Ranked #16 of 16 in Game Action
Red Flags
3"This data may also be used to research and develop solutions, including artificial intelligence models, aimed at detecting and analysing inappropriate behavior such as the use of toxic usernames, hate speech, or verbal abuse. These technologies also help us fight cheating and fraud, preventing unauthorized activity and preserving the integrity of our services."
Ubisoft uses player chat data, user-generated content, and behavioral data to train AI and machine learning models, though framed as being for safety and anti-cheat purposes.
"We may also process user-generated content when you create, upload or share content through our services. User-generated content refers to anything you create or share through our services, such as image, video, avatars or other creations. ...This data may also be used to research and develop solutions, including artificial intelligence models, aimed at detecting and analysing inappropriate behavior."
Ubisoft processes all user-generated content โ including images, videos, avatars, chat records, and other creations โ and uses this content for purposes beyond the original sharing intent, including AI model training.
Warnings
7"We may share your personal data with: Ubisoft subsidiaries, affiliated companies, and internal teams... Service providers to support the delivery, operation and promotion of our services... Distribution partners on console, PC, or "First Party" partners when you access our games through their services, such as Sony, Microsoft, or Steam... Advertising partners who use your personal data to provide you with personalised content."
Ubisoft shares personal data with a wide network of partners including advertising companies, distribution platforms, community developers, and streaming services, creating extensive third-party data flows.
"Ubisoft may collect and process the following categories of Sensitive Data: Payment information associated with your Ubisoft player account, Precise geo-location, and Personal Data from a child under 13. ...we may process personal data, such as your user ID and in-game preferences... technical data (e.g., device model, operating system), gameplay activity... and geolocation at the country level only."
Ubisoft collects precise geolocation data, which it classifies as sensitive data. While mobile games claim country-level only, the U.S. section explicitly lists precise geo-location as a category of sensitive data collected.
"Your cross-progression data to enable seamless gameplay across different devices and platforms, we process personal data such as platform specific identifiers, account identifiers, game data and device information. ...We process some tracking technologies such as cookies, pixel, APIs, SDK, click processing, server-side processing, when you use our services or visit a third-party website where we and our trusted partners provide content or carry out content use analysis."
Ubisoft tracks users across multiple devices and platforms using platform-specific identifiers, cookies, pixels, SDKs, and server-side processing, building cross-platform profiles of user activity.
"In some cases, even if you request deletion of your data, Ubisoft may retain limited personal data. This data will be kept when necessary to comply with legal obligations, enforce our legal rights or protect our legitimate interests, for example, to manage fraud, enforce sanctions, or ensure the security of our services. ...Your order history and related purchase data will be kept for up to 10 years to comply with tax and audit regulations."
Ubisoft retains personal data even after users request deletion, citing broad justifications like 'legitimate interests' and security. Purchase data is kept for up to 10 years, and other data retention timelines are vaguely defined as 'as long as necessary.'
"We invite you to consult this Privacy Policy regularly, as it may be updated from time to time to reflect our privacy practices or for legal requirements. We are committed to informing you of any substantial changes made to this Privacy Policy."
Ubisoft reserves the right to update the privacy policy at any time, only committing to notify users of 'substantial' changes โ a subjective threshold that leaves non-substantial changes unannounced while continued use implies acceptance.
"This may include technical connection data (e.g. IP addresses, session IDs, logs), diagnostic data (e.g. crash reports, system or application logs, execution traces), configuration data (e.g. operating system version, network settings, game or service version), and interaction data. ...we may process personal data, such as your user ID... technical data (e.g., device model, operating system), gameplay activity (e.g., games played, purchases, ads viewed)."
Ubisoft collects extensive device and technical data including network settings, system logs, execution traces, device identifiers, and console identifiers, going beyond what's strictly needed for gameplay.
"As a result of the account closure, you will lose access to your account, games, your game progressions, access to all Ubisoft online services, orders that currently remains in the Ubisoft Store and the link with all external accounts. ...In some cases, even if you request deletion of your data, Ubisoft may retain limited personal data. This data will be kept when necessary to comply with legal obligations, enforce our legal rights or protect our legitimate interests."
Account deletion involves losing all purchased games and progress, a 30-day waiting period (for children's accounts, likely similar for adults), and Ubisoft still retains some data after deletion for broad 'legitimate interest' reasons.