Blue Mountains GmbH (“we,” “us,” or “our”) respects your privacy rights and is committed to being transparent with our use of your information. If you are a resident or access our Services from within the European Economic Area (“EEA”), we apply the privacy protection to your information required by the General Data Protection Regulation.

This Privacy Policy applies to our use of your information throughout the Services, unless a part of the Services is governed by its own privacy policy. Our Services are currently:

Our forum at https://forum.playonset.com (the “Forum”)
Our website at https://playonset.com (the “Website”)
Our developer wiki at https://dev.playonset.com (the “DevWiki”)
Our game “Onset” (the “Game”) and the master server for our Game (“Master Server”)
Third party servers for our Game (the “Third Party Servers”)

About

This Privacy Policy concerns the information that (i) you may provide us with (for example when you sign up with our Service) and that we may (ii) collect from you automatically when you use our Service, (iii) receive from other, third party sources, or (iv) collect from you because you made this information publically available (for example public archives).

We protect and grant you your rights regarding information that can identify you as an individual (for example your name, age, gender, online user name, or your political opinion or religious belief) as well as information that can only personally identify you together with other information that we collect from you (for example your IP address, your activity with our Services, hardware device ID, or your browser type) (“Personal Information”).

Some of your information may be collected, stored, used, disclosed, or shared, anonymized by isolating the information from any personal identifiers and thereby cannot be used by us, or third parties that we share such information with, to identify you.

We may store some of your information via local storage (for example cookies) temporarily or permanently on your internet enabled device, which allows us to retrieve information on your device about your use of the Services (e.g. which language you prefer or your log in name).

What We Collect and How We Use It

General Use Policy. We may use your information to provide, administer, maintain, and improve our Services; personalize your experience of the Services; analyze user activity of our Services; provide you with support regarding our Services; to enforce our rights and the rights of other users of the Services, and to comply with our legal obligations; or to prevent imminent and serious bodily harm to a person.

Information You Provide Us With

Our Forum. We collect the following Personal Information when you register for our Forum or use our Forum (for example when you post content or create a user profile) for your use of and for us to manage and operate the Forum (for example to set up your account, provide support, monitor and enforce forum rules, or update you about changes):

Email Address
User Name
Your account activity (e.g. the data and time of your forum posts or your last forum activity)
Any content that you post
Optional: Location, date of birth, contact information, and SteamID and Discord ID when you set up your user profile

Our Game. We collect the following Personal Information when you purchase and or play our Game in order to fulfill the promises we made when you bought the Game (for example to provide the Game to you, improve your gameplay experience, to contact you and provide you with support):

SteamID
Steam User Name

Our DevWiki. We collect the following Personal Information when you are a content administrator of our DevWiki for the maintenance and improvement of our Game:

Your changes to Game related content
Your own additions to Game related content

Reaching Out To Us. We collect information from you when you send us or one of our representatives an email or otherwise correspond with us directly (for example your name, email address, or statements that you make). We store this information, including Personal Information, for purposes of reacting to your request and providing you with the necessary support regarding our Services. We will not collect information if your communication with us does not relate to our Services or future services.

Information We Collect Automatically From You

Automatic Collection. We automatically collect Personal Information when you use our service. For some of this collection we make use of various third party analytic and reporting technologies and partner with third parties to record information automatically when you use our Service. Some of the automatically collected information may be in form of local storage and or cookies placements.

Cookies. We may also automatically and in the background place small data files on your device that you use to access our Services. These may be cookies, local storage, or trackers, (“Cookies”) and we use these in order for some of our Services to work properly. By default, we use several persistent cookies (permanent or stored cookies) as well as session cookies (transient cookies erased each session). Cookies are used for purposes of authentication, security, preferences, (e.g., regarding default language and settings), connection stability (e.g., for uploading media, using e-Commerce features, etc.), monitoring performance of our services and marketing campaigns (e.g. page visits, currently active visitors, sessions by countries, from which website you accessed our Services), and generally providing and improving our Services. We use the following cookies for our Services.

When you use our Forum we deploy the following Cookies: bbcpsession, bbcustomerid, bbinlinemod_nodes_thread, bblastactivity, bblastvisit, bbnp_notices_displayed, bbpassword, bbsessionhash, bbuserid, ckCsrfToken, PHPSESSID
When you use our DevWiki we deploy the following Cookies: devwiki_session, devwikiToken, devwikiUserID, devwikiUserName
When you access our Website, Forum and DevWiki we deploy the following Cookies, which you can view here https://developers.google.com/analytics/devguides/collection /analyticsjs/cookie-usage

Third Party Providers We Use For Automatic Collection. Currently we employ the following third party services, each of which collects data in accordance with their respective privacy policies:

Google Analytics for our Services, which collects information in accordance with its privacy policy at https://policies.google.com/privacy, our Privacy Policy and, if you play our Game, the privacy policy of the third party platform through which you access the Games (https://store.steampowered.com/privacy_agreement/).
Akismet for our Forum, which collects your IP address, username and your Forum posts in accordance with its privacy policy at https://automattic.com/privacy/?utm _source=akismet&utm_medium=automattic_referred&utm_campaign=privacy_page and our Privacy Policy.

When You Use Our Website, Forum and DevWiki. When you use these services we automatically collect in either anonymized or non-anonymized form (see below) the following information to help manage, monitor and improve our Service, to provide you with support when you encounter problems using our Website, Forum, and DevWiki, and to monitor and improve marketing of our Website, Forum, and DevWiki:

Your IP Address when you access our Website and DevWiki (in anonymized form)
User agent to identify the browser you use (in anonymized form)
The location from where you accessed these site, how long you accessed these sites, from which website you accessed our sites (in anonymized form)
Not anonymized; see Akismet and Stopforumspam
When you access our Forum we collect your IP address, username and IP address
When you purchase priority colors for your Third Party Servers in our Forum we may collect your email address in connection with your Third Party Server’s information (see below)

When You Play Our Game. When you play our Game we automatically collect the following information from you to operate and improve the Game, improve your playing experience of our Game, or provide support to you when the Game crashes.

IP address
SteamID
Crash reports (for example operating system, your hardware devices, time and cause of the crash) if you choose to send us these

When You Set Up And Use A Third Party Server. When you set up a Third Party Server, we automatically collect information about your Third Party Server to operate and improve the Game and the servers or to provide support to you when the Game crashes

Third Party Server IP-Address
Server information (such as the hostname, the port version, the server password (if applicable), the mod, the number of players on the Third Party Server, date of registration)
Third Party Server’s Operating System

How We Share Your Information With Third Parties

Our Sharing Policy. We may share your Personal Information for the purposes described in this Privacy Policy to our subsidiaries or successors and affiliated third parties. We will only share your Personal Information beyond that with your consent or in the following events: to prevent an emergency, to prevent harm to others, to respond to legal requirements, to protect or enforce our rights and policies, to protect or enforce the rights of a third party, or as required or permitted by law (including, without limitation, to comply with a subpoena or court order). We will treat your Personal Information as subject to the protections described in this policy.

We may transfer Personal Information for processing in countries in which the privacy laws may not be as comprehensive as those in the country where you reside or are a citizen. If you have accessed our Service from within the EEA, additional rules apply to the transfer of your Personal Information (see below).

Sharing of Forum Content and Game Chat Logs. When you submit content (such as a post or comment) to the Forum or through the Game chat feature, any visitors to and users of our Services will be able to see that content, the username associated with the content, and the date and time you originally submitted the content. We may allow other websites to embed public Forum content via our embed tools. We may also allow third parties to access public Forum content.

Third Party Service Providers. We contract with third parties who help us with our Services. Currently the third parties are:

Google Analytics to operate automatic collection during your use of our Services. See how we and Google Analytics protect your information above under “Information We Collect Automatically From You.”

Stopforumspam to ensure that our Forum stays spam free. See how we and Stopforumspam protect your information above under “Information We Collect Automatically From You.”

Akismet to ensure that our Forum stays spam free. See how we and Akismet protect your information above under “Information We Collect Automatically From You.”

Cloudflare to ensure safe use of our Services, Cloudflare tracks all data and information that we collect and process. See how Cloudflare protect this information under https://www.cloudflare.com/de-de/privacypolicy/. We also have signed a data processing agreement with Cloudflare protecting you during Cloudflare’s use of this information.

OVH Servers for our Game and Third Party Servers where we save all Game related and Third Party Server related information that you share with us and that we automatically collect from you to allow the operation of and provide you with the Game experiences. See how OVH protects this information under https://us.ovhcloud.com/legal/privacy-policy.

Paypal for our Third Party Servers to allow payments of yours to improve your use of your Third Party Servers. You can see PayPal’s privacy policy here https://www.paypal.com/us/webapps/mpp/ua/privacy-full

Steam as platform for our Game to allow you to play the Game. You can see Steam’s privacy policy here https://store.steampowered.com/privacy_agreement/

We take commercially reasonable precautions to prevent such third parties from disclosing your Personal Information. Their use of this information is contractually bound to the purposes of this Privacy Policy and their own privacy policy (found on their websites). However, we cannot guarantee that such third parties will not disclose your information.

No Responsibility For Third Parties. We are not responsible, and as such neither data processor nor controller pursuant to the GDPR, for the Personal Information collected and processed through Paypal, Steam, and Third Party Servers. Any Personal Information that you give to, that these third parties automatically collect from you and how these process this Personal Information is outside of our control and the protection of this Personal Information of yours is lies solely within your relationship with these third parties.

How We Protect Your Personal Information

We take reasonable measures to protect the confidentiality, security, and integrity of your information. We have implemented physical, electronic and managerial procedures in order to help safeguard and prevent unauthorized access, use, alteration, modification and/or disclosure of your information by which you can be identified.

We cannot ensure or warrant perfect security. Accordingly, we assume no liability for any disclosure of data due to errors in transmission, unauthorized third party access or other acts of third parties, or acts or omissions beyond our reasonable control.

Our Policy on Information from Children

Under Thirteen. Our Services are intended for users ages 13 and older only. Accordingly, we will not knowingly collect or use any Personal Information from children that we know to be under the age of 13. In addition, we will delete any information in our possession that we discover originates from a child under the age of 13.

Parental Controls. If you believe that your child’s Personal Information was mistakenly collected through our services, please contact us immediately at [email protected] and we will work with you to determine if this is the case and remove such information if necessary.

Your Options On How We Treat Your Personal Information

Personal Information. You may review, update, change, or delete your information that can be used to personally identify you, by requesting that we cancel your access to our Services (for example, if applicable, delete your Forum or Game Account or cancel your Crowdfunding participation) at [email protected]. You may change optional Personal Information that you enter through your Forum profile any time through your Forum account.

Cookies And Local Storage. You may delete local storage or cease our placement and use of local storage by setting your browser or internet abled device to disable local storage. Please be aware that local storage is important for your access of our Services and if you disable local storage, your access of our Service may be restricted or impossible.

Opting-Out. You may opt-out from having your Personal Information used for certain purposes. If you no longer wish to receive our newsletters and promotional communications, you may opt-out of receiving them by following the instructions included in each newsletter or communication or by emailing us at [email protected].

Retention. We retain information about you as long as it is necessary for us to fulfill the purposes outlined in this Privacy Policy. In addition, we may retain your information for an additional period as is permitted or required to (for example to comply with our legal obligations, resolve disputes, and enforce agreements). If required by applicable law, we shall delete your information when the information is no longer necessary or requested to do so.

California Privacy Rights. California Civil Code section 1798.83 permits customers who are California residents to request certain information regarding disclosure within the immediately preceding calendar year of that resident's Personal Information to third parties and in some cases affiliates for their direct marketing purposes. To make such a request, contact us through the information provided below. Please note that we are only required to respond to one request per customer each year, and we are not required to respond to requests made by means other than through the email address. For your protection, you will be required to provide proof of your identity to obtain a copy of your Personal Information.

Rules When You Access the Service from Within the EEA

If you access our Service from within an EEA Member State, the following privacy rules apply to you.

The Purposes For Which We Collect Information From You. We only process your Personal Information if we have a lawful purpose pursuant to Article 6(1) GDPR. The following lawful purposes apply to such information that we collect from you:

Necessary Collection To Perform Services (Article 6(1)(b) GDPR). We need the Personal Information that we collect for our Website, Forum, DevWiki, Game and Third Party Servers in order to fulfill our obligations and perform the services that you and we agreed upon for our Services.
Other Purposes. We may process your information when we are legally obliged to under GDPR Article 6(1)(c) (for example for tax purposes), it is necessary in order to protect the vital interests of you or someone else under GDPR Article 6(1)(d), it is necessary in public interest under GDPR(6)(e), or for security reasons, to better understand your and others interest and preferences for our Services and improve our Services, for internal purposes (for example for auditing), and to secure and enforce our rights under GDPR Article 6(1)(f).

Your Data Rights. You have the right to correct, update and change (if the information we process is incorrect), or delete Personal Information or demand from us to release such information, as well as restrict how we use or entirely end the use such information, by sending an email to [email protected]. Your rights, however, may be limited, for example we will keep Personal Information if, at the time or foreseeable future, it is necessary for us to establish, exercise, or defend against a legal claim.

Withdrawing Consent. If we have received your information from you because of your explicit consent, you can withdraw this consent at any time by sending an email to [email protected].

Transferring and Sharing Data. We will never transfer your Personal Information to a third party or a successor of ours that resides in a country that does not adhere or cannot guarantee the same privacy protection standards as provided by the GDPR. Currently we share your Personal Information with the following parties outside of the EEA, all of which protect your rights pursuant to the GDPR:

We share the Personal Information that we collect automatically through your use of our Service with Google LLC for purposes of helping to optimize our Service, to provide you with support when you encounter problems using our Service. Google LLC is located in the US and applies the safeguards pursuant to the EU-US Privacy Shield. You can view Google LLC privacy protection standards for Google Analytics at https://support.google.com/analytics/answer/ 6004245?hl=en.

We share your Forum username, IP address, and Forum posts with Akismet, which is controlled by Automattic Inc., for purposes of your use of our Forum without any spam interruption. Automattic Inc. is located in the US and applies the safeguards pursuant to the EU-US Privacy Shield. You can view Automattic Inc.’s privacy protection standards for Akismet at https://automattic.com/privacy/?utm_source=akismet&utm_medium =automattic_referred&utm_campaign=privacy_page.

We share all of the personal information with Cloudflare Inc. for purposes of guaranteeing the security and the safe use of our Services. Cloudflare Inc. is located in the US and complies with the GDPR through a data processing agreement with us which legally binds Cloudflare Inc. to comply with the GDPR. You can view Cloudflare Inc. privacy protection standards at https://www.cloudflare.com/de-de/privacypolicy/

Parental Control. Children Under Sixteen. We do not acquire Personal Information based on consent from children under the age of sixteen. If you believe that your child’s Personal Information was mistakenly collected through our Service, please contact us immediately at [email protected] and we will work with you to determine if this is the case and grant you the rights under this Section.

Liability For Data Breach By Third Parties. If we share your Personal Information with a third party that processes the information on our behalf, we will be liable for that third party’s processing of your information in violation of the GDPR and this Privacy Policy, unless we can prove that we are not responsible for the event giving rise to the damage.

Complaint. If you believe that your rights described in this Privacy Policy are violated or you believe that we have not held ourselves to the standards described in this Privacy Policy or under the GDPR, you have the right to lodge a complaint with the respective supervisory authority in the country of your residence.

Changes to our Privacy Policy

We may make changes to this Privacy Policy from time to time. If so, we will notify you of any material changes by email and posting a notice within our Services. If you receive notification of a change in our Privacy Policy, you must review the new Privacy Policy carefully to make sure you understand our practices and procedures. We raise your attention that you may not be able to receive notices from us, including such of changes to the Privacy Policy, if your cookies are disabled.

Contact

For further information on our Privacy Policy, or for questions or requests on information that we may have collected from you, please contact us at [email protected].

Blue Mountains GmbH

Münchener Str. 67

83395 Freilassing, Germany

Commercial Register: Traunstein District Court, HRB 26988

Last updated: June 24, 2019

Announcement