Jump to content

Ubisoft in-game data collection GDPR complaint (2025)

From Consumer Rights Wiki
Revision as of 14:35, 13 August 2025 by MrFrench (talk | contribs) (Creation of a new article. Idea given on Article suggestion list.)

This article is a stub. You can help by expanding it.

A moderator needs to check the page before this notice can be removed. Visit the noticeboard or the #appeals channel in either Zulip or Discord to request removal.
More info ▼

An article may be flagged as a stub when it is missing major elements needed to make it useful to a reader. You can help by adding missing sections, verifiable sources, relevant company policies and communications, etc. to make the article more complete.

Ubisoft forces its user to be connected to the internet, even in single-player games, and collects data without consent nor prior notice.

Background

On Thursday 24 of April 2025, NOYB — an Austrian privacy protection organization — has filled a complaint against Ubisoft — a French company that develops, publishes, and distributes video games — regarding its illegal collecting and usage of players' personal data.

An Ubisoft user notices the illegal collecting

Near the end of September 2024, an anonymous user of Ubisoft has noticed that he could not launch a single-player video game that he owned without first connecting to the internet. He also noticed that the data controller was collecting data about him during his gaming session[1].

NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.
NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.

The complainant, who is “tech-savvy” according to NOYB, simultaneously monitors the network traffic associated with Far Cry Primal and finds that his game is sending packets to remote servers. He mentions 150 connections in the space of ten minutes and identifies Google, Amazon, and Datadog[1][2][3].

But before asking NOYB, the data subject contacted the controller’s customer support. Asking about his findings and that they tell him why are they using his personal data. Unfortunately, Ubisoft did not answer completely to his question, only saying that his data is collected to verify ownership of the game and never mentions why Google is one of the third parties


Lawsuit

If applicable, add any information regarding litigation around the incident here.

Claims

Main claims of the suit.

Rebuttal

The response of the company or counterclaims.

Outcome

The outcome of the suit, if any.


Add your text below this box. Once this section is complete, delete this box by clicking on it and pressing backspace.



Consumer response

Summary and key issues of prevailing sentiment from the consumers and commentators that can be documented via articles, emails to support, reviews and forum posts.


Add your text below this box. Once this section is complete, delete this box by clicking on it and pressing backspace.



References

  1. 1.0 1.1 Laurent, Alexandre (2025-04-25). "Mandatory connection for single-player games: Ubisoft sued for non-compliance with the GDPR".{{cite news}}: CS1 maint: url-status (link)
  2. NOYB (2025-04-24). "Like to play alone? Ubisoft is still watching you!".{{cite web}}: CS1 maint: url-status (link)
  3. NOYB, NOYB (2025-04-24). "Lawsuit PDF" (PDF).{{cite web}}: CS1 maint: url-status (link)