Stardew Valley Wiki:Privacy policy

From Stardew Valley Wiki
Revision as of 23:32, 18 February 2021 by ColitoCole (talk | contribs)
Jump to navigation Jump to search

Effective Date: February 17, 2021

CONCERNEDAPE PRIVACY POLICY

ConcernedApe LLC, a Washington limited liability company (“ConcernedApe”, “we”, “us” and their derivatives) makes this policy available to users of our websites, including stardewvalley.net and its subdomains (collectively, the “Websites”), the Stardew Valley® videogame (the “Game”), the Stardew Valley Forum, including forums.stardewvalley.net and its subdomains (collectively, the “Forum”), the Stardew Valley Wiki, including stardewvalleywiki.com and its subdomains (collectively, the “Wiki”), and other online services we may provide (with the Websites, Game, Forum, and Wiki, collectively, the “Services”).


1. What does this Privacy Policy cover?

This Privacy Policy (this “Policy”) sets forth how we collect, use, protect, store, disclose, and otherwise process your Personal Data (defined below). This Policy does NOT apply to information you provide to any third party or is collected by any third party (except as otherwise provided below). For example, third-party gaming platforms such as Steam and PlayStation may collect your Personal Data as you download and play the Game (each a “Third-Party Gaming Platform”). Personal data collected by a Third-Party Gaming Platform is subject to such Third-Party Gaming Platform’s privacy policy (e.g., Steam Privacy Policy and PlayStation Privacy Policy).

By using our Services, you are confirming that you understand English well enough to understand this Policy. Should you have questions about this Policy, please contact us by emailing us at [email protected], so we can clarify and address your questions.


2. How do we process children’s Personal Data?

We do not knowingly collect Personal Data from anyone under 13 years of age. Our Services are directed to people who are at least 13 years old. If you are under 13, do not submit any Personal Data about yourself to us. If you become aware that a child under the age of 13 has provided us with Personal Data, please contact us at [email protected], so we may remove the Personal Data.


3. What types of Personal Data do we collect and how do we collect it?

We may collect different types of information from you depending on how you use our Services, including Personal Data. “Personal Data” means information that relates to an identified or identifiable natural person.

  • Game – If you play the Game using Steam, we may collect your Steam ID (but we do not store it).
  • Correspondence – If you correspond with us, we may retain records of our correspondence, including the contents of whatever was said, your email address, and any other Personal Data that you provide to us in such correspondence.
  • Forum – If you use the Forum, we may collect your name or username, email address, and IP address (your IP address is never publicly visible). We may also retain copies of your posts to the Forum, including the contents of whatever was posted and any other Personal Data you choose to share on the Forum such as your profile information.
  • Wiki – If you use the Wiki, we may collect your name, username, IP address, email address, and any other Personal Data you choose to share on the Wiki. If you posted to the Stardew Valley wiki page owned by Chucklefish Limited, we collected your username from its history pages for the sole purpose of providing you with the appropriate credit for your contributions to the Wiki.
  • Analytics – If you browse our Websites, Forum, or Wiki, we may collect certain information about your use of our Websites, Forum, or Wiki. This information may include, without limitation, the number of page visits and duration, type of browser, and IP address.
  • Automatic Data Collection Technologies – Personal Data we collect about your use of the Services may be collected through “cookies” and “web beacons.” Cookies are small files placed on the hard drive of your computer through your web browser that enable us to recognize your browser and capture and remember certain information. Web beacons (also referred to as “clear gifs”, “pixel tags”, and “single-pixel gifs”) are small electronic files that enable us, for example, to count users who have visited our pages and for other related website statistics. Cookies, web beacons, and other automatic data collection technologies on the Services may come from third parties such as Google Analytics. For more information about these data collection technologies, please see our detailed Cookies Policy. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. Additionally, other online resources, such as Privacy Badger from the Electronic Frontier Foundation, are available that can help block certain automatic data collection technologies. Please note that, if you disable or refuse cookies or other automatic data collection technologies such as web beacons, some aspects of the Services may be inaccessible or not function properly.

We may also collect information that does not generally identify you but may become associated with your account. We may use information that does not identify you for any permissible business purpose under applicable law.


4. For what purposes do we collect your Personal Data?

Generally

We do not use automated decision-making in connection with the processing of your Personal Data.

  • To provide or improve the Services – We may use your Personal Data to process your requests to access the Services and certain of their features and to generally present and improve the Services. For example, when you create a profile on the Forum, we may use your Personal Data to present the Forum to you and to notify you about activity on the Forum.
  • To administer the Services – We may use your Personal Data for any lawful business purpose in connection with administering the Services. For example, if you reach out to us with a customer service inquiry, we may use your Personal Data to respond to you or to troubleshoot a problem you reported having with the Services.
  • To market the Services – We may use your Personal Data to market the Services to you. For example, with your prior consent, we may send you newsletters or announcements about the Services via email.
  • In furtherance of legal, health, and safety objectives – We may access, use, and share with others your Personal Data for purposes of health, safety, and other matters in the public interest. We may also provide access to your Personal Data to cooperate with official investigations or legal proceedings (e.g., in response to subpoenas, search warrants, court orders, or other legal processes). We may also provide access to your Personal Data to protect our rights and property and those of our agents, users, and others including to enforce our agreements, policies, and our Terms of Use. For example, if you post to the Forum, we may monitor and store those communications to detect cheating, fraud, illegal activity, or other activities that may violate our Terms of Use.
  • In connection with a sale or other transfer of our business – In the event all or some of our assets are sold, assigned, or transferred to or acquired by another company due to a sale, merger, divestiture, restructuring, reorganization, dissolution, financing, bankruptcy, or otherwise, your Personal Data may be among the transferred assets.
  • As we may describe to you when collecting your Personal Data – There may be other situations when we collect your Personal Data and simultaneously describe the purpose for that collection.

Lawful Basis

We only collect, use, or store your Personal Data if:

  • You voluntarily provide it to us with your specific, informed, and unambiguous consent (for example, when you sign up for our newsletter);
  • It is necessary to provide you with a Service that you have requested (for example, providing you access to the Forum);
  • We have a legitimate business interest that is not outweighed by your privacy rights (for example, to provide customer service); or
  • It is necessary to protect your vital interests or the vital interests of others (for example, we may collect or share Personal Data where necessary to resolve an urgent medical situation or protect the health or safety of one of our users or someone else).


5. In what situations do we disclose your Personal Data?

Third Party Service Providers

We may disclose your Personal Data to a third party such as a service provider for a business purpose. When we disclose Personal Data for a business purpose, we enter into a contract with the service provider that describes the purpose and requires the service provider to both keep that Personal Data confidential and not use it for any purpose except performing the contract. These service providers may assist us with tracking use of our Websites, Forum, or Wiki, including monitoring posts to the Forum, and with providing and improving the Services.

Others

We may also disclose your Personal Data:

  • To our subsidiaries and affiliates;
  • To our lawyers, consultants, accountants, business advisors, and similar third parties who owe us duties of confidentiality;
  • To a buyer or other successor in the event of a sale, merger, divestiture, restructuring, reorganization, dissolution, or other transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Data held by us pertaining to the users of the Services is among the assets transferred;
  • To comply with any court order, law, or legal process, such as responding to a government or regulatory request;
  • To enforce any contract we may have in effect with you;
  • If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of us, our users, or others; and
  • If you have consented to such a disclosure.


6. How do we treat Personal Data transferred to the U.S.?

Place of Business

We may store or process your Personal Data outside of the country where we collect the information or the country in which you reside. Our primary place of business is Washington, United States of America. You should understand that we may transfer some or all of your Personal Data to the United States of America to carry out certain operational and processing needs as described in this Policy.

Transfer Mechanisms

When transferring Personal Data out of foreign territories, we implement technical, organizational, and physical safeguards to protect your Personal Data. We use European Commission approved standard contractual clauses and implement related measures required by applicable law. Please contact us if you have questions related to the relevant transfer mechanism for your Personal Data.


7. How is my Personal Data protected?

Our Retention, Purpose Limitation, and Security Policies

We protect your Personal Data through a combination of collection, security, and retention policies.

  • Limited retention. We only keep your Personal Data for as long as we need it for business and operational needs or to comply with any statutory, regulatory, or legal obligations. For example, we may retain Personal Data collected from you to support customer service inquiries and prevent repeated violations or suspected violations of our Terms of Use if your account has been banned or your access to the Services has been disabled for any reason.
  • Purpose limitation. We will use your Personal Data only for the Services you choose to access and for the purposes for which you choose to share it. We will respect your requests to start or stop processing your Personal Data for marketing purposes, as well as the types of marketing messages you may wish to receive.
  • Security measures. We use appropriate measures to ensure a level of security appropriate to the risk involved and have implemented contractual, technical, administrative, and physical security measures designed to protect Personal Data from unauthorized access, disclosure, use, and modification. For example, we use a secure server. All supplied sensitive information is transmitted via Secure Socket Layer (SSL) technology and then encrypted. Such information is only accessible by those authorized with special access rights to such systems and that are required to keep the information confidential, subject to any additional requirements imposed by our contract with them and applicable law. As part of our privacy compliance processes, we review these security procedures on an ongoing basis to consider new technology and methods as necessary. However, please understand that our implementation of security measures as described in this Policy does not guarantee the security of your Personal Data.
    • In the event of a security breach, we will notify the proper regulatory authorities and any affected users of the breach within 72 hours after we become aware of the breach.

Your Practices and Activities

Your practices and activities are likewise very important for the protection of your Personal Data. You can take certain steps to help protect your Personal Data, such as being mindful of what you share publicly on the Services. For example:

  • Do not use your real name when selecting a username.
  • Do not post your real name in public-facing areas of the Services and do not share anything private about yourself or anyone else.

Users should also not pick a password that is easy to guess and should not share their password.

Please remember that we have no control over what third parties do with the content of your communications and no responsibility or obligation regarding third parties.


8. What rights do you have to your Personal Data?

Right to Access, Correct, Delete, or Restrict Processing

Subject to any limitations and exceptions under applicable law, you have the right to request access to your Personal Data and exercise the following rights:

  • You have the right to correct or update certain types of Personal Data. In many cases, you can review or update your account information by accessing your account online.
  • You have the right to request deletion of your Personal Data. If you choose to have your Personal Data removed from the Services, we will carry out your request within 30 days of account verification, subject to extension, and we will only retain minimal Personal Data to document your request and the actions we took to carry out your request.
  • You have the right to restrict certain processing of your Personal Data and the right to object to some types of processing of your Personal Data.
  • You have the right to withdraw your consent at any time, including objecting to your Personal Data being used for marketing or advertising purposes.

We will comply with your requests in accordance with, and subject to, applicable law. For example, we are not required to delete your Personal Data if we have an overriding legitimate ground for retaining that information, such as to prevent fraud. Please note that we are legally prohibited from carrying out requested actions in some instances, including (1) when we are unable to confirm your identity, (2) where the request is considered excessive, and (3) where doing so would adversely affect the rights or freedoms of other individuals.

We Are Here to Help

Please email us at [email protected] with the subject line “Data Subject Access Request” if you would like to exercise any of the rights described above or if you have questions regarding your rights.

Right to Complain

You have the right to lodge a complaint regarding our collection, storage, or processing of your Personal Data with a data protection supervisory authority in the country where you live or work.


9. Additional Notice for California Residents

California Online Privacy Protection Act

The following applies to California residents pursuant to the California Online Privacy Protection Act:

  • We do not track users of our Services over time and across third party websites or online services and therefore do not respond to Do Not Track signals. We are not aware of any third party that tracks users of our Services over time and across third party websites or online services.

California Consumer Privacy Act of 2018

The following applies to California residents pursuant to the California Consumer Privacy Act of 2018 (“CCPA”):