I just got a notice from an EU commissions stating that my tiny indie mmo website is in violation of GDPR and I face up...

I just got a notice from an EU commissions stating that my tiny indie mmo website is in violation of GDPR and I face up to 10,000,000€ if I do not comply. Is there a way to get around this shit without having to fuck with my website as the tracking is used for the game itself. Can I just perma block all EU IPs?

Attached: istock-gdpr-concept-image.jpg (2267x1322, 191K)

Tell them you're a somali immigrant and you don't have the resources and/or language skills required to comply. Tell them they're racists for trying to suppress you.

>10,000,000€
first of all, are you sure it's not some fucko trying to scare you?
>Can I just perma block all EU IPs?
Some sites are doing this.

my understanding is that gpdr is retroactive because lol fuk u so you'll also have to figure out which users are European and delete their accounts.

You could just ignore it, but they'll put a warrant out for your arrest. It's not a problem if you never go to Europe, but maybe you do want to go to Europe at some time so maybe you should just rangeban EU IPs and delete their accounts.

Have fun user!

I'm not sure. The email came from [email protected] could it be spoofed?

yeah that's a fake email for sure. should still probably rangeban europe. don't listen to any salty euros telling you to just implement compliance all by yourself, you'd want legal help with that shit which I am guessing you can't afford.

AFAIK the official mail is @europa.eu

whew, alright i'm just going to ignore the mail then as some scammer i guess. I'll probably also take the step to rangeban eu because I don't want any trouble.

Tell them you're muslim, and make some "muh racism" blog and send them link, nobody can touch you then.

Cant you just give the option in your game to optin for the tracking?
Idiot cheeseburgers

>oops my mmo asked for a recovery email, and when the users deletes his account, the recovery email still exists in backups
>10 million euro fine
yeah no thanks, I'd rather rangeban you cockroaches.

If the tracking is essential to the service, just have a button with i agree, then just make a second web page where the user can request and delete their data. That's all.

You know I never thought about this but doesn't any like browser base game violate GDPR unless they do ?

REMOVE YOUR FUCKING TRACKING OFF THAT SITE

This.

Does your game make 250 million in revenue each year?

Host your shit in Brazil. Know the way of feijoada.

> hurr I can't inform users what the game accesses / records, and why.
> I just want to botnet user's private data, tell me how to get away with it!
I hope you get fined if you don't stop it. No sympathies.

the GPDR is an 88 page regulation. it cannot be described in 2 sentences on fucking Jow Forums lmao. but if y'all tried only that for compliance you'd get fucked by the regulation police.

No, why would it? Obviously registering an username to play the game is consent for the website to use this username for the game, right? Doesn't imply 3rd parties get to do anything with it, or you more than run the game. Gotta ask if you want to do more.

Yes, if they collect identifiable information, also forgot to mention that the description of that agree button must say what data gets collected and why, but that's only one block of text. If OP's revenue is really that big that $10,000,000 is 4% of his company's yearly global revenue, then he could spare a couple of tenners to just implement these small changes. It's not that hard nor expensive.

It's even easier to just rangeban EU

Good bait. Now take your LARPING to /tg/.

Why do you want to keep peoples emails after they quit your shitty botnet game?
Filthy spying jew

>tenners
>Chiefly British A ten-pound note.
I wonder if you have anything that would bias you against rangebanning europe here?

it's called a backup sven. it's where you save a known-to-be-good coherent state of the server so power outages, script kiddies, and whatnot don't corrupt files and end everything.

do you live in the eu? no? then it doesnt fucking matter

>the ABSOLUTE state of communists

>amerimutts already making up stories

Where to read this?

It seems like your mmo isn't the only thing tiny here.

Attached: 1526654490630.jpg (250x249, 8K)

Got a snapchat to discuss this?

Backups only need to be eventually deleted as far as I understand, but the information can't be used by you or 3rd parties until then. So I guess you keep the record of deleted users of month x until all backups before and to that month are gone?

Look up the domain, it's not even registered. 100% fake.
Better yet, report them to the real EU saying that there are spammers pretending to be GDPR to scam money out of people. I bet the email was like "You are in violation, prepare to get fined 10 million euros, but you can avoid all this by paying our small business fee at paypal.com"

He'd lose a big portion of his userbase.

Would be better to just say fuck it to europe and spend the fistful of dollars investing in some other country. Chinese servers? Chinese servers.

Sure, just give me your name, birthdate, credit card number and security code and we are good to roll.

You do know that you don't have to fix backups? Only need to re-scrub them after a restore.

>set up state that exists beyond the scope of a backup
First of all, disgusting and not a backup anymore. Secondly, you aren't a lawyer and I don't believe you. I am not gonna risk a special van surprise if I somehow end up in europe just because some europoor doesn't want to buy an VPN outside of Europe.

pics or it didn't happen faggot

Sounds very burger.

There are around 1 gazillion things that can get you in a rape prison or even torture offshore base in burgerland, but you are worried about doing everything in good faith (not actually USING or keeping longer than regular, safe backup retention justifiably demands) getting you v&d in the EU. Heh.

Wouldn't cost more than $50 to implement. Closing down on the EU can mean they lose over billions in revenue. You just want to say fuck the EU, with no reasoning behind it.

> Closing down on the EU can mean they lose over billions in revenue.

Who are you even referring to? I doubt it's OP.

The problem is that their entire business is taking user data and using it without the user's permissions. Actually complying with the GDPR is the same thing as shutting down business.

Just use GeoID to redirect all EU visitors to a 451 error. Problem solved and it only takes 5 minutes. It's not worth the time reading the legislation and getting a lawyer to make sure you are in compliance.

>an indie mmo wiki is pulling in billions a year
make me laugh. Lawyers, especially those who specialise in GDPR and are able to check your site for you are expensive. Then + your time to fix the website. It's not a $50 dollar fix.

So, they don't respect your privacy? Okay fuck OP.

>$50 to implement
A junior dev is $30 an hour. A >very cheap< lawyer is $300 an hour. It would cost a small site a few grand to be GDPR ready. I think there are better things a small site could spend that money on that would have a far better return on investment.

Economically there's only one choice :^).

Attached: laughing.jpg (1280x720, 97K)

You may need three offices full of lawyers working 24/7 to stay in basic compliance with US law. And then 40 lawyer offices more for your company.

What the GDPR says is comparatively simple. Takes a burger to only see immense legal cost there.

You don't need any lawyers to comply with US laws applying to the internet because they aren't obtuse and designed to generate profit through fines.

Keks, EU doesn't yet care about your shitty little game, you probably got some spam. Also as someone who has some experience banning EU users won't work, as you have to delete their existing data, provide them with access to review it etc.

Also I don't give a fuck if you rangenam all Euros, you are just lazy dev who can't keep his fingers of tracking. Good riddance. For one I'm happy GDPR exists and thou it was pain in the was to get comliance our off did it and I future it will be so easy that everyone will be able to set up everything GDPR sites, services and other things.

Can't wait for hiro to rangeban EU or contain them to a different site.

>EU is rangebanned
>quality nosedives as you're left with spics and yanks

N1

Oh please. DCMA and a gazillion more on the internet.

But even what liabilities it opens if you step on someone's foot and how you mitigate that is probably a $1mn legal research topic in burgerland.

GDPR isnt obtuse and profits through fines is probably not the main intent, else they'd not have so many factors that would lessen the severity of your violation listed.

>I-I didn't wanna use your s-site anyway, b-baka!

>DCMA and a gazillion more on the internet.

It's pretty simple. Don't host illegal content period. I'm not sure why you think a lawyer is required to understand such simple laws. In fact, getting a lawyer won't even help you in most cases unless you have a very good excuse for why you are hosting illegal content like CP/Copyrighted software, etc.

That's only "simple" if you don't allow users to upload or link anything.

It's actually fairly simple:
Consent:
>tell your users what data is being saved, why and for how long in a simple, easy to understand language
Right to be forgotten.
>if a user wants you to delete the information you've gathered about it, delete it
This doesn't apply to all data, only data that personally identifies them (for instance, Mozilla's telemetry doesn't fall here because all they receive are a count of bugs encountered, crashes and performance.) IP logs shouldn't be kept longer than a week anyway and if it's so necessary to keep IP logs and bind them to an account, then you can delete them along with the rest of the information.
Data portability:
>if a user wants a copy of the data you've got about it, send it to them in a commonly used, machines readable format (however, if sending this information would reveal any company secrets or something, you don't have to.)
Privacy by Design:
>the systems should only gather the data absolutely necessary to work and that data should only be accessed to those needed to process it
That's it.

Dmca is a mere request. Follow it and you're all good. Get to youtube size and you will have problems sure but you now have youtube money.

THIS.
Also mention any 3rd side data gathering cookies such as Google Analytics and provide way to opt out or at least instruction and you are pretty much done.

Google, Amazon, Facebook and Cloudflare should just read the Do Not Track header and stop their shenanigans. This legislation wouldn't exist if they complied with DNT.

You have 30 days to comply, do you take backups further than that? Why? I'm starting to think your game is a marketing scam you fucking jew

>got a notice from an EU commissions
There's only one EU commission. Tell those "EU commsssions" that your dad works for the council and told you it's fine.

Then fix your fucking website and make it GDPR compliant before the real guys show up and fine your ass until you're broke.

They dont care, you are operating and manage EU Citizen digital data you must comply.

Ignore that stupid shit.I ran a website for ten years and I got a lot of threats from various companies and institutions but I just ignored it or replied with "stop being such a jew". Nothing ever happened.

gimme link

Easy fix OP. Just block anyone accessing your mmo from the EU. Problem solved

I still don't understand, if you're from EU and access certain site from non-EU IP. Do you still can sue the site if they don't respect your private data?

>Lose a couple grand once to implement GDPR OR lose potentially millions of customers for many years.

Now I know why burgers are all in debt.