Ubisoft in-game data collection GDPR complaint (2025) - Revision history

Sojourna: Ref clean-up; pass on style.

2026-03-29T01:47:25Z

Ref clean-up; pass on style.

Keith: typo

2026-03-27T20:39:07Z

typo

← Older revision		Revision as of 20:39, 27 March 2026
Line 21:		Line 21:
	Ubisoft has a long history of always-online DRM. In 2010, the company required a persistent internet connection to play ''Assassin's Creed II'' and ''Silent Hunter 5'' on PC. A denial-of-service attack on Ubisoft's authentication servers that March disrupted access to single-player games for legitimate buyers<ref name="guardian-2010">{{Cite web \|date=2010-03-09 \|title=Ubisoft apologises after attackers block games \|url=https://www.theguardian.com/technology/2010/mar/09/ubisoft-drm \|access-date=2026-03-27 \|website=The Guardian}}</ref>. Ubisoft dropped the persistent connection requirement in 2011, replacing it with a one-time launch check<ref name="gamedeveloper">{{Cite web \|last=Parkin \|first=Simon \|date=2011-01-04 \|title=Ubisoft Removes Constant Online Authentication DRM For PC Games \|url=https://www.gamedeveloper.com/game-platforms/ubisoft-removes-constant-online-authentication-drm-for-pc-games \|access-date=2026-03-27 \|website=Game Developer}}</ref>. In September 2012, Ubisoft's Chris Early confirmed the company would no longer use always-online DRM. "They're more inconvenient to our paying customers, so in listening to our players, we removed them," Early said in an interview<ref name="slashdot-2012">{{Cite web \|date=2012-09-05 \|title=Ubisoft Ditches Always-Online DRM Requirement From PC Games \|url=https://games.slashdot.org/story/12/09/05/1716230/ubisoft-ditches-always-online-drm-requirement-from-pc-games \|access-date=2026-03-27 \|website=Slashdot}}</ref>.		Ubisoft has a long history of always-online DRM. In 2010, the company required a persistent internet connection to play ''Assassin's Creed II'' and ''Silent Hunter 5'' on PC. A denial-of-service attack on Ubisoft's authentication servers that March disrupted access to single-player games for legitimate buyers<ref name="guardian-2010">{{Cite web \|date=2010-03-09 \|title=Ubisoft apologises after attackers block games \|url=https://www.theguardian.com/technology/2010/mar/09/ubisoft-drm \|access-date=2026-03-27 \|website=The Guardian}}</ref>. Ubisoft dropped the persistent connection requirement in 2011, replacing it with a one-time launch check<ref name="gamedeveloper">{{Cite web \|last=Parkin \|first=Simon \|date=2011-01-04 \|title=Ubisoft Removes Constant Online Authentication DRM For PC Games \|url=https://www.gamedeveloper.com/game-platforms/ubisoft-removes-constant-online-authentication-drm-for-pc-games \|access-date=2026-03-27 \|website=Game Developer}}</ref>. In September 2012, Ubisoft's Chris Early confirmed the company would no longer use always-online DRM. "They're more inconvenient to our paying customers, so in listening to our players, we removed them," Early said in an interview<ref name="slashdot-2012">{{Cite web \|date=2012-09-05 \|title=Ubisoft Ditches Always-Online DRM Requirement From PC Games \|url=https://games.slashdot.org/story/12/09/05/1716230/ubisoft-ditches-always-online-drm-requirement-from-pc-games \|access-date=2026-03-27 \|website=Slashdot}}</ref>.

	A notable exception ~~toi~~ this change in policy was ''The Crew'' (2014), which required a constant connection even for its single-player campaign. When Ubisoft shut down ''The Crew'' servers on 31 March 2024, [[Ubisoft#The_Crew_shutdown\|the game became permanently unplayable]]<ref name="vgc-crew">{{Cite web \|date=2024-08-20 \|title=Ubisoft says players suing over The Crew shutdown shouldn't have expected to own the game forever \|url=https://www.videogameschronicle.com/news/ubisoft-says-players-suing-over-the-crew-shutdown-shouldnt-have-expected-to-own-the-game-forever/ \|access-date=2026-03-27 \|website=VGC}}</ref>. The shutdown prompted the "[[Stop Killing Games]]" European Citizens' Initiative, which demanded the implementation of laws that require publishers to leave games in a playable state<ref name="pcgamer-skg">{{Cite web \|date=2025-06-04 \|title=Stop Killing Games' EU initiative hits 1.4 million signatures \|url=https://www.pcgamer.com/gaming-industry/game-development/stop-killing-games-eu-initiative-hits-1-4-million-signatures-and-if-at-least-1-million-are-valid-its-off-to-the-european-commission/ \|access-date=2026-03-27 \|website=PC Gamer}}</ref>.		A notable exception to this change in policy was ''The Crew'' (2014), which required a constant connection even for its single-player campaign. When Ubisoft shut down ''The Crew'' servers on 31 March 2024, [[Ubisoft#The_Crew_shutdown\|the game became permanently unplayable]]<ref name="vgc-crew">{{Cite web \|date=2024-08-20 \|title=Ubisoft says players suing over The Crew shutdown shouldn't have expected to own the game forever \|url=https://www.videogameschronicle.com/news/ubisoft-says-players-suing-over-the-crew-shutdown-shouldnt-have-expected-to-own-the-game-forever/ \|access-date=2026-03-27 \|website=VGC}}</ref>. The shutdown prompted the "[[Stop Killing Games]]" European Citizens' Initiative, which demanded the implementation of laws that require publishers to leave games in a playable state<ref name="pcgamer-skg">{{Cite web \|date=2025-06-04 \|title=Stop Killing Games' EU initiative hits 1.4 million signatures \|url=https://www.pcgamer.com/gaming-industry/game-development/stop-killing-games-eu-initiative-hits-1-4-million-signatures-and-if-at-least-1-million-are-valid-its-off-to-the-european-commission/ \|access-date=2026-03-27 \|website=PC Gamer}}</ref>.

	== Network traffic analysis ==		== Network traffic analysis ==

Keith: Keith moved page Ubisoft forces players in single-player games to be connected to the internet to collect data to Ubisoft in-game data collection GDPR complaint (2025): trying to make it a bit less editorial, I think someone could probably find a more elegant way of putting it though

2026-03-27T19:54:59Z

Keith moved page Ubisoft forces players in single-player games to be connected to the internet to collect data to Ubisoft in-game data collection GDPR complaint (2025): trying to make it a bit less editorial, I think someone could probably find a more elegant way of putting it though

← Older revision	Revision as of 19:54, 27 March 2026
(No difference)

Keith: correcting things to make sure that the citations fit the article text and support it properly. reworded a couple of things for tone/neutrality. Will change the title after

2026-03-27T19:50:49Z

correcting things to make sure that the citations fit the article text and support it properly. reworded a couple of things for tone/neutrality. Will change the title after

← Older revision		Revision as of 19:50, 27 March 2026
Line 11:		Line 11:
	\|ArticleType=Product		\|ArticleType=Product
	\|Type=Privacy		\|Type=Privacy
	\|Description=Ubisoft forces single-player games online to collect player data; NOYB filed GDPR complaint after user found 150 DNS packages sent in 10 minutes		\|Description=Ubisoft forces single-player games online to collect player data; NOYB filed GDPR complaint after user found 150 DNS packages sent in 10 minutes during a single player game
	}}		}}
	~~'''Ubisoft forces players in single-player games to be connected to the internet to collect data.'''~~ In September 2024, a player who purchased ''Far Cry Primal'' on Steam discovered that the game would not launch without logging into a [[Ubisoft]] account, despite the game having no online features. The player monitored network traffic during a 10-minute session and found 150 DNS queries and responses exchanged with external servers including Google, Amazon, and Datadog<ref name="noyb-complaint">{{Cite web \|url=https://noyb.eu/sites/default/files/2025-04/Ubisoft_complaint_EN_redacted.pdf \|title=Complaint against Ubisoft: Article 6 GDPR (Case C-098) \|author=NOYB \|date=2025-04-24 \|access-date=2026-03-27 \|website=noyb.eu \|url-status=live \|archive-url=https://web.archive.org/web/20250424083407/https://noyb.eu/sites/default/files/2025-04/Ubisoft_complaint_EN_redacted.pdf \|archive-date=2025-04-24}}</ref>. On 24 April 2025, [[NOYB]] filed a [[GDPR]] complaint with the Austrian Data Protection Authority on the player's behalf, alleging that Ubisoft collects personal data without a valid legal basis<ref name="noyb-press">{{Cite web \|url=https://noyb.eu/en/play-alone-ubisoft-still-watching-you \|title=Like to play alone? Ubisoft is still watching you! \|author=NOYB \|date=2025-04-24 \|access-date=2026-03-27 \|website=noyb.eu \|url-status=live \|archive-url=https://web.archive.org/web/20250424092126/https://noyb.eu/en/play-alone-ubisoft-still-watching-you \|archive-date=2025-04-24}}</ref>.		In September 2024, a player who purchased ''Far Cry Primal'' on Steam discovered that the game would not launch without logging into a [[Ubisoft]] account, despite the game having no online features. The player monitored network traffic during a 10-minute session and found 150 DNS queries and responses exchanged with external servers including Google, Amazon, and Datadog<ref name="noyb-complaint">{{Cite web \|url=https://noyb.eu/sites/default/files/2025-04/Ubisoft_complaint_EN_redacted.pdf \|title=Complaint against Ubisoft: Article 6 GDPR (Case C-098) \|author=NOYB \|date=2025-04-24 \|access-date=2026-03-27 \|website=noyb.eu \|url-status=live \|archive-url=https://web.archive.org/web/20250424083407/https://noyb.eu/sites/default/files/2025-04/Ubisoft_complaint_EN_redacted.pdf \|archive-date=2025-04-24}}</ref>. On 24 April 2025, [[NOYB]] filed a [[GDPR]] complaint with the Austrian Data Protection Authority on the player's behalf, alleging that Ubisoft collects personal data without a valid legal basis<ref name="noyb-press">{{Cite web \|url=https://noyb.eu/en/play-alone-ubisoft-still-watching-you \|title=Like to play alone? Ubisoft is still watching you! \|author=NOYB \|date=2025-04-24 \|access-date=2026-03-27 \|website=noyb.eu \|url-status=live \|archive-url=https://web.archive.org/web/20250424092126/https://noyb.eu/en/play-alone-ubisoft-still-watching-you \|archive-date=2025-04-24}}</ref>.

	== Background ==		== Background ==

	Ubisoft Connect (formerly Uplay) is Ubisoft's proprietary launcher and digital rights management client. Even when a player buys a Ubisoft game through a third-party store like Steam, the game ~~forces~~ installation of Ubisoft Connect and ~~requires~~ an account login before it will start<ref name="noyb-press" />. This applies to titles with no multiplayer or online features.		Ubisoft Connect (formerly Uplay) is Ubisoft's proprietary launcher and digital rights management client. Even when a player buys a Ubisoft game through a third-party store like Steam, the game requires installation of Ubisoft Connect and an account login before it will start<ref name="noyb-press" />. This applies to titles with no multiplayer or online features.

	Ubisoft has a long history of always-online DRM. In 2010, the company required a persistent internet connection to play ''Assassin's Creed II'' and ''Silent Hunter 5'' on PC. A denial-of-service attack on Ubisoft's authentication servers that March disrupted access to single-player games for legitimate buyers<ref name="guardian-2010">{{Cite web \|date=2010-03-09 \|title=Ubisoft apologises after attackers block games \|url=https://www.theguardian.com/technology/2010/mar/09/ubisoft-drm \|access-date=2026-03-27 \|website=The Guardian}}</ref>. Ubisoft dropped the persistent connection requirement in 2011, replacing it with a one-time launch check<ref name="gamedeveloper">{{Cite web \|last=Parkin \|first=Simon \|date=2011-01-04 \|title=Ubisoft Removes Constant Online Authentication DRM For PC Games \|url=https://www.gamedeveloper.com/game-platforms/ubisoft-removes-constant-online-authentication-drm-for-pc-games \|access-date=2026-03-27 \|website=Game Developer}}</ref>. In September 2012, Ubisoft's Chris Early confirmed the company would no longer use always-online DRM. "They're more inconvenient to our paying customers, so in listening to our players, we removed them," Early said in an interview<ref name="slashdot-2012">{{Cite web \|date=2012-09-05 \|title=Ubisoft Ditches Always-Online DRM Requirement From PC Games \|url=https://games.slashdot.org/story/12/09/05/1716230/ubisoft-ditches-always-online-drm-requirement-from-pc-games \|access-date=2026-03-27 \|website=Slashdot}}</ref>.		Ubisoft has a long history of always-online DRM. In 2010, the company required a persistent internet connection to play ''Assassin's Creed II'' and ''Silent Hunter 5'' on PC. A denial-of-service attack on Ubisoft's authentication servers that March disrupted access to single-player games for legitimate buyers<ref name="guardian-2010">{{Cite web \|date=2010-03-09 \|title=Ubisoft apologises after attackers block games \|url=https://www.theguardian.com/technology/2010/mar/09/ubisoft-drm \|access-date=2026-03-27 \|website=The Guardian}}</ref>. Ubisoft dropped the persistent connection requirement in 2011, replacing it with a one-time launch check<ref name="gamedeveloper">{{Cite web \|last=Parkin \|first=Simon \|date=2011-01-04 \|title=Ubisoft Removes Constant Online Authentication DRM For PC Games \|url=https://www.gamedeveloper.com/game-platforms/ubisoft-removes-constant-online-authentication-drm-for-pc-games \|access-date=2026-03-27 \|website=Game Developer}}</ref>. In September 2012, Ubisoft's Chris Early confirmed the company would no longer use always-online DRM. "They're more inconvenient to our paying customers, so in listening to our players, we removed them," Early said in an interview<ref name="slashdot-2012">{{Cite web \|date=2012-09-05 \|title=Ubisoft Ditches Always-Online DRM Requirement From PC Games \|url=https://games.slashdot.org/story/12/09/05/1716230/ubisoft-ditches-always-online-drm-requirement-from-pc-games \|access-date=2026-03-27 \|website=Slashdot}}</ref>.

	~~The company reversed that commitment with~~ ''The Crew'' in 2014, which required a constant connection even for its single-player campaign. When Ubisoft shut down ''The Crew'' servers on 31 March 2024, the game became permanently unplayable<ref name="vgc-crew">{{Cite web \|date=2024-08-20 \|title=Ubisoft says players suing over The Crew shutdown shouldn't have expected to own the game forever \|url=https://www.videogameschronicle.com/news/ubisoft-says-players-suing-over-the-crew-shutdown-shouldnt-have-expected-to-own-the-game-forever/ \|access-date=2026-03-27 \|website=VGC}}</ref>. The shutdown prompted the "Stop Killing Games" European Citizens' Initiative, which ~~collected over 1.29 million verified signatures demanding~~ laws that require publishers to leave games in a playable state<ref name="pcgamer-skg">{{Cite web \|date=2025-06-04 \|title=Stop Killing Games' EU initiative hits 1.4 million signatures \|url=https://www.pcgamer.com/gaming-industry/game-development/stop-killing-games-eu-initiative-hits-1-4-million-signatures-and-if-at-least-1-million-are-valid-its-off-to-the-european-commission/ \|access-date=2026-03-27 \|website=PC Gamer}}</ref>.		A notable exception toi this change in policy was ''The Crew'' (2014), which required a constant connection even for its single-player campaign. When Ubisoft shut down ''The Crew'' servers on 31 March 2024, [[Ubisoft#The_Crew_shutdown\|the game became permanently unplayable]]<ref name="vgc-crew">{{Cite web \|date=2024-08-20 \|title=Ubisoft says players suing over The Crew shutdown shouldn't have expected to own the game forever \|url=https://www.videogameschronicle.com/news/ubisoft-says-players-suing-over-the-crew-shutdown-shouldnt-have-expected-to-own-the-game-forever/ \|access-date=2026-03-27 \|website=VGC}}</ref>. The shutdown prompted the "[[Stop Killing Games]]" European Citizens' Initiative, which demanded the implementation of laws that require publishers to leave games in a playable state<ref name="pcgamer-skg">{{Cite web \|date=2025-06-04 \|title=Stop Killing Games' EU initiative hits 1.4 million signatures \|url=https://www.pcgamer.com/gaming-industry/game-development/stop-killing-games-eu-initiative-hits-1-4-million-signatures-and-if-at-least-1-million-are-valid-its-off-to-the-european-commission/ \|access-date=2026-03-27 \|website=PC Gamer}}</ref>.

	== Network traffic analysis ==		== Network traffic analysis ==
Line 48:		Line 48:
	The complaint also cites Article 5(3) of the e-Privacy Directive (2002/58/EC), which requires user consent before accessing data from their device unless the access is strictly necessary to provide a service the user requested<ref name="noyb-complaint" />. Since ''Far Cry Primal'' has no online features, the data collection doesn't meet this threshold.		The complaint also cites Article 5(3) of the e-Privacy Directive (2002/58/EC), which requires user consent before accessing data from their device unless the access is strictly necessary to provide a service the user requested<ref name="noyb-complaint" />. Since ''Far Cry Primal'' has no online features, the data collection doesn't meet this threshold.

	NOYB requested that the DSB declare Ubisoft in violation of Article 6(1), order the deletion of all unlawfully processed personal data, ban the unauthorized ~~tracking~~, and impose an administrative fine. Based on Ubisoft's annual revenue of over €2 billion, the maximum fine under GDPR Article 83 would be approximately €92 million<ref name="noyb-press" /><ref name="register">{{Cite web \|last=Vigliarolo \|first=Brandon \|date=2025-04-24 \|title=Assassin's Creed maker faces GDPR complaint for forcing single-player gamers online \|url=https://www.theregister.com/2025/04/24/ubisoft_noyb_complaint/ \|access-date=2026-03-27 \|website=The Register}}</ref>.		NOYB requested that the DSB declare Ubisoft in violation of Article 6(1), order the deletion of all unlawfully processed personal data, ban the unauthorized data processing, and impose an administrative fine. Based on Ubisoft's annual revenue of over €2 billion, the maximum fine under GDPR Article 83 would be approximately €92 million<ref name="noyb-press" /><ref name="register">{{Cite web \|last=Vigliarolo \|first=Brandon \|date=2025-04-24 \|title=Assassin's Creed maker faces GDPR complaint for forcing single-player gamers online \|url=https://www.theregister.com/2025/04/24/ubisoft_noyb_complaint/ \|access-date=2026-03-27 \|website=The Register}}</ref>.

	No public decision from the DSB had been reported as of early 2026.		No public decision from the DSB had been reported as of early 2026.
Line 56:		Line 56:
	Ubisoft responded publicly on 29 April 2025: "We are aware of the complaint and are looking into it. Ubisoft is committed to protecting players' personal data on our websites and games. For games that support offline modes, an Internet connection is required only at the initial launch."<ref name="eurogamer">{{Cite web \|last=Phillips \|first=Tom \|date=2025-04-29 \|title=Privacy firm files Ubisoft legal complaint over data collection, forced online in single-player games \|url=https://www.eurogamer.net/privacy-firm-files-ubisoft-legal-complaint-over-data-collection-forced-online-in-single-player-games \|access-date=2026-03-27 \|website=Eurogamer}}</ref>		Ubisoft responded publicly on 29 April 2025: "We are aware of the complaint and are looking into it. Ubisoft is committed to protecting players' personal data on our websites and games. For games that support offline modes, an Internet connection is required only at the initial launch."<ref name="eurogamer">{{Cite web \|last=Phillips \|first=Tom \|date=2025-04-29 \|title=Privacy firm files Ubisoft legal complaint over data collection, forced online in single-player games \|url=https://www.eurogamer.net/privacy-firm-files-ubisoft-legal-complaint-over-data-collection-forced-online-in-single-player-games \|access-date=2026-03-27 \|website=Eurogamer}}</ref>

	NOYB~~'s response~~ noted that the advertised offline mode did not work for the complainant, and that the network traffic analysis showed data collection ~~during gameplay~~, not only at launch<ref name="register" />.		NOYB noted that the advertised offline mode did not work for the complainant, and that the network traffic analysis showed data collection over longer periods, not only at launch<ref name="register" />.

	== References ==		== References ==

Louis: complete rewrite, was a stub with 3 citations and broken chronology. sourced everything from the noyb complaint pdf, added background on ubisoft's drm history, the crew shutdown, network traffic analysis details, and ubisoft's response. killed the slop.

2026-03-27T19:02:59Z

complete rewrite, was a stub with 3 citations and broken chronology. sourced everything from the noyb complaint pdf, added background on ubisoft's drm history, the crew shutdown, network traffic analysis details, and ubisoft's response. killed the slop.

← Older revision		Revision as of 19:02, 27 March 2026
Line 1:		Line 1:
	{{~~StubNotice~~}}		{{#seo:
			\|description=NOYB filed a GDPR complaint against Ubisoft after a player found Far Cry Primal sending 150 DNS packages to Google, Amazon, and Datadog during single-player gameplay.
			}}
	{{IncidentCargo		{{IncidentCargo
	\|Company=Ubisoft		\|Company=Ubisoft
	\|StartDate=2025-04-24		\|StartDate=2025-04-24
	\|EndDate=		\|EndDate=
	\|Status=		\|Status=Active
	\|ProductLine=		\|ProductLine=Far Cry
	\|Product=		\|Product=Far Cry Primal
	\|ArticleType=		\|ArticleType=Product
	\|Type=		\|Type=Privacy
	\|Description=		\|Description=Ubisoft forces single-player games online to collect player data; NOYB filed GDPR complaint after user found 150 DNS packages sent in 10 minutes
	}}		}}
	[[Ubisoft]] — a ~~French~~ company that ~~develops~~, ~~publishes~~, ~~and distributes video~~ games ~~— forces users~~ to ~~be connected~~ to the internet, ~~even~~ in single-player games, and ~~collects~~ data without consent ~~nor prior notice~~.		'''Ubisoft forces players in single-player games to be connected to the internet to collect data.''' In September 2024, a player who purchased ''Far Cry Primal'' on Steam discovered that the game would not launch without logging into a [[Ubisoft]] account, despite the game having no online features. The player monitored network traffic during a 10-minute session and found 150 DNS queries and responses exchanged with external servers including Google, Amazon, and Datadog<ref name="noyb-complaint">{{Cite web \|url=https://noyb.eu/sites/default/files/2025-04/Ubisoft_complaint_EN_redacted.pdf \|title=Complaint against Ubisoft: Article 6 GDPR (Case C-098) \|author=NOYB \|date=2025-04-24 \|access-date=2026-03-27 \|website=noyb.eu \|url-status=live \|archive-url=https://web.archive.org/web/20250424083407/https://noyb.eu/sites/default/files/2025-04/Ubisoft_complaint_EN_redacted.pdf \|archive-date=2025-04-24}}</ref>. On 24 April 2025, [[NOYB]] filed a [[GDPR]] complaint with the Austrian Data Protection Authority on the player's behalf, alleging that Ubisoft collects personal data without a valid legal basis<ref name="noyb-press">{{Cite web \|url=https://noyb.eu/en/play-alone-ubisoft-still-watching-you \|title=Like to play alone? Ubisoft is still watching you! \|author=NOYB \|date=2025-04-24 \|access-date=2026-03-27 \|website=noyb.eu \|url-status=live \|archive-url=https://web.archive.org/web/20250424092126/https://noyb.eu/en/play-alone-ubisoft-still-watching-you \|archive-date=2025-04-24}}</ref>.

			== Background ==

			Ubisoft Connect (formerly Uplay) is Ubisoft's proprietary launcher and digital rights management client. Even when a player buys a Ubisoft game through a third-party store like Steam, the game forces installation of Ubisoft Connect and requires an account login before it will start<ref name="noyb-press" />. This applies to titles with no multiplayer or online features.

			Ubisoft has a long history of always-online DRM. In 2010, the company required a persistent internet connection to play ''Assassin's Creed II'' and ''Silent Hunter 5'' on PC. A denial-of-service attack on Ubisoft's authentication servers that March disrupted access to single-player games for legitimate buyers<ref name="guardian-2010">{{Cite web \|date=2010-03-09 \|title=Ubisoft apologises after attackers block games \|url=https://www.theguardian.com/technology/2010/mar/09/ubisoft-drm \|access-date=2026-03-27 \|website=The Guardian}}</ref>. Ubisoft dropped the persistent connection requirement in 2011, replacing it with a one-time launch check<ref name="gamedeveloper">{{Cite web \|last=Parkin \|first=Simon \|date=2011-01-04 \|title=Ubisoft Removes Constant Online Authentication DRM For PC Games \|url=https://www.gamedeveloper.com/game-platforms/ubisoft-removes-constant-online-authentication-drm-for-pc-games \|access-date=2026-03-27 \|website=Game Developer}}</ref>. In September 2012, Ubisoft's Chris Early confirmed the company would no longer use always-online DRM. "They're more inconvenient to our paying customers, so in listening to our players, we removed them," Early said in an interview<ref name="slashdot-2012">{{Cite web \|date=2012-09-05 \|title=Ubisoft Ditches Always-Online DRM Requirement From PC Games \|url=https://games.slashdot.org/story/12/09/05/1716230/ubisoft-ditches-always-online-drm-requirement-from-pc-games \|access-date=2026-03-27 \|website=Slashdot}}</ref>.

			The company reversed that commitment with ''The Crew'' in 2014, which required a constant connection even for its single-player campaign. When Ubisoft shut down ''The Crew'' servers on 31 March 2024, the game became permanently unplayable<ref name="vgc-crew">{{Cite web \|date=2024-08-20 \|title=Ubisoft says players suing over The Crew shutdown shouldn't have expected to own the game forever \|url=https://www.videogameschronicle.com/news/ubisoft-says-players-suing-over-the-crew-shutdown-shouldnt-have-expected-to-own-the-game-forever/ \|access-date=2026-03-27 \|website=VGC}}</ref>. The shutdown prompted the "Stop Killing Games" European Citizens' Initiative, which collected over 1.29 million verified signatures demanding laws that require publishers to leave games in a playable state<ref name="pcgamer-skg">{{Cite web \|date=2025-06-04 \|title=Stop Killing Games' EU initiative hits 1.4 million signatures \|url=https://www.pcgamer.com/gaming-industry/game-development/stop-killing-games-eu-initiative-hits-1-4-million-signatures-and-if-at-least-1-million-are-valid-its-off-to-the-european-commission/ \|access-date=2026-03-27 \|website=PC Gamer}}</ref>.

			== Network traffic analysis ==
			[[File:NOYB lawsuit.png\|alt=NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.\|thumb\|NOYB's complaint filing, with relevant GDPR articles highlighted.]]

			On 13 September 2024, an Austrian user played ''Far Cry Primal'', a single-player game with no multiplayer features, purchased through Steam. The game refused to launch without an internet connection and a login to Ubisoft Connect<ref name="noyb-complaint" />.

			The user captured network traffic during a 10-minute gameplay session. The packet capture revealed 150 unique DNS packages (queries and responses) and 56 requests to initiate connections between the user's computer and external servers<ref name="noyb-complaint" />. Recipients of the data included Google, Amazon, and Datadog, a US-based cloud analytics firm. Some data transfers were labeled "metrics" in the traffic headers. All transmissions were encrypted with TLS, so the exact contents were not visible to the user<ref name="noyb-complaint" />.

			The user then exercised their GDPR Article 15 right of access, forcing Ubisoft to disclose what data it held on them. The returned file (<code>uplay_traffic_data.csv</code>) confirmed that Ubisoft records the user's unique ID, the exact time they launched the game, the exact time they quit, and the total session duration<ref name="noyb-complaint" /><ref name="noyb-press" />.

			Ubisoft's own EULA goes further. It states that collected data "may contain the following, without limitation: mobile device unique identity or other device identifiers and settings, carrier, operating system, localization information, date and time spent on the Product, game scores, game metrics and statistics, feature usage, advertising conversion rates, monetization rate, purchase history and other similar information"<ref name="noyb-complaint" />.

			On 27 September 2024, the user contacted Ubisoft customer support. Ubisoft replied that the data sent at game launch is "an ownership check on our servers to validate that the player's account owns the game they're trying to launch" and linked to a help page about playing games offline<ref name="noyb-complaint" /><ref name="next-ink">{{Cite web \|last=Laurent \|first=Alexandre \|date=2025-04-25 \|title=Mandatory connection for single-player games: Ubisoft sued for non-compliance with the GDPR \|url=https://next.ink/182331/connexion-obligatoire-pour-jeux-solo-ubisoft-poursuivi-pour-non-respect-du-rgpd/ \|website=Next.ink \|url-status=live \|archive-url=https://web.archive.org/web/20250425100115/https://next.ink/182331/connexion-obligatoire-pour-jeux-solo-ubisoft-poursuivi-pour-non-respect-du-rgpd/ \|archive-date=2025-04-25}}</ref>. Ubisoft did not explain why data was being sent to Google, Amazon, or Datadog, and did not address the ongoing data collection during gameplay<ref name="noyb-complaint" />.

			== NOYB complaint ==

			On 24 April 2025, NOYB filed a complaint (Case C-098) with the Austrian Data Protection Authority (Datenschutzbehorde, DSB) on the user's behalf under GDPR Article 80(1)<ref name="noyb-complaint" />. The complaint targets Ubisoft Entertainment SA, headquartered at 28 Rue Armand Carrel, 93100 Montreuil, France<ref name="noyb-complaint" />.

			NOYB alleges that Ubisoft violated GDPR Article 6(1) by processing personal data without a valid legal basis. The complaint makes three arguments against Ubisoft's "ownership verification" defense<ref name="noyb-press" />:

			* Steam already verifies game ownership at purchase and at first launch, making a second verification by Ubisoft redundant<ref name="noyb-complaint" /><ref name="bitdefender">{{Cite web \|date=2025-04-28 \|title=Ubisoft Accused of Unlawfully Collecting Player Data in Single-Player Games \|url=https://www.bitdefender.com/en-us/blog/hotforsecurity/ubisoft-unlawfully-collecting-data-far-cry \|access-date=2026-03-27 \|website=Bitdefender}}</ref>.
			* Ubisoft itself offers a hidden offline mode for some games. If the game can run offline, the online check can't be "necessary"<ref name="noyb-complaint" />.
			* Even if verification at launch were justified, it doesn't explain why data is collected continuously during gameplay and sent to third parties like Google and Datadog<ref name="noyb-complaint" />.

			The complaint also cites Article 5(3) of the e-Privacy Directive (2002/58/EC), which requires user consent before accessing data from their device unless the access is strictly necessary to provide a service the user requested<ref name="noyb-complaint" />. Since ''Far Cry Primal'' has no online features, the data collection doesn't meet this threshold.

			NOYB requested that the DSB declare Ubisoft in violation of Article 6(1), order the deletion of all unlawfully processed personal data, ban the unauthorized tracking, and impose an administrative fine. Based on Ubisoft's annual revenue of over €2 billion, the maximum fine under GDPR Article 83 would be approximately €92 million<ref name="noyb-press" /><ref name="register">{{Cite web \|last=Vigliarolo \|first=Brandon \|date=2025-04-24 \|title=Assassin's Creed maker faces GDPR complaint for forcing single-player gamers online \|url=https://www.theregister.com/2025/04/24/ubisoft_noyb_complaint/ \|access-date=2026-03-27 \|website=The Register}}</ref>.

			No public decision from the DSB had been reported as of early 2026.

			=== Ubisoft's response ===

	==~~Background~~==		Ubisoft responded publicly on 29 April 2025: "We are aware of the complaint and are looking into it. Ubisoft is committed to protecting players' personal data on our websites and games. For games that support offline modes, an Internet connection is required only at the initial launch."<ref name="eurogamer">{{Cite web \|last=Phillips \|first=Tom \|date=2025-04-29 \|title=Privacy firm files Ubisoft legal complaint over data collection, forced online in single-player games \|url=https://www.eurogamer.net/privacy-firm-files-ubisoft-legal-complaint-over-data-collection-forced-online-in-single-player-games \|access-date=2026-03-27 \|website=Eurogamer}}</ref>
	~~On Thursday 24 of April~~ 2025, ~~[[NOYB]] — an Austrian~~ privacy ~~protection organization — has filled a~~ complaint ~~against [[Ubisoft]] regarding its illegal collecting and usage of players' personal~~ data.

	~~==Consumer Response==~~		NOYB's response noted that the advertised offline mode did not work for the complainant, and that the network traffic analysis showed data collection during gameplay, not only at launch<ref name="register" />.
	Near the end of September 2024, an anonymous user of Ubisoft noticed that they could not launch a single-player video game that he owned without first connecting to the internet. He also noticed that the data controller was collecting data about him during his gaming session<ref name=":0">{{Cite news \|last=Laurent \|first=Alexandre \|date=2025-04-25 \|title=Mandatory connection for single-player games: Ubisoft sued for non-compliance with the GDPR \|url=https://next.ink/182331/connexion-obligatoire-pour-jeux-solo-ubisoft-poursuivi-pour-non-respect-du-rgpd/ \|url-status=live \|archive-url=https://web.archive.org/web/20250425100115/https://next.ink/182331/connexion-obligatoire-pour-jeux-solo-ubisoft-poursuivi-pour-non-respect-du-rgpd/ \|archive-date=2025-04-25}}</ref>.
	~~[[File:NOYB lawsuit.png\|alt=~~NOYB's ~~lawsuit with~~ the ~~13 and 14 article. Relevant information are highlighted.\|thumb\|NOYB's lawsuit with~~ the ~~13 and 14 article. Relevant information are highlighted.]]~~
	~~The~~ complainant, ~~who is “tech-savvy” according to [[NOYB]], simultaneously monitors~~ the network traffic ~~associated with Far Cry Primal and finds that his game is sending packets to remote servers. He mentions 150 connections in the space of ten minutes and identifies Google~~, ~~Amazon, and Datadog~~<ref name=":0" /><ref>{{Cite web \|last=NOYB \|date=2025-04-24 \|title=Like to play alone? Ubisoft is still watching you! \|url=https://noyb.eu/en/play-alone-ubisoft-still-watching-you \|url-status=live \|archive-url=https://web.archive.org/web/20250424092126/https://noyb.eu/en/play-alone-ubisoft-still-watching-you \|archive-date=2025-04-24}}</ref><ref>{{Cite web \|last=NOYB \|first=NOYB \|date=2025-04-24 \|title=Lawsuit PDF \|url=https://noyb.eu/sites/default/files/2025-04/Ubisoft_complaint_EN_redacted.pdf \|url-status=live \|archive-url=https://web.archive.org/web/20250424083407/https://noyb.eu/sites/default/files/2025-04/Ubisoft_complaint_EN_redacted.pdf \|archive-date=2025-04-24}}</ref>.

	But before asking [[NOYB]], the data subject contacted the controller’s customer support, asking about his findings and that they tell him why are they using his personal data. Unfortunately, Ubisoft did not answer completely to his question, only saying that his data is collected to verify ownership of the game and never mentions why Google is one of the third parties.		== References ==
	==References==

	~~<references />~~		{{reflist}}
	[[Category:Data collection]]		[[Category:Data collection]]
	[[Category:Ubisoft]]		[[Category:Ubisoft]]
			[[Category:Privacy]]

Bythmusters: Started cargo

2026-01-26T15:35:18Z

Started cargo

@@ Line 1: / Line 1: @@
 {{StubNotice}}
+{{IncidentCargo
 [[Ubisoft]] — a French company that develops, publishes, and distributes video games — forces users to be connected to the internet, even in single-player games, and collects data without consent nor prior notice.

213.78.207.234: /* References */

2026-01-05T21:33:03Z

References

← Older revision		Revision as of 21:33, 5 January 2026
Line 7:		Line 7:

	==Consumer Response==		==Consumer Response==
	Near the end of September 2024, an anonymous user of Ubisoft noticed that they could not launch a single-player video game that he owned without first connecting to the internet. He also noticed that the data controller was collecting data about him during his gaming session<ref name=":0">{{Cite news \|last=Laurent \|first=Alexandre \|date=2025-04-25 \|title=Mandatory connection for single-player games: Ubisoft sued for non-compliance with the GDPR \|url=https://next.ink/182331/connexion-obligatoire-pour-jeux-solo-ubisoft-poursuivi-pour-non-respect-du-rgpd/ \|url-status=live}}</ref>.		Near the end of September 2024, an anonymous user of Ubisoft noticed that they could not launch a single-player video game that he owned without first connecting to the internet. He also noticed that the data controller was collecting data about him during his gaming session<ref name=":0">{{Cite news \|last=Laurent \|first=Alexandre \|date=2025-04-25 \|title=Mandatory connection for single-player games: Ubisoft sued for non-compliance with the GDPR \|url=https://next.ink/182331/connexion-obligatoire-pour-jeux-solo-ubisoft-poursuivi-pour-non-respect-du-rgpd/ \|url-status=live \|archive-url=https://web.archive.org/web/20250425100115/https://next.ink/182331/connexion-obligatoire-pour-jeux-solo-ubisoft-poursuivi-pour-non-respect-du-rgpd/ \|archive-date=2025-04-25}}</ref>.
	[[File:NOYB lawsuit.png\|alt=NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.\|thumb\|NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.]]		[[File:NOYB lawsuit.png\|alt=NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.\|thumb\|NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.]]
	The complainant, who is “tech-savvy” according to [[NOYB]], simultaneously monitors the network traffic associated with Far Cry Primal and finds that his game is sending packets to remote servers. He mentions 150 connections in the space of ten minutes and identifies Google, Amazon, and Datadog<ref name=":0" /><ref>{{Cite web \|last=NOYB \|date=2025-04-24 \|title=Like to play alone? Ubisoft is still watching you! \|url=https://noyb.eu/en/play-alone-ubisoft-still-watching-you \|url-status=live}}</ref><ref>{{Cite web \|last=NOYB \|first=NOYB \|date=2025-04-24 \|title=Lawsuit PDF \|url=https://noyb.eu/sites/default/files/2025-04/Ubisoft_complaint_EN_redacted.pdf \|url-status=live}}</ref>.		The complainant, who is “tech-savvy” according to [[NOYB]], simultaneously monitors the network traffic associated with Far Cry Primal and finds that his game is sending packets to remote servers. He mentions 150 connections in the space of ten minutes and identifies Google, Amazon, and Datadog<ref name=":0" /><ref>{{Cite web \|last=NOYB \|date=2025-04-24 \|title=Like to play alone? Ubisoft is still watching you! \|url=https://noyb.eu/en/play-alone-ubisoft-still-watching-you \|url-status=live \|archive-url=https://web.archive.org/web/20250424092126/https://noyb.eu/en/play-alone-ubisoft-still-watching-you \|archive-date=2025-04-24}}</ref><ref>{{Cite web \|last=NOYB \|first=NOYB \|date=2025-04-24 \|title=Lawsuit PDF \|url=https://noyb.eu/sites/default/files/2025-04/Ubisoft_complaint_EN_redacted.pdf \|url-status=live \|archive-url=https://web.archive.org/web/20250424083407/https://noyb.eu/sites/default/files/2025-04/Ubisoft_complaint_EN_redacted.pdf \|archive-date=2025-04-24}}</ref>.

	But before asking [[NOYB]], the data subject contacted the controller’s customer support, asking about his findings and that they tell him why are they using his personal data. Unfortunately, Ubisoft did not answer completely to his question, only saying that his data is collected to verify ownership of the game and never mentions why Google is one of the third parties.		But before asking [[NOYB]], the data subject contacted the controller’s customer support, asking about his findings and that they tell him why are they using his personal data. Unfortunately, Ubisoft did not answer completely to his question, only saying that his data is collected to verify ownership of the game and never mentions why Google is one of the third parties.

AnotherConsumerRightsPerson: put something in a better place

2025-12-24T14:30:45Z

put something in a better place

← Older revision		Revision as of 14:30, 24 December 2025
Line 1:		Line 1:
	{{StubNotice}}		{{StubNotice}}

	[[Ubisoft]] forces users to be connected to the internet, even in single-player games, and collects data without consent nor prior notice.		[[Ubisoft]] — a French company that develops, publishes, and distributes video games — forces users to be connected to the internet, even in single-player games, and collects data without consent nor prior notice.

	==Background==		==Background==
	On Thursday 24 of April 2025, [[NOYB]] — an Austrian privacy protection organization — has filled a complaint against [[Ubisoft]] ~~— a French company that develops, publishes, and distributes video games —~~ regarding its illegal collecting and usage of players' personal data.		On Thursday 24 of April 2025, [[NOYB]] — an Austrian privacy protection organization — has filled a complaint against [[Ubisoft]] regarding its illegal collecting and usage of players' personal data.

	==Consumer Response==		==Consumer Response==

AnotherConsumerRightsPerson: Copyedit

2025-11-05T16:49:16Z

Copyedit

← Older revision		Revision as of 16:49, 5 November 2025
Line 1:		Line 1:
	{{StubNotice}}		{{StubNotice}}

	[[Ubisoft]] forces ~~its user~~ to be connected to the internet, even in single-player games, and collects data without consent nor prior notice.		[[Ubisoft]] forces users to be connected to the internet, even in single-player games, and collects data without consent nor prior notice.

	==Background==		==Background==
Line 7:		Line 7:

	==Consumer Response==		==Consumer Response==
	Near the end of September 2024, an anonymous user of Ubisoft ~~has~~ noticed that he could not launch a single-player video game that he owned without first connecting to the internet. He also noticed that the data controller was collecting data about him during his gaming session<ref name=":0">{{Cite news \|last=Laurent \|first=Alexandre \|date=2025-04-25 \|title=Mandatory connection for single-player games: Ubisoft sued for non-compliance with the GDPR \|url=https://next.ink/182331/connexion-obligatoire-pour-jeux-solo-ubisoft-poursuivi-pour-non-respect-du-rgpd/ \|url-status=live}}</ref>.		Near the end of September 2024, an anonymous user of Ubisoft noticed that they could not launch a single-player video game that he owned without first connecting to the internet. He also noticed that the data controller was collecting data about him during his gaming session<ref name=":0">{{Cite news \|last=Laurent \|first=Alexandre \|date=2025-04-25 \|title=Mandatory connection for single-player games: Ubisoft sued for non-compliance with the GDPR \|url=https://next.ink/182331/connexion-obligatoire-pour-jeux-solo-ubisoft-poursuivi-pour-non-respect-du-rgpd/ \|url-status=live}}</ref>.
	[[File:NOYB lawsuit.png\|alt=NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.\|thumb\|NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.]]		[[File:NOYB lawsuit.png\|alt=NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.\|thumb\|NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.]]
	The complainant, who is “tech-savvy” according to [[NOYB]], simultaneously monitors the network traffic associated with Far Cry Primal and finds that his game is sending packets to remote servers. He mentions 150 connections in the space of ten minutes and identifies Google, Amazon, and Datadog<ref name=":0" /><ref>{{Cite web \|last=NOYB \|date=2025-04-24 \|title=Like to play alone? Ubisoft is still watching you! \|url=https://noyb.eu/en/play-alone-ubisoft-still-watching-you \|url-status=live}}</ref><ref>{{Cite web \|last=NOYB \|first=NOYB \|date=2025-04-24 \|title=Lawsuit PDF \|url=https://noyb.eu/sites/default/files/2025-04/Ubisoft_complaint_EN_redacted.pdf \|url-status=live}}</ref>.		The complainant, who is “tech-savvy” according to [[NOYB]], simultaneously monitors the network traffic associated with Far Cry Primal and finds that his game is sending packets to remote servers. He mentions 150 connections in the space of ten minutes and identifies Google, Amazon, and Datadog<ref name=":0" /><ref>{{Cite web \|last=NOYB \|date=2025-04-24 \|title=Like to play alone? Ubisoft is still watching you! \|url=https://noyb.eu/en/play-alone-ubisoft-still-watching-you \|url-status=live}}</ref><ref>{{Cite web \|last=NOYB \|first=NOYB \|date=2025-04-24 \|title=Lawsuit PDF \|url=https://noyb.eu/sites/default/files/2025-04/Ubisoft_complaint_EN_redacted.pdf \|url-status=live}}</ref>.

	But before asking [[NOYB]], the data subject contacted the controller’s customer support~~. Asking~~ about his findings and that they tell him why are they using his personal data. Unfortunately, Ubisoft did not answer completely to his question, only saying that his data is collected to verify ownership of the game and never mentions why Google is one of the third parties.		But before asking [[NOYB]], the data subject contacted the controller’s customer support, asking about his findings and that they tell him why are they using his personal data. Unfortunately, Ubisoft did not answer completely to his question, only saying that his data is collected to verify ownership of the game and never mentions why Google is one of the third parties.
	==References==		==References==

AnotherConsumerRightsPerson: I’d rather that short title. This is an incident article after all.

2025-10-20T05:29:46Z

I’d rather that short title. This is an incident article after all.

← Older revision		Revision as of 05:29, 20 October 2025
Line 6:		Line 6:
	On Thursday 24 of April 2025, [[NOYB]] — an Austrian privacy protection organization — has filled a complaint against [[Ubisoft]] — a French company that develops, publishes, and distributes video games — regarding its illegal collecting and usage of players' personal data.		On Thursday 24 of April 2025, [[NOYB]] — an Austrian privacy protection organization — has filled a complaint against [[Ubisoft]] — a French company that develops, publishes, and distributes video games — regarding its illegal collecting and usage of players' personal data.

	==~~An Ubisoft user notices the illegal collecting~~==		==Consumer Response==
	Near the end of September 2024, an anonymous user of Ubisoft has noticed that he could not launch a single-player video game that he owned without first connecting to the internet. He also noticed that the data controller was collecting data about him during his gaming session<ref name=":0">{{Cite news \|last=Laurent \|first=Alexandre \|date=2025-04-25 \|title=Mandatory connection for single-player games: Ubisoft sued for non-compliance with the GDPR \|url=https://next.ink/182331/connexion-obligatoire-pour-jeux-solo-ubisoft-poursuivi-pour-non-respect-du-rgpd/ \|url-status=live}}</ref>.		Near the end of September 2024, an anonymous user of Ubisoft has noticed that he could not launch a single-player video game that he owned without first connecting to the internet. He also noticed that the data controller was collecting data about him during his gaming session<ref name=":0">{{Cite news \|last=Laurent \|first=Alexandre \|date=2025-04-25 \|title=Mandatory connection for single-player games: Ubisoft sued for non-compliance with the GDPR \|url=https://next.ink/182331/connexion-obligatoire-pour-jeux-solo-ubisoft-poursuivi-pour-non-respect-du-rgpd/ \|url-status=live}}</ref>.
	[[File:NOYB lawsuit.png\|alt=NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.\|thumb\|NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.]]		[[File:NOYB lawsuit.png\|alt=NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.\|thumb\|NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.]]