Privacy & Cookie Policy Addendum – Battlefield “Destruction Receipt” Campaign

1. Purpose & Scope

This Addendum supplements Electronic Arts’ Privacy & Cookie Policy dated June 23, 2025 (“Main Policy”) and applies only to the standalone microsite supporting the Battlefield beta “Destruction Receipt” community campaign (“Microsite” or “Site”). It does not modify EA’s general data-handling practices.

• Campaign-specific coverage: This document explains what data the Microsite collects, how it is used, shared, and retained. It does not apply to gameplay data within Battlefield titles or other EA Services.
• No contest or sweepstakes: The community reward (an in-game skin) is granted to all beta participants if the collective destruction goal is met. There is no element of chance or competition.
• Policy hierarchy: If this Addendum conflicts with the Main Policy, the Main Policy controls.
• Reference to Main Policy: Terms not defined here have the meanings assigned in the Main Policy. You should read both policies to fully understand EA’s data practices for this campaign.

2. Key Definitions

To improve clarity, here are brief definitions of terms used in this Addendum:

• Campaign Hashtag: The official hashtag for this campaign, such as #BF6Receipts, including localized versions.
• Microsite or Site: A standalone website hosted by EA for this campaign, separate from Battlefield game clients or EA.com.
• Public Content: User-generated videos, captions, and related metadata that are publicly posted on platforms like Instagram or X using the Campaign Hashtag.
• Receipt: A visual summary showing the amount and type of in-game destruction detected in a user’s Public Content.
• Destruction Analytics: Automated systems that analyze Public Content to detect and summarize destruction events.
• Username / Handle: A public social-media account name (e.g., @username123) used to search for a Receipt.
• We / Our / EA: Electronic Arts Inc. and its affiliates, acting as the data controller.
• You / Your: Any visitor to the Microsite, including participants who search for Receipts.

3. Data We Collect

In addition to the general information collected under Sections 1(A)–1(C) of EA’s Main Policy (like browser and device data), this Microsite collects the following additional information for this campaign:

• Public Content: Publicly posted videos that use the Campaign Hashtag, including associated captions, hashtags, and engagement metrics (such as likes and views).
• Usernames / Handles: Public account names found in video metadata, used to retrieve Receipts.
• Video Metadata: Platform name, video ID or URL, upload timestamp, duration, resolution, and basic engagement stats.
• Destruction Analytics Output: Data identifying the type and estimated value of destruction shown, and the generated Receipt visual.
• Cookies & Tracking Technologies: Google Analytics cookies, social-media pixels, and EA’s necessary cookies (see Section 9).
• Optional Contact Information: Only collected if you voluntarily provide it during privacy requests (e.g., takedown, access).

We do not intentionally collect EA Account credentials, purchase history, precise geolocation, biometric identifiers, sensitive personal data, or content involving children under 13. Any such content is filtered and discarded before processing (see Section 6).

4. How & Why We Use Your Data

EA processes your data on the Microsite for the following campaign-specific reasons:

• To create your Destruction Receipt: EA software scans public videos tagged with the Campaign Hashtag to detect destruction events like explosions or collapsing structures. It then generates a short visual summary (Receipt) that users can share if they wish.
• To show the Receipt when searched: When someone enters a public username (e.g., @Username123) into the search tool, the system retrieves the corresponding Receipt if one exists. This does not require an EA Account.
• To calculate campaign-wide totals: EA aggregates the destruction data from all qualifying videos to determine whether the community has reached the goal needed to unlock the in-game skin for all beta participants.
• To understand campaign engagement: With your consent (via cookie banner), EA uses Google Analytics and social-media pixels to measure traffic, clicks, and other anonymous usage stats.
• To enforce content rules and protect children: EA uses automated filters and, when necessary, human moderation to exclude videos that include children under 13 or violate EA content guidelines.
• To prevent abuse and spam: System logs help detect and block bots or tampering attempts that could distort destruction totals.
• To respond to privacy requests: If you request a video removal or want to exercise your privacy rights, we use your contact details only to fulfill the request, then delete them when it’s resolved.
• Automated processing disclosure: Receipt creation is automated, but it does not produce legal or similarly significant effects.

EA does not:

• Connect Receipts to your Battlefield gameplay or EA Account.
• Sell, trade, or rent your personal data to marketers.
• Use your videos for personalized advertising (aside from aggregated campaign metrics, if you consent).

5. Legal Grounds & Your Privacy Rights

Depending on where you live, EA relies on different legal bases to collect and use Public Content for this campaign. In all cases, you have rights regarding your data.

• In the European Union, UK, Switzerland: EA relies on “legitimate interest.” If you publicly tag content with #BF6Receipts, you expect others (including EA) to see and engage with it. You have the right to access, correct, or request deletion of your data and can object to further processing. You can also manage cookie preferences via the banner.
• In the United States (California, Virginia, etc.): EA relies on legitimate interest and your choices regarding cookies and marketing pixels. You can opt out of “sale” or “sharing” via the “Do Not Sell/Share” link. You may access, delete, or correct your data and are protected against discrimination for using your rights.
• In Canada (including Quebec): EA processes public content based on legitimate interest. Cookie use is based on consent, which can be withdrawn. You have access and deletion rights.
• In Brazil (LGPD): EA uses a combination of legitimate interest and cookie consent. You may request access, deletion, correction, portability, or review of automated processing.
• In Mexico: Reuse of public data is permitted; cookies require consent. You may access, rectify, cancel, or oppose data use (ARCO rights).
• In Japan (APPI): EA relies on legitimate interest and cookie consent. You can request access, correction, or deletion of your data, and opt out of cookies.
• In China (PIPL): Public posts are treated as personal information. EA uses your consent (via cookie banner) and legitimate interest (hashtag use). You may request access, deletion, correction, or limitation of data use.

To exercise your rights:

Visit EA’s My Privacy Rights portal or email bf6receipts@ea.com. If your request involves a social-media video, EA will ask you to confirm ownership (e.g., by sending a DM from that account). We aim to respond within 30 days or as required by law.

6. Children & Minor Safety

The Battlefield franchise is aimed at a mature audience (typically 17+). The campaign and Microsite are not intended for use by children. EA does not knowingly collect content from anyone under the age of 16.

Here’s how we protect minors:

• Content filters: Automated systems scan videos for children’s faces or child-focused content. Videos that appear to include children are blocked from analysis.
• Gameplay-only rule: The system verifies that uploads include sufficient Battlefield gameplay. Clips showing only face-cams or home settings are excluded.
• Human moderation: Moderation staff manually review flagged videos and those the system cannot classify.
• Receipt control: If a video is rejected for child safety, no Receipt is generated. Searching that username will return “No results.”
• Takedown option: Parents or guardians can contact EA to request removal of any content. EA will verify control of the account and delete any related data.
• Marketing controls: Marketing cookies and pixels are disabled by default. If a visitor appears under 13, no consent option is shown.

If you believe EA has mistakenly collected a child’s content, please contact us immediately. We will investigate and remove any such content promptly.

7. Data Retention

We only keep campaign data as long as needed for the event, unless legal or security exceptions apply.

• Scraped videos and thumbnails are retained for up to 12 months after the campaign ends, then securely deleted.
• Receipts and destruction totals are also kept for up to 12 months. After that, receipts are deleted and totals are anonymized.
• Cookies and pixels follow EA’s general cookie retention policy, typically no longer than 13 months.
• Takedown and privacy request data is retained only until the request is fulfilled—usually within 30 days.
• De-identified, aggregate stats may be retained indefinitely to improve future campaigns.

Legal or regulatory demands may require us to keep specific records longer. See Section 3 of EA’s Main Policy for general retention practices.

8. Who Sees Your Data

We keep data access limited to trusted parties and only for the purposes listed above.

• EA campaign teams and agency partners can access scraped videos, usernames, Receipts, and campaign totals to maintain the Site, debug issues, and track progress.
• Microsoft Azure hosts the Microsite and stores videos. Azure staff can only access data as needed to ensure secure server operations.
• Analytics and marketing partners like Google Analytics receive anonymous usage metrics and cookie IDs—only if you consent.
• Social-media platforms (e.g., Instagram, X) retain control over the original posts you shared. EA’s copies do not override their data policies.
• Legal or security authorities may receive data only if required by law or investigation.

EA does not share data with outside advertisers, nor do we associate Receipts with EA gameplay profiles or Battlefield accounts.

9. Cookies, Pixels, and Your Choices

The Microsite uses cookies and tracking technologies. You control what gets activated.

• Necessary cookies are always on and required to make the Site work (e.g., for search, loading Receipts, or basic spam protection).
• Analytics cookies track visits and button clicks via tools like Google Analytics. These are only used if you opt in.
• Marketing cookies from platforms like Instagram or Meta help EA understand hashtag reach. These only activate with your consent. Enabling these pixels constitutes “sharing” personal information under the California Consumer Privacy Act (CPRA).

On your first visit, you’ll see a cookie banner:

• [Accept All]
• [Reject All]
• [Customize Settings]

You can reopen cookie settings at any time by clicking Your Privacy Choices in the Site footer.

If your browser supports the Global Privacy Control (GPC) signal, EA treats this as a rejection of Analytics and Marketing cookies—no extra steps required.

Regional requirements:

• In the EU, UK, Switzerland, Brazil, Quebec, Japan, and China, non-essential cookies are blocked by default until you make a choice.
• In the U.S., California visitors see a **Do Not Sell/Share** button in the banner that disables Marketing cookies immediately; the link also remains in the footer for other states.
• In other countries, the banner still allows full cookie control.

See EA’s Main Policy for a complete overview of tracking technologies.

10. Your Privacy Rights & Takedown Requests

You can review, correct, or remove data collected for this campaign by contacting EA.

• To access your info, email bf6receipts@ea.com with “Battlefield Destruction – Data Access” in the subject.
• To request deletion, email the same address and ask to remove your video or Receipt.
• To correct errors, contact EA via the Privacy Portal or email and explain the issue.
• To opt out of data use, click “Do Not Sell/Share” in the footer or reject non-essential cookies. You can also ask to exclude your content from future scraping.

EA verifies social account ownership through a one-time code. You’ll be asked to post or DM the code from the relevant social account. It is deleted once verification is complete.

These rights are free to exercise. EA does not penalize users for submitting privacy requests.

11. How We Protect Your Data

EA applies the same security standards used across all its services.

• Encryption: All video and Receipt data is transmitted via HTTPS and stored using strong encryption on Microsoft Azure.
• Access controls: Only approved EA teams and Azure engineers (under NDA) can access the campaign database, with secure login and multi-factor authentication.
• Monitoring: EA uses 24/7 automated tools to detect suspicious activity or tampering.
• Penetration testing: Security audits are performed during the campaign to identify and fix vulnerabilities.
• Certified infrastructure: Azure complies with ISO 27001, SOC 2, and PCI-DSS. EA holds certifications under the EU-U.S. Data Privacy Framework and APEC CBPR.
• International transfers: Battlefield Destruction Receipt data may be stored on Microsoft Azure servers in the United States. EA safeguards these transfers under the EU-U.S. Data Privacy Framework (DPF) and the European Commission–approved Standard Contractual Clauses (SCCs); the UK Addendum and SCCs apply for UK data, and equivalent contractual safeguards cover transfers from other regions.

If a breach occurs, EA will notify affected users and regulators as required by law.

12. Changes to This Addendum

We may update this Addendum if campaign practices, legal requirements, or EA’s data-handling policies change.

• The “Last Updated” date at the top reflects the most recent revision.
• Minor updates (e.g., cookie names) will take effect when posted.
• Major changes (e.g., new data types or retention periods) will be communicated with at least 14 days’ notice via a banner, pop-up, or email (if available).
• Continued use of the Microsite means you accept the updated terms. If not, you may stop using the Site and request deletion of your campaign data.

13. Contact Us

If you have questions or want to exercise your rights, you can reach EA in several ways:

• Privacy requests or data access:
  • EA My Privacy Rights Portal: https://privacyportal.ea.com
  • Email: bf6receipts@ea.com (Use “Battlefield Destruction” in subject)
• Child-safety or urgent takedown requests:
  • Email: bf6receipts@ea.com
• Data Protection Officer:
  • Write to:
    Data Protection Officer
    Electronic Arts Inc.
    209 Redwood Shores Parkway
    Redwood City, CA 94065, USA
• EU Representative:
  Electronic Arts Ireland Limited
  Parkmore West Business Park
  1 Ballybrit, Galway, H91 Y2R5, Ireland
• UK Representative:
  Electronic Arts Limited
  Onslow House, Onslow Street
  Guildford, GU1 4TN, United Kingdom

We aim to respond to all requests within 30 days unless your local law sets a shorter timeline. If you're unsatisfied with EA's response, you may also contact your local Data Protection Authority.