Greetings,

That's usually the setting I look for when I start a game. On launch it just says "acknowledge and accept" instead of giving me a choice. What if I'm not okay with that? Uninstall and refund?

Agreed, like why do they need my location and IP address? Like WTF?

Data is the new gold. That's why.

Originally posted by tford1956:

Data is the new gold. That's why.

Your not wrong. It's a shame.

Wow, I didn't know this about the game. That's honestly really disgusting. Yeah, I would probably just uninstall and refund. It doesn't necessarily mean not playing the game ever. Who knows, in some way or another it's possible that there will appear a copy of this game that turns it off and doesn't access the internet in any way. I wouldn't know how that would happen necessarily, but I have a feeling that when it appears (wherever and whenever it may appear), that the price of that copy would be considerably lower.

Well developers better start patching in a option to quit the game at the consent screen because this is a direct violation of GDPR. Consent can *not* be considered freely given when the party has no option to deny the data collection or refuse to use the service provided Especially when the data collected is considered personal data.

Having this also not listed in the description before purchase or during installation means that the buyer could never be aware of the restrictions applied and is again a breach of GDPR because privacy policy has to be readable before use of the service.

There is no excuse for such a oversight. These rules are very clear and the involved parties have previous experience with this matter any DPO assessing a DPIA for this type of collection would put a halt to this particular implementation.

No matter how lovely a game is or looks this is a violation of privacy laws.
And don't get me wrong it really looks like a good game but I already have enough data breaches to deal with in my business time I rather not add another risk factor to the mix.
I have requested a refund until this matter is resolved.

For all others that want to play the game but block the data collection regardless of forced consent see link below.
https://answers.microsoft.com/en-us/protect/forum/all/how-do-i-block-a-program-in-a-firewall/ff53f7b0-8814-435b-8677-af81cae5cc1f

Was going to try it on game pass but nevermind lol. No big deal never even heard of the game

That's the first thing I did after quitting the game, but that's a useful link nonetheless. If the situation is not addressed in the coming week or so, I will send a GDPR request to their DPO.

Sounds like good cause to acquire the game through other means and block it in your firewall and have at it.

The data collection, far as I know, is to collect gameplay choices like in the telltale games.

But yeah there should be an option to opt-out.

It's easy block it with your firewall at least.

I should have taken a screen of the disclaimer, but there was also IP and location data iirc. Also they send the data to their publisher, which has no relation to in game choices. No matter the case, they cannot force consent in this way.

I added a suggestion to add an "opt out" option on their suggestion page:
https://weirdwest.featureupvote.com/suggestions/289760/add-an-optout-of-data-collection-option

Do upvote it if you have the time.

Originally posted by Kiros:

That's the first thing I did after quitting the game, but that's a useful link nonetheless. If the situation is not addressed in the coming week or so, I will send a GDPR request to their DPO.

Data collection is initiated the moment you pressed consent if you did a block after going to the start menu your IP and location have already been processed and you will need to contact them for right to withdrawal under article 7.

A small tip as you seem to be tech savvy enough to understand the risks and limitations of what I am about to share.

Microsoft Firewall is a terrible implementation with regards to limiting port acceptance by other software. If you ever audited your Firewall you will notice that Steam for example no matter how many times you block any port will unblock itself after a update.

If you want to absolutely make sure no data collection can happen without manual authorization I recommend installing Malware-bytes Windows Firewall Control which acts as a control center and further locks the default firewall down.
You will however need to make sure to check secure profile and secure rules otherwise Windows Firewall Control group is still allowed to overwrite your rule sets which is very bad software behavior.

Before selecting secure profile and rules make sure to export your current rules because the software will wipe it all. After that create a custom group with a easy to recognize name. Any rule not added to that group will henceforth be automatically removed unless you give manual authorization by either adding the rule itself or accepting the notification of the application.

Be warned that this might very well block Microsoft services that you require for your internet to work. This is not a program to use unless you have clear knowledge of Windows network operations. There is a option to reset to default rules so you can't brick the OS but it might cause log flooding which needs to be manually dealt with afterwards.

This is by no means a secure product to use as actual defense layer against bad actors but for simple software rules from legit parties it works wonders. For all other stuff a real-time IDS and SIEM service is required though for most users that thankfully is still considered overkill.

Originally posted by Kiros:

Do upvote it if you have the time.

Just did so. This concerns me. And I was looking forward to this game too. I'll wait and see if there's any change for as long as I can, but this might be one going on the refund list.

Originally posted by m662:

For all others that want to play the game but block the data collection regardless of forced consent see link below.
https://answers.microsoft.com/en-us/protect/forum/all/how-do-i-block-a-program-in-a-firewall/ff53f7b0-8814-435b-8677-af81cae5cc1f

Which application am I unchecking?

Originally posted by FictionRaider007:

Which application am I unchecking?

You need to check the path it will contain weirdwest-win64-shipping.exe

Path example: C:\program files (x86)\steam\steamapps\common\weird west\nova\binaries\win64\weirdwest-win64-shipping.exe

Also make sure it is the outbound rule. Inbound can be blocked but as far as I am aware there are no direct security risks with this application.

@m662

Thanks for taking the time to write that. I have been naive enough to think the option would be on the main menu but it wasn't. I blocked it through Windows Firewall and my anti virus software, but that was indeed afterwards. I would not call myself tech savvy but I can follow instructions. I will definitely not waive my rights of data privacy.

@FictionRaider007

Should be in SteamLibrary\steamapps\common\Weird West\Nova\Binaries\Win64\WeirdWest-Win64-Shipping.exe

Thanks for the upvote.

(Ha, I was too slow, no matter, at least it checks out)

Originally posted by Kiros:

@m662

Thanks for taking the time to write that. I have been naive enough to think the option would be on the main menu but it wasn't. I blocked it through Windows Firewall and my anti virus software, but that was indeed afterwards. I would not call myself tech savvy but I can follow instructions. I will definitely not waive my rights of data privacy.

@FictionRaider007

Should be in SteamLibrary\steamapps\common\Weird West\Nova\Binaries\Win64\WeirdWest-Win64-Shipping.exe

Thanks for the upvote.

(Ha, I was too slow, no matter, at least it checks out)

More than welcome I would use the upvote system if not for the lack of again a good privacy policy. https://featureupvote.com/privacypolicy/
I am not worried about WolfEye Studios in this regard but the owner of featureupvote.com is a unknown factor I never heard of them myself and company size does not bode well for security standard of customer data. https://www.infoempresa.com/en-in/es/company/barbary-software-sl

I have reported the game to Steam by flagging it as legal issue with reference to GDPR violations. Steam is legally required to act but if they will do so I can't say you never know with companies. The other option would be contacting the acting DPO escalating it to DPA when no satisfactory result can be reached and filing a formal complaint. That process takes up 6 months or more requires a lot of similar complaints followed by most times just a formal warning.

As this is my free time I am not going to bother doing so especially as my own data is not at risk because of the precautions I already toke but anyone is of course happy to do so.