qlstats.net shuts down on May 24, 2018
On May 25th, 2018 the European Union's General Data Protection Regulation (GDPR) will become enforceable.
This new regulation brings some legal changes that make it impractical for me to continue the operation of qlstats.net in either it's current or a modified form.
The key issues are:
Some will be pleased that the site finally shuts down, others will be sorry. There are valid reasons for both. I'd like to thank everyone who helped keeping the site alive, especially eugene for helping with the code and all of you who reported issues with the site.
I can't give the already collected data to someone else or move the site outside the EU, because that could get me into legal trouble just as well. Hence my decision is final and I will shut down the site.
This new regulation brings some legal changes that make it impractical for me to continue the operation of qlstats.net in either it's current or a modified form.
The key issues are:
- Players have to agree before data can be collected
The main purpose of qlstats.net is to provide a skill rating for team shuffling, and for that to work it needs a rating for ALL players in a match. Players who don't agree to be tracked will always have an unknown rating, making the entire system useless.
- Players have the right to get their data deleted and be forgotten
Trolls can sign up and ask for deletion every other day. Doing so they would steal my time, make the matchmaking useless and matches would have to be deleted or anonymized after they were stored, affecting all other players too.
- Information sharing
Since the rating API is open to everyone, there is no way for me to tell who is using the collected data for what purposes.
- Data export
The regulation states that there must be an automated system were a user can export all his data. This would require some additional coding that I don't have the time for.
- Severe penalties
Anyone can file a complaint at the authorities for free and I would have to spend a significant amount of time and money to deal with it.
Some will be pleased that the site finally shuts down, others will be sorry. There are valid reasons for both. I'd like to thank everyone who helped keeping the site alive, especially eugene for helping with the code and all of you who reported issues with the site.
I can't give the already collected data to someone else or move the site outside the EU, because that could get me into legal trouble just as well. Hence my decision is final and I will shut down the site.
So long, and thanks for all the fish!
- PredatH0r
- PredatH0r
The other stuff is just overhead.
You're not running a service to stop hackers, really. You're running a service to serve the 99% of people who aren't hacking. They want their data shared and they want to compare it to people who also want their data shared. And if some random hackers delete their stuff daily (make it automated), then...who cares? You provided a signal that said, "Stats don't make sense...probably a hacker." Now it will be, "Stats don't exist...probably a hacker." So, about the same.
I can appreciate you not wanting to get into trouble, but you are SOOOOOOOOOOOOOO far from the primary target here.
Do Quake Live stats collected from random aliases even count as personal data? 1) I'm not sure the quake stats count as data. 2) I'm not sure aliases count as personal.
If you want to shut the site down, cause it's a burden, then okay. But, I dunno man... I kinda think you could literally do nothing in this case and 1) probably still be within the law and 2) even if you're not, absolutely no one would care, and 3) getting Quake Live to add the blurb would protect you regardless.
Stownr
- One big stats service for duels and clan arenas. Maybe I will maintain. Planing to host in Russia.
- Another stats service for #tdmpickup tdm pickup games. Maybe Drayan will maintain.
- Another stats service for Russian CTF/TDM pickup games (already maintaining in http://stats.eugenemolotov.ru)
- Another stats service for public classic FreezeTag games. Talking with Melodeiro (game server admin) about maintaining.
- Another stats service for european Attack and Defend games (already maintaining in http://stats.eugenemolotov.ru)
- Another stats service for rocket-only ctf. Will talk to Turkey (game server admin)
- etc
All stats service will be technically independent to each other. Later I will make a discord server for stats service admins to coordinate our work.
I can maintain it if no one will.
Sounds great
I feel like the inactivity time for the leaderboard isn't fair - someone plays just one game a year in CA to keep their #1 position
maybe someone can start it all over again from outside the EU.. without you getting into trouble.
Now we will have to play QC.
Thanks pred for all your efforts, we started without qlstats and end without it, it has been A Perfect Circle.
those are only statistics linked to a pseudo.
The only one to be concerned by GDPR is Steam.
I suppose you have a small amount game servers at your work.
Qlstats services 600+ game servers. You need to have good hardware for Qlstats server
Server Qlstats has 2 vCores, 8GB RAM, 40 GB SSD + 50GB HDD add-on
Similar configuration costs $51 or 41 euro per months.
For me it's expensive.
It's not hard, it's expensive
Thanks for all the supportive feedback and help offers!"
I guess users should register here and allow tracking of data:
http://qlstats.net:8081/account
[15:49] eugene: Hi. I have checked qlstats main page. How is gdpr options investigation going on?
[22:22] PredatH0r: looks like in Austria, where i live, the government decided that a first-time violation only results in a warning and not a fine
[22:22] PredatH0r: so i have a little more time to get everything in place
-- April 29, 2018 --
[19:15] eugene: What do you mean by getting everything in place?
-- April 30, 2018 --
[02:23] PredatH0r: code changes, server changes, privacy statement, new code for automated data deletion, migration, information, reporting of gdpr violations, ...
Ps I'm a lawyer so if you want more info. can you confirm where I can send you my contact details in case you have any other concerns and need help.
https://www.gdpreu.org/the-regulation/key-concepts/personal-data/ mentions online identifiers.
The primary purpose of a steam-id is to identify a player.
Just as current German law considers an IP address (static or dynamic) as an identifier, because in both cases legal procedures exist to get information from the ISP to get the identity of the person e.g. for legal prosecution. In the same way it can be seen that Valve can link a steam-id to a natural person, i.e. based on the credit card information they have.
And just like the example with coffeeaddict@example.com, if a player puts his real name and his steam-id on his personal blog, the steam-id makes him indirectly identifiable.
That's how I read this text, the regulation and many other guidelines to GDPR and DSGVO.
I rather overshoot and interpret the GDPR to my disadvantage than going optimistic about it and then having to spend time and money on legal issues. Even if it is unlikely to happen, better safe than sorry.
Having that said, there is already another post about my plans to continue the service.
Some things will change and we will see if it will be accepted by players.
https://qlstats.net/news#50034