Privacy Issue #3402

Check if xonotic enable by default

GNUtoo - about 1 year ago - . Updated about 1 year ago.

privacy issue
% Done:



I've only looked at it through Guix as my parabola installations that can run xonotic already have configuration data.

After agreeing to the services TOS, that basically tell you that TOS apply to and to the xonotic-forum, you are asked if you want to "Allow player statistics to use your nickname at".

It also tells you that "Player statistics are enabled by default, you can change this in the Profile menu". And so even if you select "no" or "undecided", you are tracked.

So as I understand tracking has to be opt-in, and having it opt-out is forbidden by the GDPR and the FSDG.

So we need to fix that in Parabola (and also in Guix). I'll try to bugreport in Guix too when I find the time.



Updated by GNUtoo about 1 year ago

If we uncheck Allow player statistics to track your client and keep the other checked, the two other below are greyed out but it still track people:

[ ] Allow player statistics to track your client
[x] Allow player statistics to use your nickname
[x] Allow player statistics to rank you in the leaderboards

because with these settings I'm listed in:

I'll try with all 3 unchecked.



Updated by GNUtoo about 1 year ago

  • Status changed from unconfirmed to confirmed

I think that even with tracking disabled it still tracks people

Here I'm the third blue:

32 Anonymous Player 3 0 1 1 2 28

So I'm still recorded as "Anonymous player".

To get that info I played a game, then I take a picture at the end of the statistics and I compared it.

There were only 3 blue and 3 red at the end.

Though I didn't restart the game since I unchecked the 3 boxes.

edit1: Add methodology.
edit2: Add the fact that I didn't restart.


Updated by GNUtoo about 1 year ago

Guix has the opposite issue: tracking doesn't work there somehow:

So I probably need to remove the file they are talking about to see if I can get not listed on xonotics statistics.


Updated by GNUtoo about 1 year ago

After quiting xonotic-sdl and starting it again, I'm this blue line:

31 Anonymous Player 0 0 0 0 0 0

So it still collects data.


Updated by GNUtoo about 1 year ago

The 3 settings variable names are:
  • cl_allow_uid2name
  • cl_allow_uidranking
  • cl_allow_uidtracking

And for the 3 settings, the options are:
-1: ask
1: enable

It was on 0 when I had the privacy leaks. I'll try -1 but I fear we'd have to either remove xonotic or fix the source code.


Updated by direnis about 1 year ago

I really like to see xonotic on the repos, i will try to help somehow. also there are performance differences between xonotic from repos and xonotic downloaded from their website.


Updated by GNUtoo about 1 year ago

With -1 everywhere it asks before starting to play an online game

But after saying yes you end up with again statistics showing up:

31 Anonymous Player 11 4 7 2 1 114


Updated by GNUtoo about 1 year ago

Some performance difference could be attributed to compilation flags. Parabola tries to also be compatible with older computers, so it doesn't use compilation flags for things like AVX2 unless there is a runtime detection of CPU capabilities.

Though maybe it's possible to build multiple variants within the same PKGBUILD to make sure that the maintenance cost isn't increased.

edit1: Add more background.


Updated by GNUtoo about 1 year ago

I've checked with a fresh Guix system installation, and xonotic has the same behavior than with Parabola: with all tracking settings deactivated I still see me as an anonymous player in the public statistics.

edit1: improved wording.

Also available in: Atom PDF