What's new
  • Visit Rebornbuddy
  • Visit Panda Profiles
  • Visit LLamamMagic
  • Visit Resources
  • Visit Downloads
  • Visit Portal
RebornBuddy Forums

Register a free account today to become a member! Once signed in, you'll be able to participate on this site by adding your own topics and posts, as well as connect with other members through your own private inbox!

Blizzard reply to EU Data Protection Directive

hutnik

Member
Joined
Feb 10, 2012
Messages
287
Sooo today, I received envelope from France, containing a letter and CD.
I asked them to send the personal information by email, but I quess burning 5MB of data is easier for them :D

Important parts from the letter:
We are contacting you because your request for personal data.....
Reminding me I breached ToS and EULA and that the suspension is justified by their findings. No mention about monitoring RAM or whatever.
Reminding me my account will be available in November.
According to my right to access my personal data, there is a CD.
Because it is costly, login informations covers only last 14 months. They could send all login history for "reasonable fee".
I can consult their private policy on web, should I have any aditional information about data processing and transmission.

Now, the CD contains PDF and XLS with same data. Information there is organized into sections with this info:
SOME data have no value, i marked SOME (mostly interesting ones) of them as - empty. I may not have some of them filled in, so some of them are not marked as empty because they may have them for others, just not for me.
I wrote notes to some lines specifiing how the data looks

Battle.net account sheet:

account email
id (some number, I quess their internal identification)
region
language
Parental Controls Enabled
Parental Controls Email
Secret Question
Secret Answer (real answer in plaintext, security hurr durr...)
Authenticator (number)
Dial-in Authenticator - empty
Real Id Enabled
Share with Facebook Friends
Show in Friends of Friends

Contact Information
First Name
Last Name
Date Of Birth
Street
Street2
City
State
Postal Code
Country
Phone
Phone Extension

Shipping Profiles
Label
Title
First Name
Last Name
Street
Street 2
City
State
Postal
Country
Gender
Phone
Phone Extension

Payment Profiles
Label
First Name
Last Name
Street
Street 2
City
State
Country
Phone
Created
Payment Method
Payment Account (N/A for paypal, I dont have CC stored on Bnet)
Payment Method Expiration
Issue Number ("0" for paypal)

Licenses
Name
Account Name
Description
Claimed
Expiration
Key
LegacyKey

This contains online store purchases (mounts, pets and "reward pets" like Penguin and Core Pup for authenticator)

Referral History
Claimed
Expriation
Free Month
Friend Account Id
Issued
Key
Link Expiration
Link Status
Mount Character Name
Mount Claimed Date
Mount Earned Date
Mount Realm Name
Referrer Account Id
Referrer Account Name
Status (upgraded/trial/open)

Online Store Transactions
Purchase Date
Cost
Product Names
Payment Expiration
Payment Method
Tax Amount

this section contain game licences, game token activations, paid faction changes, paid transfers, physical goods purchases (authenticators)

Character Transfer History
Purchase Date
Batch Id
Character Id
Character Name
Batch Status
Code
Completed
Cost
Currency
Initiated
New Game Account Id
New Realm
Order Id
Original Game Account Id
Original Realm
Payment Account
Payment Date
Payment Expiration
Payment Method
Payment Status
Refund Amount
Refund Date
Tax Amount
Transaction Id

Character Transfer History
Purchase Date
Batch Id
Character Id
Character Name
Batch Status
Code
Completed
Cost
Currency
Initiated
New Game Account Id
New Realm
Order Id
Original Game Account Id
Original Realm
Payment Account - empty
Payment Date - empty
Payment Expiration - empty
Payment Method - empty
Payment Status (Submitted/???)
Refund Amount
Refund Date
Tax Amount
Transaction Id

Here are all character transfers, including free migration

Faction Change History
Purchase Date
New Character Name
Original Character Name
Batch Id
Batch Status
Code
Completed
Cost
Currency
Initiated
Game Account Id
Realm
Order Id
Payment Account (last 4 digits of CC)
Payment Date
Payment Expiration (CC expiration MMYY)
Payment Method ("MC" as mastercard)
Payment Status (shipped)
Refund Amount
Refund Date
Tax Amount
Transaction Id

Each wow account sheet:
Account
("ID#X", WoW1 is like "123456#1")
Account (some other muber)
Region
Box Level (Warlords)
Created
In Game Status (Good)
First Name - empty
Last Name - empty
Street - empty
City - empty
State - empty
Postal - empty
Phone - empty
Secret Question
Secret Answer - empty
Payment Status (NA for me)
Subscription Status
WoW Remote In Game Status (Good)
WoW Remote Payment Status (NA)

Activity
Start (dd/yy/mmm hh:mm:ss PM)
End (dd/yy/mmm hh:mm:ss PM)
IP Address
Time (same as Start)
Realm

Subscriptions
Activated
Cost
Expiration
Payment Expiration
Payment Method
Product Name
Purchased
Tax Amount
Transaction Id

Claimed Codes
Claimed (date)
Code
Type (WarlordsStandard/WOWDigitalPurchase/TrialRefer/???)

Characters
Name
Class
Created
Deleted (false/true?)
Id (some number)
Last Played
Level
Race
Realm

Sheet "PlayerActivity" for each WoW and StarCraft account
Columns have no names, bu contains:
date-time logon
date-time logoff
time spent logged in
character
realm
"what" (only "Logged onto Character", nothing else for me)
IP address
IP addresses real world address (same thing you can get as country, region, city on http://www.geoipview.com/ )
ISP name

D3 account sheet:
Account

Account Id
Region
Created
Last Login

Activity
Start
End
Minutes Played
IP
Location (City, country)
Service Provider (ISP name)

And that's it. By sending them that letter, you actually get what you're asking for and what they are required to give you :D
No unban happening this way.
 
Exactly what I told everyone.

Exactly.

I was completely correct.

No room for debate.

I won.
 
Last edited:
So what is the EU directive? What does it entail? Do they have to give you proof of your wrong doings or what?
 
They have to give you the personal data they store about you. I wasn't really expecting to get unbanned, but it's at least interesting to see what they store about me :-)
 
They have to give you the personal data they store about you. I wasn't really expecting to get unbanned, but it's at least interesting to see what they store about me :-)
character/license data is a non-personal information - you were right :)
 
have someone paid for the account login history yet ?(since I saw you have to pay extra for it) isn't that the main thing they track you from
 
Last edited:
have someone paid for the account login history yet ?(since I saw you have to pay extra for it) isn't that the main thing they track you from
i doubt, guess it's only login ip and stuff.
since they cant extract it i'd say it's only available on offsite storage (backup tapes, etc.) - thus implies this data can't be accessed on demand making it useless for detections
 
and how exactly does any of that information tell you you botted?

A good pointer would be version of windows coupled with people who were logged in for 24 hours straight several times in The same week for example.
 
A good pointer would be version of windows coupled with people who were logged in for 24 hours straight several times in The same week for example.
thats still non-personal information, there's no way to obtain that data
 
and how exactly does any of that information tell you you botted?

Why would they give this information out? If they did we would have an undetectable bot again after each ban wave because we could just have someone request in EU and get the data. It would very silly of blizzard to give out this information.
 
Back
Top