Privacy Issue #3402
Check if xonotic enable statistics.xonotic.org by default
0%
Description
I've only looked at it through Guix as my parabola installations that can run xonotic already have configuration data.
After agreeing to the services TOS, that basically tell you that TOS apply to stats.xonotic.org and to the xonotic-forum, you are asked if you want to "Allow player statistics to use your nickname at stats.xonotic.org?".
It also tells you that "Player statistics are enabled by default, you can change this in the Profile menu". And so even if you select "no" or "undecided", you are tracked.
So as I understand tracking has to be opt-in, and having it opt-out is forbidden by the GDPR and the FSDG.
So we need to fix that in Parabola (and also in Guix). I'll try to bugreport in Guix too when I find the time.
History
Updated by GNUtoo over 1 year ago
If we uncheck Allow player statistics to track your client and keep the other checked, the two other below are greyed out but it still track people:
[ ] Allow player statistics to track your client
[x] Allow player statistics to use your nickname
[x] Allow player statistics to rank you in the leaderboards
because with these settings I'm listed in: https://stats.xonotic.org/game/2075117
I'll try with all 3 unchecked.
Denis.
Updated by GNUtoo over 1 year ago
- Status changed from unconfirmed to confirmed
I think that even with tracking disabled it still tracks people
https://stats.xonotic.org/game/2075155
Here I'm the third blue:
32 Anonymous Player 3 0 1 1 2 28
So I'm still recorded as "Anonymous player".
To get that info I played a game, then I take a picture at the end of the statistics and I compared it.
There were only 3 blue and 3 red at the end.
Though I didn't restart the game since I unchecked the 3 boxes.
edit1: Add methodology.
edit2: Add the fact that I didn't restart.
Updated by GNUtoo over 1 year ago
Guix has the opposite issue: tracking doesn't work there somehow: https://issues.guix.gnu.org/43685
So I probably need to remove the file they are talking about to see if I can get not listed on xonotics statistics.
Updated by GNUtoo over 1 year ago
After quiting xonotic-sdl and starting it again, I'm this blue line:
31 Anonymous Player 0 0 0 0 0 0
https://stats.xonotic.org/game/2075159
So it still collects data.
Updated by GNUtoo over 1 year ago
- cl_allow_uid2name
- cl_allow_uidranking
- cl_allow_uidtracking
And for the 3 settings, the options are:
-1: ask
0:disable
1: enable
It was on 0 when I had the privacy leaks. I'll try -1 but I fear we'd have to either remove xonotic or fix the source code.
Updated by direnis over 1 year ago
I really like to see xonotic on the repos, i will try to help somehow. also there are performance differences between xonotic from repos and xonotic downloaded from their website.
Updated by GNUtoo over 1 year ago
With -1 everywhere it asks before starting to play an online game
But after saying yes you end up with again statistics showing up:
31 Anonymous Player 11 4 7 2 1 114
Updated by GNUtoo over 1 year ago
Some performance difference could be attributed to compilation flags. Parabola tries to also be compatible with older computers, so it doesn't use compilation flags for things like AVX2 unless there is a runtime detection of CPU capabilities.
Though maybe it's possible to build multiple variants within the same PKGBUILD to make sure that the maintenance cost isn't increased.
edit1: Add more background.
Updated by GNUtoo about 1 year ago
I've checked with a fresh Guix system installation, and xonotic has the same behavior than with Parabola: with all tracking settings deactivated I still see me as an anonymous player in the public statistics.
edit1: improved wording.