GDPR stance on usernames?

Sooooo here is the bread and butter:

My game does not ask for usernames.

But if I ever add multiplayer, I will probably need to add it.

But because of the Terrible, Horrible, No Good, Very Bad GDPR (see what I did there),(also I don’t hate it, I just think its too strict), things have gotten complicated.

If I do add usernames… Do I have to give some consent form or something?

Lawyers give legal advice.  While I respect the many experts here, you’re better off asking someone legally qualified to answer that question.

If you base your actions on advice from non-legal experts, you might as well do whatever you want.  

Also, how much reading on GDPR did you do before asking? :blink:

If you keep the username in your game’s local storage, this discussion is moot.  AFAIK GDPR only applies to data you send elsewhere. 

@roaminggamer is right, legal questions are best answered by lawyers.

What complicates this is that multiplayer is such a broad scope that until you know more about what you’re doing, it’s nearly impossible to even discuss GDPR requirements.

Rob

GDPR is a good thing to finally give more control of data back to end users, but like most births, it’s painful at first.

It is much about informing users what data you are storing, why you are storing it, and with whom you are sharing it.

This info should be simple and easy to understand, and presented at the point when you ask for the users consent. 

The times of presenting long textwalls that users are supposed to read and automatically accept by using services are over.

Users need to choose to opt in, somthing that can not be default action.

You also need to give users a tool/option to delete all user data permanently, should they choose to do so.

Also, remember that the main issue is regarding sensitive info that can identify a person or information related to the person.

So about usernames, it should be easy enough to present a reasonable cause why you need to store it, and add an option in your app to delete user account.

I may have forgotten something but thats the big picture.

If usernames are fundamental to your app then do not worry about it.  I use usernames just fine.

Just don’t tie that to a social profile, etc.

I dont think I am going to store account information on some server.

It will just for local use.

If I connect the game to Google Play Games or Apple Game Center, do the plugins automatically ask for consent?

Or do I have to make to consent form?

Don’t be afraid of GDPR. Is it more work? Sure. Is it worth it? For your user, it is and shouldn’t we be putting our user’s needs first?

I have not seen either Game Center or GPGS ask for consent, but I’m in the US and they may only be showing it to devices they believe to be in the EU. I would show a consent window and get user consent before initializing either.

Rob

Absolutley!

I was planning to use GPGS and Game Center but I will check whether they give consent.

Lawyers give legal advice.  While I respect the many experts here, you’re better off asking someone legally qualified to answer that question.

If you base your actions on advice from non-legal experts, you might as well do whatever you want.  

Also, how much reading on GDPR did you do before asking? :blink:

If you keep the username in your game’s local storage, this discussion is moot.  AFAIK GDPR only applies to data you send elsewhere. 

@roaminggamer is right, legal questions are best answered by lawyers.

What complicates this is that multiplayer is such a broad scope that until you know more about what you’re doing, it’s nearly impossible to even discuss GDPR requirements.

Rob

GDPR is a good thing to finally give more control of data back to end users, but like most births, it’s painful at first.

It is much about informing users what data you are storing, why you are storing it, and with whom you are sharing it.

This info should be simple and easy to understand, and presented at the point when you ask for the users consent. 

The times of presenting long textwalls that users are supposed to read and automatically accept by using services are over.

Users need to choose to opt in, somthing that can not be default action.

You also need to give users a tool/option to delete all user data permanently, should they choose to do so.

Also, remember that the main issue is regarding sensitive info that can identify a person or information related to the person.

So about usernames, it should be easy enough to present a reasonable cause why you need to store it, and add an option in your app to delete user account.

I may have forgotten something but thats the big picture.

If usernames are fundamental to your app then do not worry about it.  I use usernames just fine.

Just don’t tie that to a social profile, etc.

I dont think I am going to store account information on some server.

It will just for local use.

If I connect the game to Google Play Games or Apple Game Center, do the plugins automatically ask for consent?

Or do I have to make to consent form?

Don’t be afraid of GDPR. Is it more work? Sure. Is it worth it? For your user, it is and shouldn’t we be putting our user’s needs first?

I have not seen either Game Center or GPGS ask for consent, but I’m in the US and they may only be showing it to devices they believe to be in the EU. I would show a consent window and get user consent before initializing either.

Rob

Absolutley!

I was planning to use GPGS and Game Center but I will check whether they give consent.