Connection to Telemetry Servers when Telemetry is turned off

[eL_Bart0]

I happened to notice that KCD II is trying to connect to Telemetry servers, although I've disabled Telemetry in the settings. Here's a screenshot of my firewall: https://imgur.com/a/sBFawvS

Not really sure whether this is GDPR-compliant, honestly. If the users disables telemetry there should be no more connections to telemetry servers.

I'd be glad if we could get an official statement that this is a bug and will be fixed or smth.

[Swans]

It’s not in scope of GDPR as the data is telemetry (meta/anonymised/signal) not personal data.

You will probably find the client makes a connection but sends no telemetry.

[Dr. Peppermill]

Originally posted by Swans:

It’s not in scope of GDPR as the data is telemetry (meta/anonymised/signal) not personal data.

Telemetry doesn’t imply personal data, it’s ANY data. If you disable it, no data should be sent. Ideally, they shouldn’t even attempt to connect to telemetry server.

[Swans]

Originally posted by Dr. Peppermill:

Originally posted by Swans:

It’s not in scope of GDPR as the data is telemetry (meta/anonymised/signal) not personal data.

Telemetry doesn’t imply personal data, it’s ANY data. If you disable it, no data should be sent. Ideally, they shouldn’t even attempt to connect to telemetry server.

Telemetry does not include PD according to their over-arching PN, which is why I stated the above re. GDPR: Only PD is in scope of GDPR, if it's not in the telemetry (and they state it is not) then the OP does not have GDPR compliance concerns. That does not mean he/she may not have other concerns, but they are not GDPR concerns.

Technical behaviour ultimately depends how the app is architected, it could make a connection to the endpoint but policy determines nothing goes over that connection or, more usually, only something very specific is sent (i.e., not the opt out data). e.g., very often MAU related signals are sent to drive understanding of consumption.

That said, when I check their privacy statement at the Telemetry Settings link, it's 'access denied':

https://legal.kingdomcomerpg.com/privacy/kcd2_pp_eng.html

I have just raised a privacy concern to the Plaion DPO and KCD2 support address, as that should be available so people can contact the privacy officer, check subject rights, determine exactly what is sent via telemetry, etc. Whilst there is a Plaion PN, the lack of a PN at this link is a concern because it could imply a gap against the over-arching Plaion PN and this element.

EDIT: I got a response from Plaion's DPO within 4 hours stating this is being looked into.

[Swans]

Plaion's DPO notified me this bug is now fixed and the privacy policy is available at: https://legal.kingdomcomerpg.com/privacy/kcd2_pp_eng.html

This again confirms that telemetry does not contain PD, so is out of scope for GDPR.

[Alhanalem [DD1 Community Dev]]

Originally posted by Dr. Peppermill:

Originally posted by Swans:

It’s not in scope of GDPR as the data is telemetry (meta/anonymised/signal) not personal data.

Telemetry doesn’t imply personal data, it’s ANY data. If you disable it, no data should be sent. Ideally, they shouldn’t even attempt to connect to telemetry server.

Telemetry is anonymous. it's diagnostic data the helps devs fix bugs.

But as the poster said if you turn it off, it may still make a connection but doesn't send anything.

Paranoia isn't healthy, Don't worry about it. the devs are honorable.