Edit: I state this later, but just to be upfront - I am not a lawyer, don’t take this for legal advice, don’t get blame me or get me fired if you do.
To give credit where it is due, their privacy policy is actually comparatively ok. That may say more about the comparisons than their privacy policy. Obviously I still post on the forums and play the game, so anything I say against it should be weighed with that in mind. They also do the obvious things like cookies and collecting IPs, so I won’t bother quoting those.
Q1 – What information does this Privacy Statement cover?
A1 – This Privacy Policy applies only to personal information collected on the websites where this Privacy Policy is posted, and does not apply to any other information collected by D3Publisher through any other means.
I don’t use the mobile application, and I’m guessing D3 doesn’t collect information through it. This statement technically allows them to do whatever they want if they did, though. Demiurge, on the other hand…
For you social media-minded folks:
Social Media Sites and Social Media Plug-Ins
Some of our websites or product pages may use plug-ins, link to, or post information from social media services, like a Facebook page or Twitter account. These social media services may share information with us, such as personal information (i.e. your name, location, the ‘likes’ you make) or non-personal information (i.e. content viewed, or click-throughs).
This isn’t really D3’s fault, but I quoted it to let you know what they have access to. Facebook in particular is abusive in the information it collects, which by connecting with MPQ they can have access to anything Facebook will share with them. Again, I wouldn’t hold this against D3 - they’re not the ones actually collecting this data from you.
And the big one:
Q3 – How is your personally identifiable information used and shared?
A3 – We don’t share, sell, or rent your personal information to unrelated third parties. We don’t require personal information to access our website. However, if you prefer not to disclose personal information, you will not be able to enjoy certain features of our website.
Whatever the purpose may be, we will only collect information to the extent reasonably necessary to fulfill your requests and our legitimate business objectives.
This is the “semi-deceptive” one. It’s mostly industry standard, but I have no idea who or what an “unrelated third party” could fully encompass. Obviously D3 won’t give your information to anyone who asks for it, but if D3 is a part of a marketing group that shares marketing information as a business function, is that a related third party? I don’t know, I’m not a lawyer.
Don’t get me wrong - this usually is here to cover things like middle-men (you want D3 to share information with Steam/Google/Apple if you want your payment to be processed to your account, after all) for different services. I just don’t know where that line is drawn.
And finally, if you’re worried at all:
Q4 – What choices do you have about the collection, use, and sharing of your personally identifiable information?
A4 – As mentioned above, you have control over the personal information you submit to us. If at any time you decide to remove your personal information from our database, you may do so by emailing us at privacypolicy@d3p.us. Please note that any information, including personally identifiable information that you reveal in a bulletin board, message board, chat room or other public forum is publicly viewable on the Site.
This is actually really good (assuming that email address is still legit). It specifically lists removal from the database as opposed to deletion (not sure there’s actually a difference from a responsibility perspective) but doesn’t impose any limitations on the information you can remove. Props to D3 for that last part.
