Sponsored By

New lawsuit alleges Ubisoft shared user data with Meta

The suit claims Ubisoft violated several federal acts by not letting users know (or consent) to having their private information shared with Meta.

Justin Carter, Contributing Editor

October 9, 2024

2 Min Read
Naoe and Yasuke in Assassin's Creed Shadows.
Image via Ubisoft.

Bloomberg Law reports Ubisoft is being sued for allegedly sharing player data from its store and Ubisoft+ subscription service with Meta.

In the suit, plaintiffs Trevor Lakes and Alex Rajjoub allege they learned of the data sharing when they individually bought or downloaded games from the developer's website. During these instances, they were also logged into their respective Facebook accounts, which revealed key personal details like their names, jobs, and where they live.

Ubisoft's website allows users to log in through different social accounts, including Facebook. Account linking is common, and it can show a user's friends what games they are playing or offer in-game incentives by developers.

The plaintiffs further claimed the French developer does not mention on its website that users will have their publicly identifiable information (PII) "captured by the Meta Platforms" via the Pixel tracking software it uses.

Doing so "thereby exposes the subscribers’ PII to any person of ordinary technical skill who received that data," reads the complaint. It notes the software could not be on Ubisoft's website or placed on Facebook without the developer's direct action or "knowledge and cooperation."

And by "compelling" a user's browser to disclose website cookies and event data, it is alleged Ubisoft "knowingly discloses information sufficiently permitting an ordinary person to identify what video games a specific individual has purchased."

The complaint also says Ubisoft and Meta's alleged sharing is in violation of several acts, including the Video Privacy Protection Act (VPPA), which is meant to stop video rental companies from sharing PII without explicit user permission.

Along with monetary damages for everyone affected, the plaintiffs are calling for "injunctive relief requiring [Ubisoft] to immediately remove the Pixel from the Website," or seek (and gain) direct consent from users.

They also want Ubisoft to "anonymize video game titles in URLs, parameters, and metadata and/or hash PII Users’ Facebook user IDs (“FIDs”) in the Pixel transmissions."

At the time of writing, the lawsuit (which can be read in full here) has not reached class action certification. The plaintiffs are seeking a trial by jury.

Game Developer reached out to both Ubisoft and Meta for comment. Ubisoft said it "does not comment on legal matters," and we will update with Meta's response when it is given.

Read more about:

LawsuitsUbisoft

About the Author

Justin Carter

Contributing Editor, GameDeveloper.com

A Kansas City, MO native, Justin Carter has written for numerous sites including IGN, Polygon, and SyFy Wire. In addition to Game Developer, his writing can be found at io9 over on Gizmodo. Don't ask him about how much gum he's had, because the answer will be more than he's willing to admit.

Daily news, dev blogs, and stories from Game Developer straight to your inbox

You May Also Like