GDPR

[displaced]

Maybe you should (more sooner than later) make sure your service is within active laws.
~cough~GDPR~cough~

[MagicManICT]

Split the above post off to its own thread so as to not derail another thread. I recall a discussion on it a while back, but haven't had a moment to dig it up.

[shubla]

Seatribe is such a small company that they can just not care about it. They probably will only get a warning anyway if somebody was about to sue them...

[displaced]

Oh lol now my post got his own thread.

Well problem is, the actual law doesn't care if you don't care.
So it's pretty easy for seatribe to avoid beeing a target at first place.

Secure the website. (thats where i actually mentioned it)
Hand out a privacy police. (Specially relevant for the forum...)

Since there are SO many blueprints in that, there's almost nothing you can do wrong.
LetsEncrypt makes HTTPS easy with 0 cost.
We have no ads and no 3rd party things here.
Steps to prevent beein a target are actually a no brainer.

(Since HTTPS is part of the GDPR i meantioned it in the HTTP thread).

Good thing, the only thing they collect are user accounts, maybe email adresses on purchases which btw. would need security too.
Still, as far as i know, punishments for that kind of shit are pretty hard. Especially for a little company like seatribe.

That's basically all there is to it for me to say. If they care or not is totally up to them.
If it's for me this thread can be closed, didn't want to make a big fuss about it anyway.

[MagicManICT]

Oh lol now my post got his own thread.

While not completely unrelated, it has its own bag of issues. That's why it was split.

If you're interested: viewtopic.php?f=40&t=61314&hilit=GDPR#p779448

[shubla]

Devs should maybe care a little.
I just read an article that basically told that any EU citizen could fuck seatribe over!

[Fostik]

Infrastructure requirements of GDPR is overkill for such small game. Moreover, accounts doesnt store any data except user email.

[shubla]

doesnt store any data except user email

And probably IP addresses. But it doesn't matter how much you violate, if you violate at all you can get in trouble if somebody decides to get you in trouble just for the fun of it!
If there is so small amount of data that loftar and jorb hold, then it should be easy to make their company comply by writing few documents etc. I am sure that they can get free counseling, at least in Finland companies and organizations can get it for free if they need.