  purposes." Niantic admits that the information collected from users,  including  PII, "is  considered  to  be  a  business  asset." This should not surprise anyone.  Like most mobile app developers, Niantic is a business that wants to generate revenue and be profitable. As such, no one should be surprised if Niantic shares or sells its user data  to  companies  like  Starbucks,  McDonalds,  or  any  other  businesses  that  will  pay  to market and sell products and services to mobile game users, based on their location or otherwise. 

Overall, there is nothing in either the Terms of Use or Privacy Policy that most Pokémon GO players haven't already agreed to many times over through the use of websites, other mobile apps and mobile games. 
In  2016,  it  would  be  naïve  to  expect Niantic  or  any other  mobile  app provider not to  provide  or  sell  anonymized  user  data to third  parties  as marketing  demographic information or for other purposes.  There may not be much privacy left in the digital age, but if any  Pokémon  GO  users  or  potential  users  don't  like  Niantic's Terms  of  Use  or  Privacy  Policy, there's  still  the  choice  of  simply  not  downloading  or playing  the  game.  While players may be lured in by the fun of playing Pokémon GO, the only legal lures are standard ones.

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Jaburg Wilk | Attorney Advertising

Written by:

Jaburg Wilk

Jaburg Wilk on:

Readers' Choice 2017
Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
Sign up using*

Already signed up? Log in here

*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
Privacy Policy (Updated: October 8, 2015):

JD Supra provides users with access to its legal industry publishing services (the "Service") through its website (the "Website") as well as through other sources. Our policies with regard to data collection and use of personal information of users of the Service, regardless of the manner in which users access the Service, and visitors to the Website are set forth in this statement ("Policy"). By using the Service, you signify your acceptance of this Policy.

Information Collection and Use by JD Supra

JD Supra collects users' names, companies, titles, e-mail address and industry. JD Supra also tracks the pages that users visit, logs IP addresses and aggregates non-personally identifiable user data and browser type. This data is gathered using cookies and other technologies.

The information and data collected is used to authenticate users and to send notifications relating to the Service, including email alerts to which users have subscribed; to manage the Service and Website, to improve the Service and to customize the user's experience. This information is also provided to the authors of the content to give them insight into their readership and help them to improve their content, so that it is most useful for our users.

JD Supra does not sell, rent or otherwise provide your details to third parties, other than to the authors of the content on JD Supra.

If you prefer not to enable cookies, you may change your browser settings to disable cookies; however, please note that rejecting cookies while visiting the Website may result in certain parts of the Website not operating correctly or as efficiently as if cookies were allowed.

Email Choice/Opt-out

Users who opt in to receive emails may choose to no longer receive e-mail updates and newsletters by selecting the "opt-out of future email" option in the email they receive from JD Supra or in their JD Supra account management screen.


JD Supra takes reasonable precautions to insure that user information is kept private. We restrict access to user information to those individuals who reasonably need access to perform their job functions, such as our third party email service, customer service personnel and technical staff. However, please note that no method of transmitting or storing data is completely secure and we cannot guarantee the security of user information. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time.

If you have reason to believe that your interaction with us is no longer secure, you must immediately notify us of the problem by contacting us at In the unlikely event that we believe that the security of your user information in our possession or control may have been compromised, we may seek to notify you of that development and, if so, will endeavor to do so as promptly as practicable under the circumstances.

Sharing and Disclosure of Information JD Supra Collects

Except as otherwise described in this privacy statement, JD Supra will not disclose personal information to any third party unless we believe that disclosure is necessary to: (1) comply with applicable laws; (2) respond to governmental inquiries or requests; (3) comply with valid legal process; (4) protect the rights, privacy, safety or property of JD Supra, users of the Service, Website visitors or the public; (5) permit us to pursue available remedies or limit the damages that we may sustain; and (6) enforce our Terms & Conditions of Use.

In the event there is a change in the corporate structure of JD Supra such as, but not limited to, merger, consolidation, sale, liquidation or transfer of substantial assets, JD Supra may, in its sole discretion, transfer, sell or assign information collected on and through the Service to one or more affiliated or unaffiliated third parties.

Links to Other Websites

This Website and the Service may contain links to other websites. The operator of such other websites may collect information about you, including through cookies or other technologies. If you are using the Service through the Website and link to another site, you will leave the Website and this Policy will not apply to your use of and activity on those other sites. We encourage you to read the legal notices posted on those sites, including their privacy policies. We shall have no responsibility or liability for your visitation to, and the data collection and use practices of, such other sites. This Policy applies solely to the information collected in connection with your use of this Website and does not apply to any practices conducted offline or in connection with any other websites.

Changes in Our Privacy Policy

We reserve the right to change this Policy at any time. Please refer to the date at the top of this page to determine when this Policy was last revised. Any changes to our privacy policy will become effective upon posting of the revised policy on the Website. By continuing to use the Service or Website following such changes, you will be deemed to have agreed to such changes. If you do not agree with the terms of this Policy, as it may be amended from time to time, in whole or part, please do not continue using the Service or the Website.

Contacting JD Supra

If you have any questions about this privacy statement, the practices of this site, your dealings with this Web site, or if you would like to change any of the information you have provided to us, please contact us at:

- hide
*With LinkedIn, you don't need to create a separate login to manage your free JD Supra account, and we can make suggestions based on your needs and interests. We will not post anything on LinkedIn in your name. Or, sign up using your email address.