NationEconomics

Legal

Data Processing Agreement

For server owners who need the processor relationship written down.

Draft. Not yet in force. Nation Economics is not on sale, so there is no agreement between us to govern. These documents are published early so they can be read, questioned and reviewed before the first sale.

They have not been checked by a lawyer. Written by the developer from the product's own design decisions, which makes them accurate about what the software does and unproven as legal instruments.

Why this is unusually short

A data processing agreement describes what a supplier does with personal data you are responsible for. In most products that is a long list, because the supplier holds the data.

Here it is short, because we do not hold your players' data at all. It stays on your server. When you open a page in the panel, your server sends what that page needs, we render it and discard it. We are a transient processor of data in flight, not a controller of a database full of your players.

Roles

  • You are the controller for your players' in-game data. It is on your machine and under your rules.
  • We are the controller for your own account data, listed in the Privacy Policy.
  • We are a processor for the in-game data that passes through the panel while you are looking at it.

Processing instructions

We process in-flight data only to answer the request you made in the panel. We do not retain it after rendering, mine it, profile with it, or use it to train anything.

Sub-processors

The categories are listed in the Privacy Policy. Named providers and their locations go here once contracts are signed. We will give notice before adding a sub-processor that changes what leaves your server, which under the current design is none of them.

Security measures

Summarised in the Security and Incident Policy, which is a real description of what the system does rather than a list of adjectives.

If something goes wrong

We will tell you without undue delay, with what we know and what we do not yet know. See the security policy for what that means in practice.