Version 2 (modified by elexis, 6 years ago) ( diff )

Partial corrections, rephrase, remove claims of user consent since we can't get parental consent (GDPR article 8), remove claims of accurateness and completeness, add more TODOs

This page summarizes the current status of Wildfire Games regarding user data protection.

Disclaimer: This page is under construction, editable by everyone and can contain inaccurate or incomplete information. TODO: don't have it editable by anyone.

Contact us if something is missing or if you want to request personal data. TODO: create an email address for this.

Wildfire Games hosts the following online services:

Services Terms

  • Lobby: In order to use the service you have to accept the Multiplayer Lobby Terms Of Service and Terms Of License. They can also be read at ​Terms_of_Service.txt and ​Terms_of_Use.txt.
  • User reports: This is opt-in. A "Technical Details" button gives you information about what is sent, if you want to enable it. This can also be read ​here.
  • Forums: TODO: It looks like the registration message displayed by IPB does not talk about data. Maybe this will be fixed in an upstream upgrade.
  • Trac: TODO: The Trac upstream does not provide anything for that, so maybe just link to this page?
  • Phabricator: TODO: Same as Trac. Phabricator has Legalpad but it won't show up in the registration screen, so maybe just link to this page?
  • IRC logs: Registration is handled by QuakeNet, they are supposed to ask for your consent. Their ​Terms are quite lacking, but their ​Privacy page will give you a good idea of the risks of saying sensitive stuff on IRC.
  • Code repository: The data uploaded here serves the purpose of software development and documentation of code authorship. TODO
  • Website: TODO

Contents and purpose of your data

TODO: This must be explained at the terms and conditions of the service and accepted prior to service use. Then we don't have to explain it twice and can remove all redundancies of this page.

Please note that the server knows your IP address and will store it in logs. We may use these logs to identify abuse and store your address in blacklists to prevent it. However, unless the IP is cited in the listings below, we do not associate the IP with your account.

Except for the user reports, your data is associated to a username that you choose. We collect:

  • Lobby:
    • Ratings data (stays empty as long as you don't play rated games) - statistics of your rated games, that are processed to create a score that counts for the lobby leaderboard.
    • The messages you send and your IP address - for moderation purposes.
  • User reports:
    • NO username.
    • The collected specs information.
    • A unique identifier - for avoiding duplicates and detecting improvements of your specs.
  • Forums:
    • The content you write and upload.
    • Your email address - to verify your account, reset your password, and receiving content updates of your choice.
    • The history of your different IP addresses and User-Agents - for security purposes.
    • Optional: Your birthday, contact methods, gender, location, interests, and/or real name - for customizing your profile.
  • Trac:
    • The content you write and upload.
    • Your email address - to verify your account, reset your password, and receiving updates about the tickets you interacted with.
  • Phabricator:
    • The content you write and upload.
    • Your email address - to verify your account, reset your password, and receiving the kind updates you subscribed to.
  • IRC logs:
    • The messages you send.
    • Your ISP and IP might appear along with your username in connect/disconnect messages. Set up your IRC client if you want to control that.
  • Code repository:
    • Nothing, unless you choose to include in your patch a modification that adds your name to the game credits.

Access to your data

We will provide access to all your data, either in a straightforward way, either upon request at the contact email address. We apologize in advance for the cases where the request is long to process.

  • Lobby: Your rating is visible to all users. Contact us for the rest.
  • User reports: Contact us and give us your identifier, which can be found in your game configuration file (see GameDataPaths). NB: The data collection has been deactivated for some years now and the data we have is stale; it is likely that we did not keep your data.
  • Forums: Your content can be found on your profile: go to your profile and click "See their activity". Contact us for the rest.
  • Trac: Your content can be found using a ​query. Contact us to know what email address we have.
  • Phabricator: Your content can be found using ​the feed, clicking Edit Query and providing your username. Contact us to know what email address we have.
  • IRC logs: Everything is public.
  • Code repository: Since you don't necessarily commit yourself everything that you write, we suggest using the ​Trac search, using your username as query, and filtering Revisions.

Data portability

The data you stored on our services should be portable and movable to other services. This is often technically difficult, but don't hesitate to ask for suggestions on how to move the data to other platforms, if applicable.

  • Lobby and IRC logs: The logs are usable as-is.
  • Lobby and User reports: The database content we can extract should be re-importable in an alternative lobby/user-report server, especially if the other server uses the same (open-source) code as the official one.
  • Forums: Your profile information will be handed as an easy-to-parse XML file. Contact us if you want to copy content elsewhere; if "elsewhere" is another instance of IPB, which is the software powering our forums, their support might be able to help you with migrating content.
  • Trac and Phabricator: Copying your email address is just creating an account on the new instance. Contact us if you want to copy content elsewhere.
  • Code repository: You are free to mirror the repository anywhere.

Data erasure

The biggest limitation to your rights to erase your data comes from the fact that contribution to the project (code, feedback, suggestions, bug reports, ...) are used to develop the game. We can look into anonymizing these contributions on a case-by-case basis. Please contact us before trying to erase useful data, as it could be interpreted as vandalism.

  • Lobby: Deleting your data is not yet implemented (see TODO do we have a ticket for this? This is just a matter of running an SQL query, we can have a simple script at our disposal or add the feature to the bot, and making sure that the ratings of players who played rated games with the deleted user still work), contact us in the meantime.
  • User reports: TODO. We only have stale data that will be used in a testing environment, then deleted when we make the reporting work again. We must make sure that the new version of the reporter has an easy way of deleting the data given the ID (should be trivial to implement).
  • Forums: TODO: Does IPB provide a way to erase someone, i.e. the messages are associated to an anonymous user? I think they do but I need confirmation. Contact us if the content of some messages allow you to be identified anyways, so we can edit them.
  • Trac and Phabricator: We can delete your account and the associated data; your content will be assigned to an anonymous user. Contact us if the content of some messages allow you to be identified anyways, so we can edit them.
  • Code repository: Code that you have contributed will stay in the history of our code repository, and is likely to propagate automatically on the servers/computers of all persons following the development of 0 A.D. If you added your nickname/name to the credits (which is optional), and you want to have it removed, it will stay in the history after removal.

Data breaches

We always disclose data breaches on our servers, so that users can change their credentials. They will continue being reported and linked here, in under 72 hours after we discover them.

Note: See TracWiki for help on using the wiki.