EU GDPR Compliant | Serious Post: IP Grabbing
closed
P
Poggers
According to the EU GDPR Compliant personal data is everything listen below:
Quote:
"We mentioned personal data when we talked about data subjects, and it is now time to dive a bit deeper into the terminology. In short, personal data is anything that discloses your identity, that is unique to you. A few examples include:"
"Full Name:
Your Home Adress:
Credit Card Number:
Birthdate:
A Photo:
Your Email Adress:
Classical Personal Data:
Name. Home Adress. Phone Number. Birthdate/Place of birth. Your ID card. Workplace / School.
Digital Personal Data:
Metadata. IP Adress (unless visiting websites on your own accord etc.) And Email Adress."
Your IP (some exceptions), or location, is personal.
"IP's are not expected to be private information".
TL;DR if someone is using a 3rd party program or outsource code / app that gives you information about a person that isnt intended to be given out, thats illegal.
Log In
Legoman99573
VRChat doesnt have control over what steam does with IP addresses. If you have an issue with that, go harass steam, but its not like they would care to begin with.
Safest way would to either call your ISP for a new IP address or run a VPN. There is some free ones out there with some data limits ofc, but its easily doable with some VPN providers.
kawashirov
If you guys say, according to EU GDPR, IPs are private and should be hidden, does it mean that all P2P apps are illegal in EU? :thonking:
In short, general idea of GDPR, if you somehow know someones IP (or other personal data), and you save and keep it, you should not share it with others. It does not mean that service providers should rebuild ther infrastructure to work somehow w/o using IPs publicly. It does not mean that service providers should do something to hide your info for you.
Tupper - VRChat Head of Community
closed
This post will receive the same response. IPs are not expected to be private information. Steam Networking is a peer-to-peer realtime networking service in use by many applications, including VRChat. If you want to keep your IP truly safe, we encourage the use of a VPN. We are investigating potential alternatives-- however, for the time being we recommend the use of a VPN.
To reiterate, if you feel the need to keep your IP address completely safe anywhere on the internet (not just on VRChat), you are expected to utilize software or services like VPNs to do so.
Continued posts on this subject will result in the same response and closing or deletion of the thread.
bote
What you're asking for isn't possible with how the game handles networking. Steam ID is far from personal information, and just about every multiplayer steam game passes out those IDs to services and users. I recommend actually reading the GDPR rules instead of butchering them for fear mongering tactics.
P
Poggers
bote: people made clients that spoof steam ID so yes its possible
bote
Poggers: Hiding your IP with a client(non-VPN) isn't. Yes, vrchat can easily hide your steam id but it's objectively a pointless effort.
owlboy
The nature of Peer to Peer networking means that you need to know the address of the peer to send data back and forth.
P
Poggers
owlboy: again, as long as they spoof steam ID or encrypt it (already been done with custome clients) its possible
Dafirex
Telling users to "get a VPN 4Head" is pretty dumb but for the most part even if someone has your IP address they can't really do much besides DDOS you which is yeah annoying, but you can get a new address by literally rebooting your router/modem. If you don't have access to it you can call your ISP to get a new one.
IF someone wanted to do some damage they "could" but they would need to know wayyyy more than just "haha i googled this EPIC program" which is probably isn't the case for the script kiddies that download some modded client off the internet.
It's an issue that should be fixed but I don't think it's something to worry /too/ much about.
Chdata
Dafirex: I'm not so worried because 100 hackers aren't going to DDoS 10,000+ users. It's terrible for the few that get targeted, and may be more of a problem for streamers or people that or more likely to be trolled by hackers.
Which is to say, to the somewhat average regular users out there, I'd not worry so hard about it.
FruityFusion
Same goes for grabbing and comparing HWIDs in the EU.
Shelfen
Well, they can just update their ToS and you would have to agree on it, and it wouldnt make much of a difference.
Broseph Stinson
Shelfen: EU law > ToS
Shelfen
Broseph Stinson: they still need to mention it, its also not them delivering the IP out, it is an communication that you have with the service and everyone else connected to the service, you can get most og this through Packet sniffers through any game.
Edit:
Actually, they already does this in the ToS, as long as they are not giving out Metadata and other data associated with your IP they are good to go, IP is Semi Public Information as you can change it easy, it is not their job to protect your address on the internet, but there should not be any data leak assosiated with the IP other than what you are connected with at the moment, any stored data is and should be protected, this is what the GDPR say.
Floppiii
"lol just pay for a VPN with your own money to play our game lol"
Couldn't be more true. Try harder next time please. It's your responsibility.
Broseph Stinson
Finally someone who gets it.
GDPR rules out IP adresses as private information.
owlboy
Broseph Stinson: It rules them out?
Load More
→