Add privacy policy

[pg9182]

There have been a few questions about this.

[pg9182]

Tentative draft (it has most things, but needs to be proofread):

By using Northstar, you agree to the following privacy policy. If choose not to consent to master server authentication, only limited HTTP request metadata will be stored.

TLDR:
- We share your Titanfall2-specific Origin token with EA to verify your username and game ownership, then discard it, unless you decline master server authentication.
- We send your username, UID, IP, and in-game player data to game servers you choose to connect to.
- We store your username, UID, last IP address, last server, and in-game player data indefinitely to secure your account and run Northstar.
- We store and share all server information if you choose to run a Northstar server. If you run a password-protected server, the IP address will only be accessible to authenticated users.
- We indefinitely store and publish anonymized usage statistics which cannot be linked to specific players at https://northstar-stats.frontier.tf/.
- We store historical IP addresses, usernames, and certain player data filelds to prevent abuse and secure your account.
- We share your player statistics, username and UID via the Northstar API.
- We log HTTP requests (with tokens redacted) for up to two years.
- We log certain metadata from API requests solely to prevent abuse and troubleshoot Northstar.
- We strictly limit access to your data, and you can request its removal.

What we store:
- HTTP request metadata including the URL (with tokens redacted or hashed), IP address, request headers, and timing information. This kind of logging is done by other websites too.
- Basic system version information including your Windows version, whether you use Wine, and your Wine version. This is used to help direct development, identify and troubleshoot problems, and to prevent abuse.
- Authentication or server registration errors. This is used to identify and troubleshoot problems, and to prevent abuse.
- Server metadata and connection requests. This is used to generate anonymized statistics, and to prevent abuse.
- Required player information including the last IP, Northstar-specific token (not the Origin token), uid, username, and the current server. This is stored indefinitely and is the minimum amount of information used to secure your account and allow you to use Northstar.
- Persistent player data. This is used to save your in-game statistics and settings.

How we store it:
- Logs and statistics are stored along with the player database in the United States.
- After two years or less, general logs are discarded, and only partial security/error/anti-abuse logs are retained.
- Only a small subset of Northstar administrators have access to this data, and all access is logged.
- Only the latest version of your player data is directly accessible. Older versions are stored in inaccessible backups. We also store the history of specific fields to prevent abuse.

What we share:
- Player name and UID. This publicly exposed via the API and in-game. This is available through EA even if you do not use Northstar.
- Player IP. This is passed to specific game servers you choose to connect to, and is required to allow you to connect.
- Origin token. This is only shared with EA if you choose to authenticate with the master server, and is only used for verifying your username and ownership of the game. This token is short-lived and cannot be reused.
- Player statistics including kills, deaths, and playtime. This is publicly exposed via the API and in-game.
- Server information including name, IP address, general location, description, and mod list. This is publicly exposed via the API, the online server browser, and in-game.

What we use it for:
- Anonymized aggregate usage statistics. These cannot be used to identify individual players, and are available on https://northstar-stats.frontier.tf.
- Anonymized aggregate performance statistics. We use these to identify and resolve performance issues.
- Troubleshooting. When a ticket is opened, we may look at logs related to information you provide (uid, username, ip address) to help identify and resolve the issue. We may also look at logs to investigate widespread errors.
- Security. We may use logs to identify misbehaving or potentially compromised services.
- Spam and abuse prevention. We use logs to identify and block spam. While we generally do not use logs for investigating most cases of cheating and spam, we reserve the right to do so in exceptional cases.

How statistics are anonymized:
- IP addresses, usernames, UIDs, and hashed tokens are never stored.
- Server metadata is stored as it is not personal information.
- IP geolocation information is geohashed and limited to the Country/City.
- No data about individual players is retained.

How to remove it:
- You can reset your persistent player data in-game or by opening a ticket.
- You can request deletion or a copy of your personally identifying data by opening a ticket and providing your UID and/or username.

So far, we haven't had a large number of requests from people who want their data, but if that increases, I'll throw together a script to generate a data dump.

[barnabwhy]

@pg9182 I've thrown together some edits I feel should be included, mainly to the tldr, again rough draft.

By using Northstar, you agree to the following privacy policy. If choose not to consent to master server authentication, only limited HTTP request metadata will be stored.

The following terms and abbreviations are used:
- Master server: Northstar's backend server, for authentication, progression, and server listing.
- Origin token: The access token generated by EA which ties your account to Titanfall 2 game ownership. This is used for authenticating with EA.
- UID: Origin/EA user account identification number.

TL;DR:
- We share your Origin token with EA to verify your username and game ownership, then discard it. This is not sent until you have accepted master server authentication.
- We send your username, UID, IP address, and in-game player data to game servers you choose to connect to.
- We store your username, UID, last IP address, last server, and in-game player data indefinitely to secure your account and run Northstar.
- We store and share all server information if you choose to run a Northstar server. If you run a password-protected server, the IP address will only be accessible to authenticated users.
- We indefinitely store and publish anonymized usage statistics which cannot be linked to specific players at https://northstar-stats.frontier.tf/.
- We store historical IP addresses, usernames, and certain player data filelds to prevent abuse and secure your account.
- We share your player statistics, username and UID via the Northstar API.
- We log HTTP requests (with Origin tokens redacted) for up to two years.
- We log certain metadata from API requests solely to prevent abuse and troubleshoot Northstar.
- We strictly limit access to your data, and you can request its removal.

What we store:
- HTTP request metadata including the URL (with Origin tokens pbscured by redaction or hashing), IP address, request headers, and timing information.
- Basic system version information including your Windows version, whether you use Wine, and your Wine version. This is used to help direct development, identify and troubleshoot problems, and to prevent abuse.
- Authentication or server registration errors. This is used to identify and troubleshoot problems, and to prevent abuse.
- Server metadata and connection requests. This is used to generate anonymized statistics, and to prevent abuse.
- Required player information including the last IP, Northstar-specific token (not the Origin token), uid, username, and the current server. This is stored indefinitely and is the minimum amount of information used to secure your account and allow you to use Northstar.
- Persistent player data. This is used to save your in-game statistics and settings.

How we store it:
- Logs and statistics are stored along with the player database in the United States.
- After two years or less, general logs are discarded, and only partial security/error/anti-abuse logs are retained.
- Only a small subset of Northstar administrators have access to this data, and all access is logged.
- Only the latest version of your player data is directly accessible. Older versions are stored in inaccessible backups. We also store the history of specific fields to prevent abuse.

What we share:
- Player name and UID. This publicly exposed via the API and in-game. This is available through EA even if you do not use Northstar.
- Player IP. This is passed to specific game servers you choose to connect to, and is required to allow you to connect.
- Origin token. This is only shared with EA if you choose to authenticate with the master server, and is only used for verifying your username and ownership of the game. This token is short-lived and cannot be reused.
- Player statistics including kills, deaths, and playtime. This is publicly exposed via the API and in-game.
- Server information including name, IP address, approximate geographical location (determined using server IP address), description, and mod list. This is publicly exposed via the API, the online server browser, and in-game.

What we use it for:
- Anonymized aggregate usage statistics. These cannot be used to identify individual players, and are available on https://northstar-stats.frontier.tf.
- Anonymized aggregate performance statistics. We use these to identify and resolve performance issues.
- Troubleshooting. When a ticket is opened, we may look at logs related to information you provide (uid, username, ip address) to help identify and resolve the issue. We may also look at logs to investigate widespread errors.
- Security. We may use logs to identify misbehaving or potentially compromised services.
- Spam and abuse prevention. We use logs to identify and block spam. While we generally do not use logs for investigating most cases of cheating and spam, we reserve the right to do so in exceptional cases.

How statistics are anonymized:
- IP addresses, usernames, UIDs, and hashed tokens are never stored.
- Server metadata is stored as it is not personal information.
- IP geolocation information is geohashed and limited to the Country/City.
- No data about individual players is retained.

How to remove it:
- You can reset your persistent player data in-game or by opening a ticket.
- You can request deletion or a copy of your personally identifying data by opening a ticket and providing your UID and/or username.