Last updated: 6th October, 2022
Here’s a quick summary!
When you play Project Zomboid or use one of our forums, please do not use display names that can identify you or any information revealing your location.
Because we know legal wording isn’t much fun, and certainly not as much fun as being a Community Raccoon, we’ve included a short and informal summary for each section. If you have any queries you can contact us at firstname.lastname@example.org.
So, is everyone sitting comfortably?
1.1 About Us.
We are The Indie Stone Ltd (incorporated and registered in England with company number 08650737) of Northern Design Centre Abbott’s Hill, Baltic Business Quarter, Gateshead, Tyne And Wear, NE8 3DF, United Kingdom (“The Indie Stone”).
We are a controller in connection with personal data we hold about you. This means that we are responsible for the security of the personal data and the decisions we make regarding the personal data. We are registered with the Information Commissioner’s Office with registration number ZB299577.
“The Indie Stone Services” for short.
2. WHAT INFORMATION IS COVERED?
We may collect certain information when you use The Indie Stone Services such as your name and email address (examples of what we mean are below). We do not receive or store your payment details.
2.1 What information might we collect from you?
When you sign up for, download, use or play The Indie Stone Services then we will collect certain information from you. The personal data that we collect varies depending on the particular The Indie Stone Services used, but this may include:
A. Technical Details.
When you use, play or access The Indie Stone Services, third parties (such as platforms like Steam or GOG) may on our behalf collect technical details about the device you are using, including: internet and/or network connection (including IP address); MAC address, any console device identifier; your operating system, browser type or other software; and your hardware or other technical details.
B. Your Activities.
When you use, play or access The Indie Stone Services third parties (such as platforms like Steam or GOG) may on our behalf collect details of how you use our services, including: metrics information about when and how you use the services; traffic data; language preferences; achievements; scores; gameplay statistics; and time spent playing; choices you make about any characters you use and progress you make on Project Zomboid.
We may attach a unique reference ID to you as a player. This unique reference ID will be different to ID you might be assigned by the platform you are playing Project Zomboid on.
Project Zomboid allows you to communicate with other players via chat and voice communications, however, we do not have access to any of these communications.
C. Your Communications.
If you contact us (e.g. via email or call for customer support) or post in chat sessions, forums or other areas of The Indie Stone Services, we may collect and maintain a record of your contact details and the content of your communications. We may collect personal data about you when you register for an account and take part in our community forum.
We will not ask you to provide us with any special category (sensitive) personal data. Any such personal data we receive about you will be data you have shared with us or data someone else has provided to us about you.
D. User Accounts
To access certain of The Indie Stone Services (e.g. games or forums) you may need to create a user account. When you log in to play our games we collect basic log in information such as your account username and, where relevant, your username for your accounts with the platforms you are playing our games on (for example, your Steam ID and username or information related to your account with Steam and GOG.com such as your username or account ID).
If you make purchases, we might receive some payment confirmation information about you from payment service providers, but we will not receive payment details.
If you sign up to a newsletter, you will be asked to provide us with certain information. This will be displayed to you at the time you start to use the applicable The Indie Stone Services (e.g. when you sign up for a newsletter) and may include your name, gender, username, age, birthdate, a photo or avatar, email address, country of residence and contact information.
Some of the information types referred to above may be collected on an aggregated or anonymised (e.g. hashed) basis, or we may use it or share it in an aggregated or anonymised way, for research or analysis into the way our services operate and are used.
2.2 How do we collect personal data?
We collect personal data directly from you. You will provide us with your personal data when you use The Indie Stone Services.
You can play Project Zomboid on Steam and GOG.com. When you play Project Zomboid on these platforms we will receive your personal data from these platforms and the companies that run these platforms.
You provide us with your personal data when you register for an account and when you use your account to play Project Zomboid. Project Zomboid allows you to communicate with other players via chat and voice communications, however, we do not have access to any of these communications.
We may also receive your personal data through social media and other online platforms such as Facebook, Twitter, YouTube and Discord when you use tools to tag us and mention us in your posts, statuses and comments through your accounts on these platforms, and when you otherwise provide us with your personal data on our accounts on these platforms, e.g. when you comment on one of our posts on Twitter.
We may also collect your personal data through any platforms you use to contact us, for example, when you communicate with us via a Steam or Discord forum or via our community forum. When you communicate with other members of the community on a public channel such as on Steam, Discord or our community forum, we will have access to the communications that are publicly available on those platforms.
We may also collect your personal data from other individuals who may, for example, mention you in any communications they send to us.
We may also receive personal data about you from any other types of organisations listed in the section titled ‘Will we ever share any of your information with other parties?’ below.
2.3 What about the storage of payment details?
The processing and storage of payment details is a matter for the relevant platform and the applicable payment methods/payment service providers. The Indie Stone will not receive, process or store any of your payment details. This is because the payment transactions themselves are completed through the relevant platforms (e.g. Steam) via the user account you have associated with that platform account. If you make in-game purchases within a The Indie Stone game or product, we are notified by the payment service provider once a transaction takes place, but we will not receive any of your actual payment details.
2.4 What about cookies and other tracking technologies?
We and third parties on our behalf may also collect information about you via cookies and other tracking technologies.
We do not use any cookies or other tracking technologies on Project Zomboid.
We use different types of cookies and tracking technologies (including local storage and session storage technologies) on our website.
Cookies and other tracking technologies allow the website to recognise your device and store or access some information about your preferences or actions.
We currently use the following types of cookies and other technologies on our website, some of which are set by us and some by third party providers:
Those that are necessary for the operation of our website, for example, to distinguish between visitors who have accepted or not accepted non-necessary cookies and tracking technologies and to implement cookies according to visitor selection, and which enable core functionality such as security, credentials authentication, network management and accessibility.
Those that analyse the use of our website, including to detect and resolve problems with the website and improve our website.
Those that are used to provide certain functionalities within our website, for example, to play YouTube videos embedded on our website.
Those that are used to deliver advertisements about our game on third party websites and apps.
Information collected by the cookies we use may include:
Some of the cookies and other tracking technologies set on our website may be set by third party service providers. These providers have access to personal data about you, obtained when you use our website. We set out below the third party providers that set cookies and other tracking technologies on our website.
We use a combination of session and persistent cookies and other tracking technologies. Session cookies and session storage keep track of your current visit and how you navigate the website and persistent cookies and local storage enable our website to recognise you as a repeat visitor when you return. The session technologies will be deleted from your device when you close your browser. Persistent technologies remain on your device after you have left the website.
In addition to being able to refuse non-necessary cookies and other tracking technologies through the functionality on our website, you can also manage these technologies through your browser settings.
Most browsers have cookies enabled by default, but you are able to change your cookie settings, which are usually found in the ‘options’ or ‘preferences’ menu of your internet browser. You can block any cookies from any website by activating the setting on your browser that allows you to refuse the setting of some or all cookies. However, if you block all cookies you may not be able to access all or part of our website or use some features of our website. You can also use your browser settings to delete cookies. For more information about cookies please visit https://ico.org.uk/your-data-matters/online/cookies/
3. HOW IS YOUR PERSONAL DATA USED?
We will use your personal data to run, maintain and improve The Indie Stone Services as well as to communicate with you (e.g. with newsletters or emails). Sometimes we may share information with partners in order to run our services.
3.1 How might your information be used?
In accordance with data protection laws, we will only process your personal data if we have a lawful basis for doing so.
In respect of your personal data, these bases are:
• if it is necessary to provide services to you under the performance of a contract we have with you
• if we are required to do so in accordance with legal obligations
• if you have given your consent
• if it is in our legitimate interests to process your personal data, provided that none of these prejudice your own rights, freedoms and interests.
The following is a list of the purposes for which we process your personal data, and the lawful bases on which we carry out such processing.
A. Perform our agreement with you:
B. To administer and monitor the performance of The Indie Stone Services:
C. Comply with our legal obligations:
Where we are required to do so by law, for example, to comply with intellectual property protection obligations we have under applicable laws including the Digital Millennium Copyright Act and the E-Commerce Directive.
D. Based on consent:
Provide you with marketing information about products or services that you request from us or which we feel may interest you where you have asked us to do so or have opted-in for.
We may also process your personal data for additional purposes in the future, but only if such purposes are compatible with those listed above and if we believe that the same lawful basis applies.
In certain circumstances, you may be obliged to provide us with your personal data under a statutory or contractual requirement. This might include, but is not limited to, personal data we require to enter into an agreement with you; for tax and accounting purposes; and to enable us to fulfil our compliance and other obligations under relevant legislation or regulation. Failure to provide us with personal data required under a statutory or contractual requirement may prevent us from entering into or performing our obligations under a contract with you.
3.2 Will we ever share any of your personal data with other parties?
We may share your personal data with other parties. We describe the circumstances in which we share your personal data with other parties below:
3.3 International transfers:
Some of the parties we share your personal data with might be based abroad. When your data is transferred internationally, we are required to ensure you are afforded equivalent protection in respect of your personal data to that provided in the UK and the EU.
Generally, we will put in place appropriate safeguards when making international transfers, for example, by using specific contractual clauses which have been approved by the European Commission and/or the UK government together with supplementary measures if we deem it necessary in the circumstances, for example, further contractual commitments, enhanced security and assessments of transfer risk.
4. INFORMATION YOU MAKE PUBLICLY AVAILABLE
Be careful who you share your personal data with! You may have the option to share your own personal data with other parties, in which case it will be governed by those parties’ own privacy policies – make sure to take a look at them.
4.1 Please remember that any communications you have via The Indie Stone Services may reveal details about you.
Also, any information you post publicly will be publicly available to other people. This might be information you share on a forum or on social media.
We have no control over your use of any otherwise private personal data which you make available, or the activities of other users or other third parties to whom you give or make available your information or content.
PLEASE DO NOT SHARE ANY SENSITIVE INFORMATION (FOR EXAMPLE, INFORMATION ABOUT MEDICAL CONDITIONS) ON ONLINE FORUMS OR OTHERWISE MAKE IT AVAILABLE TO US OR OTHER PARTIES VIA ANY POSTS OR COMMUNICATIONS.
5. DATA RETENTION
We keep your personal data for as long as needed to provide The Indie Stone Services to you or longer where permitted by law.
5.1 How long do we retain your data for?
If necessary for the purpose for which the data was originally collected. We will retain your personal data only for as long as necessary to fulfil the purposes we collect it for, including for the purposes of satisfying any contractual requirements or other legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the purposes for which we process the personal data, the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, whether we can achieve those purposes through other means and the applicable legal requirements.
As detailed below, depending on where you live you may have certain legal rights to object to our collection and use of your data, but this may mean some or all The Indie Stone Services become unavailable to you. We also reserve the right to retain your information as necessary to comply with our legal obligations, resolve disputes, maintain appropriate business records and enforce our agreements.
6. YOUR RIGHTS
You have rights about how your personal data is used, which can vary depending on where you live. If you have any questions, please contact us at email@example.com.
6.1 Can you ask us to stop processing your personal data?
You have the right to ask us not to process your personal information for marketing purposes. You can change your email settings to unsubscribe from email communications.
6.2 What are your rights?
Depending on where you live, you may have additional privacy rights. For example, in the EU and the UK and you have the following rights. If you have any questions about your rights, or you wish to exercise any of these rights, please email firstname.lastname@example.org.
We may require you to provide forms of identity should you wish to exercise one of your rights below.
Access: to access and obtain a copy of your personal data we possess.
Rectification: if the personal data we hold about you is incorrect. You have the legal right to ask us to rectify/correct your personal data.
Erasure: you may have the legal right to contact us to request that we delete your personal data from our system.
Restriction: you may request a restriction on the processing we undertake on your personal data. This will only apply if we have no lawful basis to process your personal data, your personal data is inaccurate or to comply with an objection request (see below).
Objection: you may object to our processing of your personal data if our processing is carried out on the basis of legitimate interests. Please note, however, that should we determine that our interests are so compelling as to override your objection we may continue to process your personal data.
You may object to receiving direct marketing at any time.
Portability: you have the right to receive some of your personal data in machine-readable format. This right extends to you being able to request that such data is sent to a third-party controller.
Withdrawing consent: if the lawful basis we rely on to process your personal data is consent you have the right to withdraw this consent. Please email email@example.com to withdraw consent for the processing of your personal data.
Complaining to a supervisory authority: further information about your rights can also be obtained from your national data protection regulator – in the UK, this is the Information Commissioner’s Office (https://ico.org.uk/). If you have any cause for complaint about our use of your personal data, you have the right to lodge a complaint with your national data protection supervisory authority, although we would ask that you contact us in the first instance.
Your right to be informed: you can contact us to find out more or to ask any questions you may have about our use of your personal data
We will use commercially reasonable efforts to honour your request, but we may decline requests that are unreasonably repetitive, are disproportionate, infringe the privacy of others or as otherwise permitted by law. Please note though that by withdrawing your consent or otherwise objecting to certain processing of your information, certain The Indie Stone Services may no longer function properly or be completely unavailable to you.
6.3 Under California law
California residents who have an established business relationship with us have the right to request certain information with respect to the types of personal information we have shared with third parties for their direct marketing purposes, and the identities of those third parties, within the immediately preceding calendar year, subject to certain exceptions. All requests for such information must be in writing and sent to: The Indie Stone Ltd of Northern Design Centre Abbott’s Hill, Baltic Business Quarter, Gateshead, Tyne And Wear, NE8 3DF, United Kingdom. This same California law permits us to provide you, in response to your written request, with a cost-free means to choose not to have your information shared rather than providing the above described information. You may exercise that choice by contacting us at the address above.
6.4 Who should you contact if you would like to exercise these rights?
If you would like to exercise any of these rights or have any queries regarding them, please contact: firstname.lastname@example.org.
7.2 Are there any other documents you should read?
We’d also like to remind you that our Terms & Conditions has more information about how we operate The Indie Stone Services: https://projectzomboid.com/blog/support/terms-conditions/