PrivacyPolicy/index.html at main · Goob-Station/PrivacyPolicy · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Goob Station | Privacy Policy</title>
    <link rel="icon" href="https://raw.githubusercontent.com/Goob-Station/Goob-Station/refs/heads/master/Resources/Textures/Logo/icon.ico" type="image/x-icon">
    <link rel="shortcut icon" href="https://raw.githubusercontent.com/Goob-Station/Goob-Station/refs/heads/master/Resources/Textures/Logo/icon.ico" type="image/x-icon">
    <link href="style.css" rel="stylesheet">
    <meta property="og:type" content="website">
    <meta property="og:url" content="https://privacy.goobstation.com/">
    <meta property="og:title" content="Goob Station Privacy Policy">
    <meta property="og:description" content="Privacy policy for Goob Station's SS14 game servers">
    <meta property="og:image" content="https://raw.githubusercontent.com/Goob-Station/Goob-Station/refs/heads/master/Resources/Textures/Logo/icon/icon-256x256.png">
</head>
<body>
    <script src="parallax.js"></script>
    <div class="container">
        <div class="logo-container">
            <img src="https://raw.githubusercontent.com/Goob-Station/Goob-Station/dc3fdca5da6df6fd6a9911711c8117b8500a327e/Resources/Textures/Logo/logo.svg"
                    alt="Goob Station Logo"
                    class="logo">
        </div>

        <div class="header">
            <h1>Game Server Privacy Policy</h1>
                <strong>Last Updated: December 25th, 2025</strong>
                <br>
                Added Data Retention section, expanded Lawful Basis for Processing, clarified limitations on data erasure requests, and updated Data Transfers and Security Incidents sections for GDPR compliance.
        </div>


        <div class="policy-section">
            <h2>Definitions</h2>
            <dl class="definition-list">
                <dt>Redialing</dt>
                <dd>Automatic reconnection process through the game's launcher to alternative servers</dd>

                <dt>IP Address</dt>
                <dd>Numerical label assigned to your device when connected to a network</dd>

                <dt>UUID (Universal Unique Identifier)</dt>
                <dd>128-bit number used to uniquely identify your game account</dd>

                <dt>HWID (Hardware ID)</dt>
                <dd>Hashed identifier generated from your device's hardware configuration</dd>

                <dt>VPN (Virtual Private Network)</dt>
                <dd>Service that masks your real IP address and location</dd>

                <dt>Server Administrators</dt>
                <dd>Volunteer staff members responsible for maintaining game servers and enforcing rules</dd>

                <dt>Network Operators</dt>
                <dd>Technical personnel maintaining server infrastructure</dd>

                <dt>Server Hosts</dt>
                <dd>Third-party companies providing physical server hardware and network connectivity</dd>
            </dl>
        </div>

        <div class="policy-section">
            <h2>Data We Collect</h2>
            <ul>
                <li>IP address and approximate geographic location</li>
                <li>Hardware ID (HWID)</li>
                <li>Account UUID and username</li>
                <li>All in-game actions and communications</li>
                <li>Explicitly entered user preferences</li>
                <li>Discord user ID and roles (if you choose to link your Discord account)</li>
            </ul>
        </div>

        <div class="policy-section">
            <h2>Data Access</h2>

            <h3>Internal Teams</h3>
            <h4>Server Administrators</h4>
            <ul>
                <ul class="access-details">
                    <li>Connection histories (IP/HWID/UUID)</li>
                    <li>In-game chat and game logs</li>
                    <li>Moderation action records</li>
                </ul>
            </ul>

            <h4>Network Operators</h4>
            <ul>
                <ul class="access-details">
                    <li><strong>All Server Administrator access</strong> plus:</li>
                    <li>Raw database records</li>
                    <li>Unfiltered connection metadata</li>
                    <li>Server diagnostic streams</li>
                    <li>Persistent storage archives</li>
                </ul>
            </ul>

            <h3>External Services</h3>
            <h4>Server Hosts</h4>
            <ul>
                <li><span class="access-type">Can view:</span> Network traffic patterns, hardware utilization</li>
                <li><span class="access-type">Cannot view:</span> Decrypted game data, personal identifiers</li>
                <li>Bound by data processing agreements (DPAs)</li>
            </ul>

            <h4>Security Services (IPIntel)</h4>
            <ul>
                <li><span class="access-type">Receives:</span> New connection IP addresses</li>
                <li><span class="access-type">Retention:</span> Immediate deletion after VPN check</li>
            </ul>
        </div>


        <div class="policy-section">
            <h2>Connection Management</h2>

            <h3>VPN Detection</h3>
            <ul>
                <li>New connections are checked via IPIntel service</li>
                <li>VPN connections are blocked by default</li>
                <li>Exemptions available through forum request</li>
            </ul>

            <h3>Redialing Process</h3>
            <ul>
                <li>Automatic server reconnection will:</li>
                <ul>
                    <li>Only connect you to servers within our official network</li>
                    <li>Maintain existing HWID/UUID identifiers</li>
                    <li>Preserve connection history records</li>
                </ul>
                <li>No data is shared with third-party servers during redialing</li>
                <li>Does not collect additional personal data</li>
            </ul>

            <h3>Location Tracking</h3>
            <ul>
                <li>Country data derived from IP addresses</li>
                <li>Used for:</li>
                <ul>
                    <li>Server allocation analytics</li>
                    <li>Connection quality monitoring</li>
                    <li>Regional rule enforcement</li>
                </ul>
            </ul>
        </div>
        <div class="gdpr">
            <h1>GDPR Specific Info</h1>
        </div>

        <div class="policy-section">
            <h2>Your GDPR Rights</h2>
            <p>EU residents have the right to:</p>
            <ul>
                <li>Request access to personal data</li>
                <li>Rectify inaccurate information</li>
                <li>Erase data under certain conditions</li>
                <li>Restrict processing of your data</li>
                <li>Data portability</li>
                <li>Object to processing</li>
            </ul>
            <p>Submit requests to: <a href="mailto:administrator@goobstation.com">administrator@goobstation.com</a></p>

            <h3>Limitations on Data Erasure</h3>
            <p>You may request deletion of your personal data. However, under GDPR Article 17, we may refuse erasure requests where data is required for:</p>
            <ul>
                <li>Moderation and rule enforcement</li>
                <li>Security and abuse prevention</li>
                <li>Ban enforcement, including active bans and permanent bans</li>
                <li>Maintaining moderation history that remains necessary for enforcement or contextual review</li>
            </ul>
            <p>Character data and other non-essential gameplay data may be deleted by you at any time, as this data is not required for moderation or enforcement purposes.</p>
        </div>

        <div class="policy-section">
            <h2>Lawful Basis for Processing</h2>
            <p>Under GDPR, we process data based on:</p>
            <ul>
                <li><strong>Contractual Necessity:</strong> Account data required to provide services</li>
                <li><strong>Legitimate Interests:</strong> Security monitoring, fraud prevention, moderation, rule enforcement, maintaining moderation history, detecting repeat or escalating violations, preventing ban evasion, abuse investigation, and handling appeals. Retention of historical moderation records is necessary to ensure fair, consistent, and effective enforcement across our community.</li>
                <li><strong>Consent:</strong> Optional features like Discord integration</li>
            </ul>
        </div>

        <div class="policy-section">
            <h2>Data Transfers</h2>
            <p>Data may be transferred outside the EU to:</p>
            <ul>
                <li>Our hosting providers in the United States</li>
                <li>Third-party services like Discord and IPIntel</li>
            </ul>
            <p>We ensure transfers comply with GDPR through:</p>
            <ul>
                <li>EU Standard Contractual Clauses (SCCs)</li>
                <li>Appropriate data processing agreements</li>
            </ul>
        </div>

        <div class="policy-section">
            <h2>Data Retention</h2>
            <p>We retain different types of data for different purposes:</p>
            <ul>
                <li><strong>Gameplay and chat logs:</strong> Retained for up to 30 days to support moderation review and incident investigation. Logs are automatically deleted after this period unless they are part of an active moderation case.</li>
                <li><strong>Moderation records:</strong> Records such as bans, warnings, and administrative notes are retained as long as they are necessary for moderation, rule enforcement, abuse prevention, and maintaining the integrity of the service. This includes historical records of previous bans and warnings, which help moderators understand patterns of behavior and ensure consistent enforcement.</li>
                <li><strong>Permanent bans:</strong> Treated as ongoing enforcement actions and retained for as long as necessary for moderation and enforcement purposes.</li>
                <li><strong>Hardware identifiers (HWIDs) and connection identifiers (such as IP addresses):</strong> Retained where necessary to enforce bans, prevent ban evasion, and protect the integrity of the service. These identifiers are used solely for enforcement and security purposes, and are not used for marketing, profiling, or advertising.</li>
            </ul>
            <p>We do not retain data longer than necessary for its stated purpose.</p>
        </div>

        <div class="policy-section">
            <h2>Security Incidents</h2>
            <p>We will notify affected EU users within 72 hours of becoming aware of a data breach that risks their rights and freedoms. Affected users will be notified directly where feasible. Public announcement channels, such as our <a href="https://discord.com/servers/goob-station-1202734573247795300">Discord server</a>, may be used as a supplementary notification method.</p>
        </div>

    </div>
    <div class="footer">
        <p>Contact us at <a href="mailto:administrator@goobstation.com">administrator@goobstation.com</a> for inquiries.</p>
    </div>
</body>
</html>