Re:Ubisoft account -including games- can be permanently dele...
by whstl on Monday July 24, 2023 @03:51PM
(#36853327)
What “PII” has risk of theft?
Passwords should be properly hashed. Heck, just delete the password and let the user ask for another if need be.
If there is ANY unnecessary data that was collected but that doesn’t need to be there, or that needs consent to be stored, just delete it. Easy peasy.
List of games owned? Email address? That doesn’t need consent, because it’s legitimate interest. It is 100% in the customer’s interest to have this information long term, and deleting it would cause actual loss to the customer that’s probably as bad as having PII leak.
What “cost of maintaining accounts”? Less than a kb of data per customer on average?
This whole thing is just to force customers to re-purchase games.
> In real world nearly everything has an expiry date, beyond which product is no longer usable
That’s clearly not true. There are several products that don’t have it.
But in the case of games it is worse, because the expiration date is 100% artificial: since the games need authorization servers to run.
Passwords should be properly hashed. Heck, just delete the password and let the user ask for another if need be.
If there is ANY unnecessary data that was collected but that doesn’t need to be there, or that needs consent to be stored, just delete it. Easy peasy.
List of games owned? Email address? That doesn’t need consent, because it’s legitimate interest. It is 100% in the customer’s interest to have this information long term, and deleting it would cause actual loss to the customer that’s probably as bad as having PII leak.
What “cost of maintaining accounts”? Less than a kb of data per customer on average?
This whole thing is just to force customers to re-purchase games.
> In real world nearly everything has an expiry date, beyond which product is no longer usable
That’s clearly not true. There are several products that don’t have it.
But in the case of games it is worse, because the expiration date is 100% artificial: since the games need authorization servers to run.