From 6229e9d1c3debeb77ba8750ef6dcb5e38d34bd79 Mon Sep 17 00:00:00 2001 From: Condorra Date: Sun, 19 Feb 2023 23:45:52 +1100 Subject: [PATCH] Update privacy policy for more clarity --- assets/privacy.html | 23 ++++++++++++++++++++++- hugo-static/content/privacy.md | 17 +++++++++++++++++ 2 files changed, 39 insertions(+), 1 deletion(-) diff --git a/assets/privacy.html b/assets/privacy.html index 8bcdc17..518b05c 100644 --- a/assets/privacy.html +++ b/assets/privacy.html @@ -15,7 +15,7 @@ service or part of it, and to apply rate limits to prevent abuse. In normal circumstances, IP addresses are retained for up to 2 years, but if you are banned or restricted from the service, they are retained until up to 2 years after the ban or restriction is lifted. Bans and restrictions - can be for an indefinite period, in which the IP address will be retained indefinitely. + can be for an indefinite period, in which case the IP address will be retained indefinitely.
  • The IP address used to request an Over 18 certificate for running your own server. @@ -32,6 +32,11 @@ linkable to your real identity, as it will be retained indefinitely and shown in-game to identify you to other players.
    • +
  • + The actions you take in game (for example, moving from room to room). These may be sent to + other users (including any administrators of the game) as part of game play, and may + also in some cases be logged and used to detect or investigate abuse / cheating. +
  • Any free-form information you disclose while playing the game (for example, through in game communication functionality). Depending on the type of communication, this could be shared @@ -40,3 +45,19 @@

    • +

    + Information is collected, processed, and stored in Victoria, Australia. We also store an + encrypted backup in the United States (data is encrypted in Australia before transfer to + the US, and backups of the keys needed to decrypt the data are stored in Australia, and + not with the backups). Data is encrypted in transit, except where you choose to connect + over a telnet connection (in which case any information on that link is sent unencrypted). + Except where intentionally disclosed to other users as noted above, access to sensitive + data is restricted to authorised users. All service providers (Vultr and Cloudflare) + who have access to sensitive unencrypted data or to decryption keys have a privacy policy + that has been verified to be consistent with this privacy policy. +

    +

    + Blastmud is developed as a hobby (rather than a business) by an unincorporated + group of individuals collectively known as the Blast Havers. All privacy related enquiries or + complaints should be sent to staff@blastmud.org. +

    diff --git a/hugo-static/content/privacy.md b/hugo-static/content/privacy.md index e4894a0..6f7edb2 100644 --- a/hugo-static/content/privacy.md +++ b/hugo-static/content/privacy.md @@ -28,7 +28,24 @@ Blastmud collects the following information that can be linked to individuals: * The character name you choose for yourself. We recommend not making this something linkable to your real identity, as it will be retained indefinitely and shown in-game to identify you to other players. +* The actions you take in game (for example, moving from room to room). These may be sent to + other users (including any administrators of the game) as part of game play, and may + also in some cases be logged and used to detect or investigate abuse / cheating. * Any free-form information you disclose while playing the game (for example, through in game communication functionality). Depending on the type of communication, this could be shared with other players and retained indefinitely. We recommend not posting any personally identifiable information through these channels. + +Information is collected, processed, and stored in Victoria, Australia. We also store an +encrypted backup in the United States (data is encrypted in Australia before transfer to +the US, and backups of the keys needed to decrypt the data are stored in Australia, and +not with the backups). Data is encrypted in transit, except where you choose to connect +over a telnet connection (in which case any information on that link is sent unencrypted). +Except where intentionally disclosed to other users as noted above, access to sensitive +data is restricted to authorised users. All service providers (Vultr and Cloudflare) +who have access to sensitive unencrypted data or to decryption keys have a privacy policy +that has been verified to be consistent with this privacy policy. + +Blastmud is developed as a hobby (rather than a business) by an unincorporated +group of individuals collectively known as the Blast Havers. All privacy related enquiries or +complaints should be sent to [staff@blastmud.org](mailto:staff@blastmud.org).