Electronic Arts has denied that download service Origin breaks privacy law and spies on users.
Electronic Arts has denied accusations from German gamers that download service Origin breaks privacy laws and spies on the activity of Battlefield 3 gamers.
EA's Origin is required to play Battlefield 3 on PC and German gamers were provoked into outrage after images appeared online which indicated that Origin was accessing external programs and data synced from mobile phones.
German newspaper
The Spiegel also posted a list of items from Origin's license agreement, highlighting areas it believed violated German privacy law. These clauses included EA reserving the right to access data from other EA products without notifying the user, as well as the right for EA 'and partners' to "gather, use, store and transmit technical" on "IP addresses, usage data, software, equipment, software usage and existing hardware peripherals" for "marketing purposes".
German gamers responded by giving
negative Amazon reviews to Battlefield 3 on PC and returning shop-bought copies to stores, says
Eurogamer.
EA has updated the Origin EULA in response to the outcry and issued a statement to address concerns.
'
We have updated the End User License Agreement of Origin, in the interests of our players to create more clarity,' says EA Germany. '
Origin is not spyware. Neither do we use nor install spyware on the PCs of users.'
'
We do not have access to information such as pictures, documents or personal data, which have nothing to do with the execution of the Origin program on the system of the player, neither will they be collected by us.'
Origin's license agreement matches '
industry-standard privacy policies...[but] where necessary, we will of course work together with the relevant Government agencies to ensure that our policies are and remain legally compliant.'
Read our
Battlefield 3 review for more information on the game, then let us know your thoughts in
the forums.
86 Comments
Discuss in the forums ReplyOr dont buy it and risk the death of high end gaming development?
I didn't realise you had to have Origin with a shop-bought copy? my plan was to buy the disc and avoid origin that way, but if that's not possible it'll have to be an -avoid- title i guess.
Yup, you need Origin to run the game.
I feel like a sellout putting my fingers in my ears and going "LAlalalalalalaal" over this origin nonsense. I normally don't buy the games if I don't like the terms, like always on DRM but by god i'm loving BF3 and I want to continue playing it. :(
D.I.C.E is the real victim here.
*hangs head in shame*
Its actually a pretty good piece of software (if rendered somewhat obsolete by Battlelog)
It's not a mode, you have to run Origin/BF3 sandboxed. A few guides are popping up on the net , one here.
I must say though, EA has done an impressive job of turning one of my most anticipated games of the year into one I wouldn't touch with a 10ft pole with the amount of **** they think they can get away with (no mod support, woeful server browser system, compulsory Origin installation, no Steam etc. etc.).
If they have now retracted all that nonsense, then I may actually buy BF3. Its not a case of having anything to hide, its a case of its my PC so keep your nose out.
Please correct me if Im wrong.
That part of the EULA got changed a good while back but even in it's original guise it never said that EA would be accessing whatever they wanted on your PC and sharing it with third parties. It may have been possible to interpret it that way thanks to some poor wording choices but it remained nothing more than an interpretation/guess about what EA would do.
So being forced to install Origin is bad but it'd be fine if people were forced to install Steam instead?
/concur.
<teacup><Storm></teacup>
These are the terms below, have they been changed?:
You agree that EA may collect, use, store and transmit technical and related information that identifies your computer (including the Internet Protocol Address), operating system, Application usage (including but not limited to successful installation and/or removal), software, software usage and peripheral hardware, that may be gathered periodically to facilitate the provision of software updates, dynamically served content, product support and other services to you, including online services. EA may also use this information combined with personal information for marketing purposes and to improve our products and services. We may also share that data with our third party service providers in a form that does not personally identify you. IF YOU DO NOT WANT EA TO COLLECT, USE, STORE, TRANSMIT OR DISPLAY THE DATA DESCRIBED IN THIS SECTION, PLEASE DO NOT INSTALL OR USE THE APPLICATION. This and all other data provided to EA and/or collected by EA in connection with your installation and use of this Application is collected, used, stored and transmitted in accordance with EAâs Privacy Policy located at www.ea.com. To the extent that anything in this section conflicts with the terms of EAâs Privacy Policy, the terms of the Privacy Policy shall control.
Who wants to bet mass effect 3 will be the same?
Excellent post from that Mitsuhiko fella. Thanks for posting it.
Yes.
They didn't get kicked off Steam. They refused to use Steam thanks to Valve's policies on DLC. Policies which can be proven to exist due to the fact they have also caused the developer of Minecraft to refuse to use Steam to sell Minecraft. As for whatever "practice" you're claiming Valve wouldn't allow them to do you should take a look at the post Baz has posted which does a great job of explaining what Origin actually does in terms of accessing your PC.
http://eacom.s3.amazonaws.com/EULA_Origin_9.16.11.pdf
So it fits pretty solidly into my definition of malware/spyware - doing something I potentially don't want it to do, before it's even asked me, potentially resulting in a privacy violation.
Also, if EA want to calm this storm, I would suggest that they tell us exactly what Origin uploads - and to whom. Of course, that would only calm the storm if Origins data uploads are completely benign... and given EA's reticence to detail what Origin is doing and who it's giving data to... I can understand the concern.
...
While Sandboxing might work, how effective is it?
Thanks for the link. Unfortunately, it still is not clear what Applications and Software it monitors. Its all rather vague and my trust in EA is pretty low since this all started. Until things become clearer I'll not be installing anything requiring Origin.
That said, battlelog is awful; tired of having to disable my virus scanners web shield to play online, don't like the stupid limit of 150 servers in the browser, the rubbish filters (why would I want to look for empty or full servers? shouldn't I be looking for NOT empty or NOT full servers?), the way I can only get a multiplayer game via the quick match function which means I'll end up anywhere reducing my online experience to the same selection process as a console - if I search the other way, all the servers are already full or will be by the time I try them. Thank god I don't have my own server; I'd never find it.
Despite the privacy concerns, despite the fact I'm not usually in to "war" games (where are my lasers with robot sharks attached?) and despite battlelog turning out to be worse than I thought it would be, once I'm actually playing I don't care :) I just stick Origin in a Sandboxie Sandbox, you can create a batch file or a bookmark/favourite to run Battlelog from if you don't want to interact/see Origin after it's running in the background. So I'll hang my head with shame like runadumb and keep playing :(
"I WON'T BE BUYING THIS GAME BECAUSE BLAH BLAH AND BLAH."
Honestly, who cares? It's a fantastic game, and if origin (which I think is on a par with steam) wants to scan my hard drive so that I can have my games in one place then go for it. I have nothing to hide, and I delete any personal data as soon as I don't need it.
If you are going to deprive yourself of arguably the game of the year then good for you. But it's pointless whining about it, because the rest of us are too busy having fun.
2 - Shows EULA to potential BF3 players
3 - ?????
4 - Profit!!
If youre not interested in this matter then why are you on a blog regarding the subject?
An Im a 37 year old IT professional who worries whether some creepo data analyst at EA will be able to trawl through the pics of my kids that are stored on my pc or be able to access any of my bank data also on there. For me, its an important subject that needs to be clarified as I do want to actually play this game. Sorry if our concerns annoy you.
What exactly are you expecting? A specific list of the software that it'll look at?
And to be honest, given that there's no evidence that EA have actually spied on anyone and that this whole thing appears to be nothing more than a storm in a teacup how exactly has it caused your trust in EA to drop?
They won't. I'm not being funny but it's not that hard to keep track of what an application is doing on your PC. There's plenty of tools to allow you to do it. How long do you think it'd take to discover that Origin was in fact scanning files like that and uploading them to EA? And how much damage it'd do to the company if they were in fact doing that?
The problem is the concerns only exist due to ridiculous sensationalised news reports that were based on nothing more than some guy's interpretation of a EULA. A EULA which has since been changed to clarify that EA have no desire/interest in spying on you. There hasn't been anything to support the claim that Origin is doing anything more than what it's designed to do, i.e. be an online content delivery platform/DRM tool.
For me, yeah. Because Steam works and it is my digital distribution platform of choice. I don't expect you to agree and I know it will be different for everyone (some people prefer other DD sites, others only like to buy boxed retail copies), but for me, it's not something I'm not comfortable with.
To Origin thing alone probably isn't a dealbreaker though, but everything combined makes it a rather unattractive package.
My only concern is this information is worth money, and I'm giving it to EA for free. They should have an opt in policy, for those willing to hand over there personal computing habits should have the game discounted. Those not should pay full retail and get a free tin foil hat.
What is "this data" exactly?
Now, I for one don't want some legal troubles cause I have a noCD crack on old NFS games or for having torrented versions of ea games I own but have broken discs or they've been lost/stolen. I think I'll go uninstall origin now. Shame I downloaded but never got aroud to playing the BF3 beta. Doesnt look like I'll be buying anything that requires origin either.
Even if the paragraph above turns out to be false, I still don't trust EA even with standard EULA's when it comes to gathering any of my data. They don't have a good track record on not being pricks, and the less companies poking around my PC, the better.
Also, yes I have things to hide on my PC, but so do a lot of other people, so the "if you've got nothing to hide, then there's nothing to worry about" argument can GTFO.
Have any examples? Any of them actually backed up with proper proof showing Origin actually accessing the contents of files that have nothing to do with it and then uploading said content to EA? Or are they all based on interpretations of the EULA or people's misunderstanding of what tools like procmon are actually showing them?
I imagine it is the data they specify in the EULA
EA have become very diverse as of late in collecting user preferences and habits, especially since they make so much money of face book punting data for market research.
You mean the same sort of data that most companies tend to collect about their customers then?
Undoubtedly so, however savvy people by and large have many options available to them to prevent most companies getting any more than an email address or the odd phone number. I guess many people find this method a little too personal.
If i go to Tesco to get my weekly shop, but in doing so i have to agree that a Tesco employee comes into my home to take photos of the contents of my fridge, freezer and every room of my house. Would i be willing to shop at Tesco?, probably not. So why should it be any different for a PC?
And when exactly is something like that happening on your PC?
Well this particular thread for one is highlighting the typical concerns surrounding Origin.
Can you answer this question?
Why are EA intersted in having access to applications or any other data that is on my pc that has nothing to do with the game? Why put this in your Terms?
When EA force buyers into a position where they must allow
EA 'and partners' to "gather, use, store and transmit technical" on "IP addresses, usage data, software, equipment, software usage and existing hardware peripherals" for "marketing purposes".
Its really all down to personal choice as far as im concerned. The deal is, they make a game, i buy it, thats that, they make money, i have fun and every ones a winner.
But apparently not. I see that as a slight breach of trust here, as apparently im not just buying a game to enjoy, im being forced, and thats pretty much the problem, im being forced to adhere too something I probably would not be voluntarily part off.
Forcing being to be part of something they would not normaly be party too is always going to cause resent meant, no matter how inconsequential it is.
That's it.
Well, I say good for them. who am I to persuade them to give their data to Origin?
I'd rather play more rounds of BF3 than argue that ;)
Where does the EULA say that EA have any interest in having access to applications or any other data on your PC that has nothing to do with the game? Or indeed that's what they're doing?
Firstly can we stop using what was said in a now defunct EULA as a basis for claims about what EA and Origin are doing on our PCs? Secondly could we try basing claims on what Origin is actually doing as opposed to what someone thinks it might be doing because of the way they've decided to interpret a now defunct EULA?
Right here. It does not clearly state whether it refers to general applications or EA specific Origin software.
This is taken from the link you posted earlier, and it is this which I find unclear.
I dont care about my IP and stuff as its all relevant and needed to play the game online, what gets me is the last 2 lines.
The non-personally identifiable information that EA
collects includes technical and related information that identifies your computer
(including the Internet Protocol Address) and operating system, as well as
information about your Application usage (including but not limited to successful
installation and/or removal), software, software usage and peripheral hardware.
Application refers to Origin. And you're right that it doesn't give specifics about the software but how would you expect them to do that? Update the EULA everytime a new game is released on Origin? And where does that leave them when they need to collect data for things like bug/crash reports?
It's no different to Steam which has provisions in it's user agreement to allow it to identify software or hardware processes that allow you to cheat or to include details of other software and hardware in automated bug reports. It's simply not possible to be explicit about what software or hardware details will be included because every PC is different.
Like many people, I'd prefer if I didn't have to run Origin at all and the fact that people have been able to play the game online without Origin by using a crack suggests to me that Origin is necessary only because EA want it to be - Because EA want us all running it either for reasons of marketing and mindshare or so that they can observe what software we've got installed.
For that reason, I run it Sandboxed. Paranoid, tinfoil hat, whatever. It's pretty hard to get your rights back when you willingly give them up for the sake of playing a game and I'm an extremely private person to begin with.
It took me about 30 minutes to get Origin, BF3 and Battelog all working under a Sandbox and since then it's been working flawlessly for me while still giving me peace of mind that EA aren't getting any more information about me from my system than they need to for BF3 to work.
It doesn't bother me much if apologists, fanboys and people with little regard for their own privacy think I'm a fool. The end result is that I get to enjoy BF3 and maintain my privacy for the sake of a half an hour's work.
I find it truly astounding as to how many people are up in arms about this. If you really cared that much about your super secret personal data why not keep it on an external drive and keep it disconnected until you need it?
It doesn't have to be super-secret for someone to reasonably not want a company like EA sniffing around in it; and the reason 'why not' is because nobody should have to.
You may not see why people are up in arms about this, and I don't see why you couldn't accept that other people might be more protective of their privacy and rights than you are.
You may not care - Why try to demean the people who do?
The only problem I have with people being up in arms about it is that it's all based on nothing. Present some credible evidence of Origin scanning and uploading the content of files that have sod all to do with it or any of the software running through it and I'll happily climb onboard the "I hate EA and they're stealing all my data" bandwagon. But at the moment there isn't any evidence of that nature and it's nothing more than people getting worked up about the way an old EULA was worded.
i suppose they could have written something along the lines of 'i had sex with the wife' now some people would read that as 'i had sex with your wife'
how many people used ea downloader? thats all origin is but with more features
http://www.gamefaqs.com/boards/960869-battlefield-3/60145714
Sup?
I'm no fan of origin. But this whiling from PC gamers (of which I'm one) is getting old.
FTFY and I agree.
If I ever found out that EA were taking information from my pc that could mean someone could steal money from my, bank or steal my identidy etc then I simply would uninstall Origin (EA Download Manager) and stop using it for good, and then seek legal advice about it.
I seriously doubt that EA would leave themselves wide open to lawsuit's for doing that sort of thing, granted they may collect information on OS and IP but seriously it's not that hard to change your IP or OS and program's for, recording gameplay video's etc that people do.
I think this is just another way for people to say "I'm not buying the game because Origin is looking at my files on my pc that are related to the game and also to Origin".
I think this is the same thing that Valve does with Steam but, a little more detailed than Steam does.
Up to now since I have been using Origin and EA Download Manager as it was known before, I have never had anyone say to me "Oh you have pictures of this person" or "You have a illegal copy of X on your system we will report you" I don't need a tin foil hat or any conspiracy theory nut job's trying to tell me that I shouldn't play a game, because I might get spyed on, considering I am most of the time under CCTV just walking down street's and that doesn't bother me so why should this.
Most of the people have said they were not buying this game because of it not being on Steam and now, it's because they are doing the same thing as what Steam does but in more detail.
I would prefer not to have to use Origin or Steam but because I want to play the games that I play, I accept that there is some information that I can give to help them create better patches and allow companies to figure out who's hardware and software is used most, to make them better then so be it.
EA's a video game publisher, the information they want is on your hardware, your usage stats for their games/Origin, and what other software you have installed. They don't care about your personal files and aren't going to open themselves up to a legal ****storm by trying to get them.
This End User License Agreement (âLicenseâ) is an agreement between you and
Electronic Arts Inc, its subsidiaries and affiliates ("EA"). This License governs
your use of this application and all related software, documentation, and updates
and upgrades that replace or supplement the application and are not distributed
with a separate license (together, the âApplicationâ). This Application is licensed
to you free of charge. You do not own the Application.
The essense of the section which is being panicked about is covered in this, the application is the application to which the EULA applies, not any arbitrary application. Which when properly considered should clarify things.
If any company forces me to install services like Origin, Steam, Valve, Punkbuster, etc, etc, etc then I'm simply going to say: NO THANKS!
If I'm going to buy a CD/DVD/BD then I want to have the possibility to install and play the damn game without being connected to the internet. And sure I don't want any service installed that scans my PC, regardless of what type of files they're scanning with this service.
I don't trust noone
Anyway, if the same people pulled apart other EULA's for other software packages they would probably start crying about them too.. Can't wait to see all you boycotters playing in 3 months time just like that steam group that boycotted MW2...
...but they reserve the right to do something in the (current) EULA.
"Sign here, in the future, I may rob your house, but it's okay, I'm not doing it right now" ;)
Also: In Germany, a EULA that can be read only after the software is purchased, or is shown on Installation AFTER purchase, is not legally binding.
This, is obviously a ploy from Valve!
Prepare as they will announce Half Life 3: Origin soon!
*tin hat off*
read the EULA yourselves, test Origin yourselves, don't act upon some dumbass' post on the internet...
seriously... it's where "Trolls abound" and all that stuff?
come on BT community... I thought you were maturer than this!
And which bit of the EULA are you figuring reserves them the right to look through my PC at will and upload whatever they want?
http://www.geeksailor.com/battlefield-3-crack-multiplayer-without-origin/
The bottom line is you've got to expect EA to get hacked wide open one of these days, because sooner or later it happens to everybody. So if you're going to run an un-sandboxed version of Origin on your system then you have to be confident that nothing it might find is of value to anybody. Not EA, not hackers, not anybody.
Comparing those things you mentioned to third party apps scanning my PC isn't really the same, is it?
I, too, didn't buy the game because of Origin. I bought it because of DICE, their previous excellent games, the good reviews and how much I enjoyed BF2.
I love BF3 and I'm glad I bought it.
EULA 9.16.11
Sections 1.C and 2 below describe the data EA may collect and use in the
course of providing services and support to you in connection with the
Application.
excerp from 1CYou acknowledge and agree that the Application may use information
regarding your computer, hardware, media, software and your use of the
Application to validate your license rights and to update the Application.
there it is. All your software and media and hardware MAY be collected and used.
Again, I'm not saying they're using this clause at the moment.
I also know this is probably not what they MEAN, but it is what it says.
I think* it's harmless and it may mean they gotta check for their own software, and your drivers and settings, and look for cheating software.
*I'm not EA, I cannot know, can you?
Like I have previously said; "The less companies poking around my PC, the better." I don't care as much that origin may snoop through my software and send me angry letters about cracked games, but about what happens when hands even dirtier than EA's manage to take personal information.
The less companies and organisations that have any personal info on you, the less likely of having that info turn up in unsavory places.
How does hacking the Origin servers lead to you being able to harvest personal data from PCs directly? I can see them being able to access data already held on the servers but that's it. And it again all comes back to what EA are actually holding on you beyond what you have provided thru your own volition. I've still not seen any credible reason to suspect they're harvesting anything from customer's PCs beyond that would be reasonably expected when using a program such as Origin.
IMHO this is the CORRECT way to do it. EA is basically saying you HAVE to do it to play the game and you won't see the details being reported. Corporate bosses need to learn more about transparency engendering trust.
As to having "nothing to hide" - you, sir, are either being naive (try looking at your webpage history through a stranger's eyes and see how much information you can infer from it - or consider the effect incorrect data or a processing error could have) or a complete non-entity who buys nothing, views nothing and posts nothing online.
As far as Steam is concerned, similar concerns should apply - Valve's EULA is similar in many respects (see section 5) but without the marketing/third party data transfer provisions.
As you have nothing to hide when can I install CCTV inside your house and perhaps you would like to provide all your logins passwords and bank details as these don't need to be kept private either.
Personally I am fed up of DRM meaning the paying customer gets a worse service than a pirate, So I no longer pay for games with DRM I don't like (yes that includes steam) I'm not deprived of anything the only people who have lost out are EA as I haven't paid them.
Because anyone really gives a monkey's about your 'campaigning'. All those Illuminati racists that control the gaming world have just been looking for a way to take you down through your computer. If you're that paranoid, do what everyone else who shares your paranoia does and sandbox Origin so that it cannot access your data.
So the best approach with untrusted software is not to sandbox, but to boycott it. If you wish to "trust" EA, then that's your privilege but to tolerate such behaviour in a product you're paying for strikes me as utter madness.
And which behaviour would this be exactly?
None of which, aside from the wording of the EULA, has any evidence in support of the claims and appears to be nothing more than hearsay and conjecture.
I've not got BF3 yet (waiting for CPU upgrade), but I'm willing to give EA the benefit of the doubt until proven otherwise.
I mean really, what is the likelihood that they'll use Origin as a secret back door to scan all your personal files? Even though they stated that the data they may look for is non-idenfiable, and no EULA overides basic Data Protection and Privacy laws. I'm pretty sure at least in the UK if EA tried to do that, a few public bodies would get involved quite quickly.
Alpha, beta, release, pre-release, they're all just words. Would Origin somehow perform better if it was titled as release software rather than beta software? Not at all. They could easily say it's released right now without updating it. It's entirely EA's choice to call it a beta because they don't feel it's complete. The advantage of calling a product a beta is the freedom to change various aspects, nothing is set in stone. This helps lessen the blow when customers don't like a certain feature as EA can come back saying "well, this is a beta and we'll remove the feature".
If you're honestly worried about using "beta" software remember that Origin is just a modified EA Download Manager/EA Store/EA Link, not an entirely new application. All that's new and "beta", really, is the social features and pretty interface.
As Sloth points out, no EULA or 'Privacy Policy' can override national law. EA has a great many clever lawyers, they are highly unlikely to do anything that could make them liable for a class action (or equivalent) lawsuit.
So UK data protection law wouldn't stop EA from sharing information they collected about hardware/software setup or computer usage with all and sundry (you *did* click on "Accept" when shown their EULA, right?) with the possible exception of pr0n website usage, since that could arguably be "personally sensitive".
Yes, EA will have clever lawyers - and they'll most likely be advising on every weakness and loophole they can find in an already permissive system.
It's like two rival factions of the Borg duking it out. A pox on both their houses.