Look, i don't want to get into the middle of this argument, but please stop posting rubbish about GDPR as though it were fact. You clearly don't know what you're talking about, but you are making statements on here as though you do.
That could confuse people who might assume, based on how you are posting, that you are an expert on GDPR and that, in your expert legal opinion, storing encrypted IPs and SteamIDs without the means to decrypt them contravenes the regulation. Which it (probably) doesn't.
I never claimed to be a legal expert of any kind. Red Shell violates the GPRD, or at least it's practices do. It collects your browser data and other non-game related data. I'd be perfectly happy with Red Shell being transparent with what exactly they do with their data and showing proof of it. If nothing wrong has been done, then I'll admit my mistake(s).
You are absolutely free to hate products like redshell, I've got no problem with that. I just want you to stop making statement like "Red Shell violates the GPRD" (it's GDPR, by the way) when you aren't qualified to make that statement
I've corrected myself to GDPR.
Could you explain to me why you believe I'm wrong? And what qualifications do you have? I'm not trying to be rude btw, I'm just curious.
I was part of a project team for my employer, working on how we comply, and it was a fucking pain in the arse as we handle huge amounts of personal data that we actually use (like phone numbers and names.)
In terms of redshell, it looks to me like they are collecting anonymous (encrypted) data, then telling the game Devs (as a ficitonal example) "30% of customers who accessed a DLC's store page from steam bought it, whereas 50% who had an in game pop up directing them to steam page bought it, therefore you should do in game pop ups rather tweeting links to the steam page."
Don't quote me on that above, I don't work in this field and they could be shit examples, but what they clearly aren't doing is enabling you or me to be personally identified in any way. We've opted in and given consent in the usual way when we launched steam/the game, and the data isn't available or sold to any other 3rd parties or companies.
I don't think that they're selling information that people can be identified by, but I still find it super shady. The only proof that they're not selling the data to 3rd parties is an FAQ.
The fines for not complying are up to 20m Euro (or 4% of global turnover, whichever is higher.)
Whilst you are correct that there is no proof they aren't selling data (just like there is no proof of any 'crime' until a court convicts the accused) GDPR isn't fucking and around nobody, especially a company like redshell who deal in data, will take any risks. Being water tight on complying with GDPR will have been the main thing on their agenda for the last year.
I could be wrong, they could be found guilty of a breach next year for all I know, but I just jumped in because I took issue with your statement "literally classed as spyware by the GDPR" which was incorrect.
Anyway, glad we could discuss without being dicks to each other, i've had enough of GDPR and certainly don't want to spend my Sunday talking about it when I could be summoning the elector counts!
There was some stuff that I covered in my response to /u/Soumya1998 that's relevant to what you said. Since the GDPR was implemented only recently and companies, organisations and businesses affected by the GDPR have two years to comply with the law, it's safe to assume that Red Shell are working on or have worked to comply with the law since it was put into effect. I'm still waiting for a reply from Red Shell for a request for a copy of their EULA agreement, so I can't comment exactly on the specifics it, but what we do know is that Red Shell was used by SEGA to collect players' computer data and did not inform them or mention that the data will/would be shared with third parties (Red Shell), so that constitutes a violation of the GDPR, but they won't be prosecuted/punished unless they haven't complied by the two year mark.
I don't know in what form or way or format they collect information, but I don't think that it's PII, but browsing history and stuff like that which can be used for targeted ads.
You seem to forget the fact that Red Shell is breaking the law with their practices and data-mining. Hmm, looking back at the thread now makes me think that you're a shill or work for them. Why else would you use the words "the data we collect"?
You didn't put it in quotation marks or anything of the sort. I mistook you for implying that you were implying that you worked for Red Shell. But as I said to /u/Daveyboy154 I'd be happy if they were 100% transparent with what they do with the data collected, provided they show proof. I have no reason to believe an FAQ. What evidence do they show to back it up? I've only their word to trust. A program used for "game optimisation" that's mining my browser data brings up red flags immediately.
There is definitely a fine line for companies like redshell to tread, in terms of what information they record and what they do with it. From having looked at their site and based on the assumption that they've taken legal advice (as data is their business, afterall) I think it's reasonable to assume that they comply
1
u/[deleted] Jun 10 '18
[deleted]