Baldur's gate 3

Modding Privacy

LAST UPDATED: SEPTEMBER 2ND, 2024

INTRODUCTION

Larian Studios1 has partnered with mod.io to facilitate the creation of Larian-supported modifications (“Mod” or “Modding”) for the video game Baldur’s Gate 3. We share your personal data with mod.io only as necessary to provide the Modding service you have requested access to. If you choose to access Modding without logging into a Larian Account, we will not have access to your data, and thus, neither Larian Studios nor mod.io will be processing your personal data.

We have entered into a controller-controller data processing agreement with mod.io, ensuring they adhere to the same standard of data protection as required by the General Data Protection Regulation (“GDPR”)2, and Larian Studios’ business practices.

Larian Studios does not, however, control how mod.io processes player data, nor is Larian Studios in charge of mod.io's business practices and activities. Therefore, you will be requested to separately accept mod.io’s privacy policies.

In this note, we aim to inform you about the way your personal data is processed by Larian Studios.

PROCESSING OF YOUR PERSONAL DATA IN RE. TO MODS

The Mod manager (where you can download mods) and the Mod toolkit (which provide you with supported tools to create mods) can be accessed without sharing personal data with Larian Studios (or mod.io).

You can also opt to create a Larian Account or link your existing Larian Account. The Larian Account gives you access to cross-platform play, cross-platform saves, and any other functionality, in order to link your gaming history to your modding activity.

The personal data we collect and process as part of your Larian Account is: username (login), display name, email address, password (encrypted), platform id (user id steam, gog, stadia), save game data, and at player’s option friends lists.

1 Larian Studios Games Ltd. of 17a New Bride Street, D08 Y80E, Dublin, Ireland. This policy applies to all entities and processing activities relating to player personal data of the Larian Studios group companies (hereafter “Larian Studios”).

2 European Union Regulation of 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).

In order to publish your custom mods, you are required to create an account with our partner platform mod.io. To do so you will need to log into/create a Larian Account.

LEGAL BASIS FOR PROCESSING

Where personal data is processed, a legal basis for processing must be identified.

In this instance, processing is necessary for the performance of the various functions of the Modding services offered to you. You also have the alternative to engage with the Modding services anonymously without sharing any personal data, but functionality will be limited.

HOW LONG WILL MY PERSONAL DATA BE KEPT

Personal data is kept for as long as necessary to fulfil the purposes for which we collected it, including satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the scope, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. All retention periods have been documented in the Larian Studios’ processing register.

The personal data associated with your Larian Account is maintained as long as your account is active. Data is deleted upon your request to terminate your account, or ultimately after 3 years of an account being inactive.

DATA SUBJECT RIGHTS

Under data protection law, where personal data is processed, data subjects have the right to object to the use of their personal data, either before or at any time after the data is processed.

Should you object to the use of your personal data as described herein, you can contact us at [email protected].

Specifically, in regard to the data processed for the modding service, you have the right to:

  • Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you.
  • Request correction, rectification of your personal data. This enables you to have any incomplete or inaccurate information we process about you corrected.
  • Object to the processing of your personal information when you have legitimate reasons to do so.
  • Request erasure of your personal data. This enables you to ask us to delete your personal data where there is no valid reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing.
  • Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data, for example if you want to establish its accuracy or the reason for processing it. Please note that any objections or restrictions may prevent the Modding services to be available to you or to properly function.
  • Request to obtain your personal information which is processed by Larian Studios in a structured, commonly used, and machine-readable format and/or to transfer this data to another data controller, if technically feasible.

ACCESSIBILITY AND DATA SHARING

Larian Account data is only accessible to a limited amount of Larian Studios’ staff, who are expected to uphold principles of confidentiality and to comply with the provisions of the General Data Protection Regulation (“GDPR”) where applicable.

As stated above, when you sign up for the Modding service, your Larian Account data is also transferred to mod.io, which provides more details on its data processing in their own policies. The relevant data from your Larian Account transferred into the control of mod.io is:

  • Location data (IP address only)
  • User account data: user Id (unique) and user display name
  • Email address.

FURTHER INFORMATION

These guidelines seek to provide information and guidance as to the personal data we process.

Further and more general information about Larian’s use and storage of personal data can be found in our Public Privacy Policy at https://larian.com/privacy. Any questions, comments, or requests you might have on the issues raised in this note, as well as on the subject of data protection and GDPR in general, can be sent to [email protected].

We further note that Larian Studios has appointed an external data protection officer (“DPO”) to consult, advise, and supervise on all matters related to GDPR. Our DPO can be contacted via [email protected] as well.