Check the EULA

[Eightball]

I know some of you won't care and there are probably paid shills who will come here and try and argue otherwise. But I hope you all realise how much of a dataminer this game is. When you accept the EULA you are agreeing to give them basically every piece of information they can datamine from you. Everything about you. Personal information, password info, Government ID, address, IP address, location and mailing address, billing, birthday, social media, and collection of your friends on social media, nicknames, real names, first and last name.

I'm not even exaggerating. They literally want all your friends real names too.

And you are literally signing away your passwords to an unknown chinese entity, who will do god knows what with them. Like, your actual passwords. I don't have a single game that has required I give it my passwords. Probably they are going to sell them or give them to government hacking groups.

Good old chinese dataminer. That's why this is free, the chinese government want to know everything about you. They want as many people to log into this game as possible so they can steal all of your private information because you didn't read the EULA and realise what you were doing.

Anyway I hope this reaches at least some of you before they decide this type of information shouldn't get out and they delete my post. It's in the EULA, go look.

Edit: Stickied post answers any questions you might have about what is going on here. You can all make your own mind up if this is acceptable to you or not, but at least the information is here now and you can make your own decisions.

P.S. be VERY aware of the amount of people on this thread who will try to convince you that you shouldn't care about your data and just give it to them. Very, very, very questionable behaviours going on here. Don't be too surprised if many of these are fake profiles or have chinese links.

I would probably have installed this game myself if it was not for another persons reviews and warnings. I'm glad they did it and now i'm passing on the favour to you. I hope you receive this information and make your own decision before installing this dataminer.

Edit2: https://ico.org.uk/for-organisations/advice-for-small-organisations/whats-new/blogs/data-sharing-when-is-it-unlawful/

Have a look at the section titled:- It's unlawful to share data when...

They fail under pretty much every category.

Edit3: The devs have responded, albeit on discord for some reason. Check the following link.

https://steamcommunity.com/app/2139460/discussions/0/4410795727365489104/

I personally am not satisfied by this response, but I will include it here for fairness and clarity.

Edit4: How to opt out:- it seems there is a couple of ways.
"To request to opt out of any future "sharing" of your Personal Information for purposes of cross-contextual behavioral advertising, or any future processing for purposes of targeted advertising, if you're logged in, you may set your preference via "Account Center" – "Ads Settings" in your account, or if you're not logged in or don't have an account with us, you may set your preference by clicking "Do Not Share My Personal Information" link at the bottom of the applicable web pages." If you wish to opt out of even more, read below.

https://protocol.unisdk.easebar.com/release/latest_v475.html#div2
i'll put a spoiler on this as it's a huge section I have copied and pasted from their terms and probably only people interested in opting out will be interested, i'll try to save others eyes. I can't seem to find anything akin to a collapsible, so this is the best I can do. I hope for everyones sake who has agreed to their EULA and logged into the game, that they are not abusing your information or doing anything shady with it. At the very least I hope this has raised awareness on GDPR + Data protection laws, your consumer rights, and what companies can and cannot do with your data. It's a very worthwhile modern discussion.

I'm going to go get some sleep and likely won't revisit this to post myself. I hope I have included the necessary information to be fair and representative to the other party even if I don't necessarily agree or trust them personally. You all are adults, you can make your own decisions regarding your privacy.

I really don't think this EULA has been proof read or double checked by actual lawyers. It's got a crazy amount of typos in it. Prizes for the person that spots the most. Comes across as a pretty unprofessional and rushed document.

"• you wish to erase the Personal Information as the processing we are doing is unlawful but you want us to retain the Personal Information but just store it instead; or"

That part though, lols. Almost sounds like an admission of guilt. I know it's not, but I won't lie I did do a double take when I read that section, lmao.

CHOICES AND INDIVIDUALS' RIGHTS

Your choices regarding our use and disclosure of your Personal Information

We give you choices regarding our use and disclosure of your Personal Information for marketing purposes. You may opt out from:

(1) Receiving marketing-related messages from us. If you no longer want to receive marketing-related messages from us on a going-forward basis, please follow the instructions in our messages to unsubscribe or contact us at [e-mail] to opt out.

(2) Receiving marketing-related push notifications from us. If you no longer want to receive marketing related push notifications from us on a going-forward basis, you may opt out by disabling push notifications for the relevant App on your device.

(3) Our sharing of your Personal Information with affiliates for their direct marketing purposes. If you would prefer that we discontinue sharing your Personal Information on a going-forward basis with our affiliates for their direct marketing purposes, you may opt out of this sharing by contacting us at [e-mail].

We will try to comply with your request(s) as soon as reasonably practicable. Please note that if you opt out of receiving marketing from us, we may still send you important administrative messages, from which you cannot opt out.

How you can exercise your rights

You have certain rights in relation to the Personal Information we hold about you. These rights may be limited, for example if fulfilling your request would reveal personal data about another person, where they would infringe the rights of a third party (including our rights) or if you ask us to erase information which we are required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are included in both the GDPR/UK GDPR and in relevant local implementing legislation.

(1) Access: You have the right to access Personal Information we hold about you and to certain information about the processing of that information. To exercise this right, please contact us at [e-mail] or contact the in-game customer service.

(2) Portability: You have the right to receive a copy of certain Personal Information we process about you. This comprises any Personal Information we process on the legal basis as described in the section "Collection and Processing Of Personal Information". You have the right to receive this information in a structured, commonly used and machine-readable format. You also have the right to request that we transfer that Personal Information to another party. If you wish for us to transfer such Personal Information to a third party, please ensure you detail that party in your request. Note that we can only do so where it is technically feasible.

(3) Correction: You have the right to rectify/correct any Personal Information about you that is inaccurate. To exercise this right, please contact us at [e-mail] or contact the in-game customer service.

(4) Erasure: You can delete your account or request the erasure of your Personal Information in certain circumstances. If you would like to make such an erasure request, please contact us at [e-mail] or contact the in-game customer service. We may need to retain Personal Information if there are valid grounds under data protection laws for use to do so (e.g., for the defense of legal claims or freedom of expression).

(5) Restriction of Processing to Storage Only: You have a right to request us to stop processing the Personal Information we hold about you other than for storage purposes in certain circumstances. Please note, however, that if we stop processing the Personal Information, we may use it again if there are valid grounds under data protection laws for us to do so (e.g., for the defense of legal claims or for another's protection).

You may request us to step processing and just to store the Personal Information we hold about you where:

• you believe the Personal Information is not accurate for the period it takes for us to verify whether it is accurate;

• you wish to erase the Personal Information as the processing we are doing is unlawful but you want us to retain the Personal Information but just store it instead; or

• you wish to erase the Personal Information as it is no longer necessary for our purposes but you require it to be stored for the establishment, exercise or defense of legal claims.

(6) Objection: You have the right to object to our processing of Personal Information about you where we are pursuing our legitimate interests or those of a third party. You may send your request by contacting us at [e-mail] or contacting the in-game customer service.

(7) Right to Withdraw Your Consent: Where we reply on your consent to process your Personal Information, you have the right to withdraw this consent at any time. Please note that withdrawing this consent will not affect the lawfulness of how we processed your Personal Information before you withdraw it.

We will respond to your request consistent with applicable laws. In your request, please make clear what Personal Information you would like to have changed or whether you would like to have your Personal Information suppressed from our database. For your protection, we may only implement requests with respect to the Personal Information associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable.

Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion (e.g., when you make a purchase or enter a promotion, you may not be able to change or delete the Personal Information provided until after the completion of such purchase or promotion).

You may lodge a complaint with the protection authority for your country or region where you have your habitual residence or place of work or where an alleged infringement of applicable data protection law occurs. A list of EEA data protection authorities is available at https://ec.europa.eu/newsroom/article29/items/612080. You can file a complaint with the UK ICO at https://ico.org.uk/make-a-complaint/data-protection-complaints/data-protection-complaints/.

[Eightball]

Originally posted by TheBoyWithTheThing:

I read the entire EULA. There is an amusing paragraph where they specifically mention that citizens of the USA (and they mention the country by name) can't sue them, but I didn't see anything about datamining, unless it is VERY well-disguised. Anyone have a quote?

I mean they don't call it datamining, they literally just say what data they are taking, they don't specifically call it datamining, because that term has negative connotations so isn't used in legalese, that's just what normies call it because that's what it is. I pinned an answer with your questions at the top of the thread, though, it has a direct link to the EULA at the bottom of it.

[Eightball]

Originally posted by AoD_lexandro:

Originally posted by Eightball:

Fortunately I work in IT security. I know fine well how to lock down my data.

LOL OK buddy. TIme for the blocklist, I have no time for fantasists

Member when you said this?

"False. Steam does not share your personal information with anyone. All it does is give out your SteamiD number, which has zero personal info attached."

I member. But you kept moving the goalposts every time I showed you it does so much more with literal evidence and links to the steam API website.

[Jwendl]

Simply, go download procmon (free utility). Open it up. Add a process name filter for ONCE_HUMAN.exe and watch as it only touches files in it's own directories. EULA is the legal side, they probably had to make the EULA read like that to even have steam allow them to put the game on the store. And yes, shocker almost every game's EULA has something similar in it because if I take payment from someone I need to know all that information for you know, legal reasons.

[Eightball]

Originally posted by Jwendl:

because if I take payment from someone I need to know all that information for you know, legal reasons.

Or not so legal, as the case may seem to be according to this.

https://ico.org.uk/for-organisations/advice-for-small-organisations/whats-new/blogs/data-sharing-when-is-it-unlawful/

It's unlawful to share data when...

arrow pointing right ...you don't have a lawful basis.

This rule applies to all of the examples in this list. If you haven’t got a good reason (or a ‘lawful basis’) to share someone’s data, then you shouldn’t be sharing it. You can use our lawful basis checker to help you work this out.

For example:

Wendy is a supermarket director and she collects and stores information about her customers’ shopping habits through her supermarket’s loyalty card scheme. From this information, Wendy’s supermarket can see that Vernon buys cat food every week. It’s likely that Vernon has a cat, but Wendy wouldn’t have a good reason (a ‘lawful basis’) to share Vernon’s information with a local vet, who wants to market cat owners with his services. It’s also a bad idea because Vernon wouldn’t expect that to happen. He neither agreed to this nor knows about it and it wouldn’t be fair to him.

arrow pointing right ...the information is particularly ‘sensitive’ and you haven’t taken this into consideration.

For example, sharing certain information like someone’s sexual preference, ethnicity, medical condition or political views could lead to discrimination.

So you not only need to have a lawful basis, but you also need to take extra steps to keep sensitive data safe. But if you haven’t got a lawful basis then you shouldn’t share it, no matter what extra steps you take or measures you put in place.

arrow pointing right ...it’s not required.

For example:

An online retailer uses a delivery company to send out a product to one of their customers. As well as providing the name and address of the customer, the retailer also shares the customer’s payment details with the delivery company, because on their system it’s easier to share a full customer record than take extracts. The delivery company doesn’t need this information to do their job, so by doing this the online retailer is acting unlawfully.

arrow pointing right ...you’re sharing children’s data without a compelling reason.

Sharing data about anyone without a lawful basis is unlawful, but there are specific regulations to protect children online and their data needs greater protection. For example, it’s unlawful to sell on children’s personal data for commercial re-use. We’ve written specific guidance on how to handle children’s data here. Essentially, you mustn’t share data about children unless you’ve got a compelling reason to do so, taking account of the best interests of the child.

[AoD_lexandro]

Originally posted by Eightball:

Originally posted by AoD_lexandro:

LOL OK buddy. TIme for the blocklist, I have no time for fantasists

Member when you said this?

"False. Steam does not share your personal information with anyone. All it does is give out your SteamiD number, which has zero personal info attached."

I member. But you kept moving the goalposts every time I showed you it does so much more.

Final response. Again Steam does NOT share your personal information with anyone. It explicitly states so in the TOS that you have never read. It shares a single unique ID code with 3rd party services. All 3rd party services are separate from Steam and not part of Steams API.

[Sheiriff Woody]

I was wondering why it was Free, like no pay packs and such, they are hoping to get enough info to Sell it, because they can sell your info to Tell-marketers and Bushiness. Could easily Charge Thousands for this info. Why cant a game just be a Game?

[Eightball]

Originally posted by Archon Oradon:

I was wondering why it was Free, like no pay packs and such, they are hoping to get enough info to Sell it, because they can sell your info to Tell-marketers and Bushiness. Could easily Charge Thousands for this info. Why cant a game just be a Game?

I'm betting your passwords are worth a fair amount of money to CCP hackers. They literally take your passwords.

[ScuffedOni]

The EULA of this game is a crime against privacy and personal security. Huge red flags. Seriously, read their EULA. You get to play this game...and they get to access all your social media, passwords, passport, social security number, driver's license etc. It's a massive data miner.

[Eightball]

Can't help but wonder how many of these fanboi defenders of this are actually chinese trolls with fake profiles. They have literally no other reason to defend this garbage.

So many people trying to convince you that your data is worthless and you shouldn't care. What a joke.

[Prof.Jackie]

Originally posted by Eightball:

I could care less of anyones opinion, but this man has put together all the relevant information from their EULA.

Nope he hasn't In fact he conveniently left out one minor but important detail:

This section supplements the above Privacy Policy and further describes how we collect, use, and disclose the Personal Information we collect about California, Colorado, Connecticut, Utah, and Virginia consumers. This section does not apply to Personal Information that we collect from our job applicants, contractors, or employees.

So most of the people aren't even affected by this.

If you wan't the general information about data collection you should look at the correct part of the EULA

PERSONAL INFORMATION WE COLLECT

We collect the following categories of Personal Information:

A. Personal Information we receive from you:

Name & Contact Details Such as first and last name, title, prefix, email address, telephone number, (instant) messaging account, postal address, date of birth, age, gender, country/region, and government-issued ID, such as passport information, as required by applicable laws for age verification and correction of personal information.

Account Information Such as your email address, chosen username and password, security questions and answers, avatar, and other information you share in your account.
Billing Information Such as debit or credit card details, bank account details, and billing address.

User Content Such as reviews about our Services and other user-generated content you may create or share on our Services, such as items and assets created or uploaded within our games, and videos and posts on our social media pages, blogs, and comment sections.

Gameplay Information Such as roles, heroes, character appearance, attributes (e.g., level, scores, experience points, and skills), progression and results, virtual currencies, item inventory, tasks and rewards, social connections within the Services, and chat logs.

Preferences Such as language, interests, other customer feedback/preferences that you might express during your use of our Services, and information you voluntarily provide in our surveys (e.g., your age, education background, occupation, and interests).

Marketing Data Such as your choices regarding our newsletters, surveys, and other marketing/advertising displayed or provided to you, and preferred methods of such promotional communication.

Communication History Such as details of your communications with us and details of your claims, complaints, and queries in general.

Transaction Information Such as details of products and services you have purchased from us, and order and purchase history within our Services, including transaction receipt number and purchase amount.

B. Personal Information we collect through your use of our Services or from other sources:

Social Media Information Such as name/nickname/username as it appears on your social media account profile, profile pictures, social media account ID, associated email address and other social media profile information, including lists of friends on social media.

Location Information Such as IP geolocation information, cell-ID, and Wi-Fi connection location.

Device Information Such as information about your devices and your use of our Services, such as IP address, MAC address, device identifiers, device model, device operating systems, regional and language settings, internet service provider, screen resolution, frame rate, ping value, stack information (e.g., crash reports and core dumps), server health indicators (e.g., CPU and memory usage, I/O usage, and load average), date and time stamps of actions (e.g., installing or using the Services), advertising identifiers, events within our Services (e.g., logins and gameplay attempts), and events on third-party websites (e.g., engagement time, number of clicks and views, and clicks and views of campaigns and communications materials). This includes data obtained through cookies and similar technologies, as described in the Cookies and Similar Technologies Policy applicable to the specific Service that you are using.

Game Account Information Such as your email address, nickname/username, age, country/region, and game account ID, which we collect from the third-party game account provider when you use such account (e.g., Xbox account, PSN account, Steam account or Epic Games account) to log onto our Services.

Third-Party Payment Information Such as a hashed identifier of your account with the third-party payment processing service, and the country/region from which your payment originated.

https://protocol.unisdk.easebar.com/release/latest_v475.html#div1

[SkySilverKnight]

i think the most important part of that paragraph is the bit where it says
"as required by applicable laws for age verification and correction of personal information."
they won't take it unless they need it for verification which is required under law in many Asian countries, with China and Korea as famous examples. In those countries you cannot create video game accounts without using an ID of some kind because those countries want restrictions on how long people can play games up to a certain age.
the social media part that it takes is if you connect an account to the game. it's pretty easy to avoid. the friends list part is phrased weirdly, but from my understanding it's saying that if you connect the account they have access to the list, because they have to state pretty much everything relevant to what they might information they receive if you connect an account

[SkySilverKnight]

Originally posted by Eightball:

Originally posted by Archon Oradon:

I was wondering why it was Free, like no pay packs and such, they are hoping to get enough info to Sell it, because they can sell your info to Tell-marketers and Bushiness. Could easily Charge Thousands for this info. Why cant a game just be a Game?

I'm betting your passwords are worth a fair amount of money to CCP hackers. They literally take your passwords.

not to be rude or anything but unless you're a government worker or a Chinese Immigrant, you aren't important enough to the CCP for them to want your information.
and even if they did, they wouldn't go through the effort of waiting for you to maybe download and play a game to get it. they would go straight to easier methods, like social media or any other online presence you may have.

hey, I might be wrong and you might be some important bigshot, but otherwise to the CCP you just aren't worth the time or money.

[Eightball]

Originally posted by Prof.Jackie:

Nope he hasn't In fact he conveniently left out one minor but important detail:

This section supplements the above Privacy Policy and further describes how we collect, use, and disclose the Personal Information we collect about California, Colorado, Connecticut, Utah, and Virginia consumers. This section does not apply to Personal Information that we collect from our job applicants, contractors, or employees.

You clearly did not read or understand that paragraph correctly. It does not say what you think it says. Literally just says its a SUPPLEMENT with additional info about these regions, not that it is LIMITED ONLY to these regions.

You really didn't comprehend at all what that said. Kinda hard to take anything else you said after that seriously.

[Socraman]

Originally posted by Eightball:

Can't help but wonder how many of these fanboi defenders of this are actually chinese trolls with fake profiles. They have literally no other reason to defend this garbage.

So many people trying to convince you that your data is worthless and you shouldn't care. What a joke.

Never defend the game... the game can be the worst trash... i dont care.
Just laughting at you thinking you have "PRIVACY" nowdays.
And yes... your data is not worthless .... you are WORTHLESS, you are just number 65432344 in 8.1 billion more. Dont think you are so important.

[nutha]

Most people are clueless about this stuff, lambs to the slaughter. You don't care because you are ignorant.

I got to the EULA, read it, LOL'd then uninstalled the game and removed it from my Steam account. This is the worst privacy breach attempt I have ever seen from a game; you are a privacy idiot if you install and play this game.