Posted August 30, 2023
...
I would tolerate a checkbox in that notice that was selected, that I could deselect before grabbing the game, but that's it.
Post edited August 30, 2023 by tfishell
tfishell
Remorse: The List, if you like FPS psych horror
Registered: Oct 2010
From United States
...
I would tolerate a checkbox in that notice that was selected, that I could deselect before grabbing the game, but that's it.
lupineshadow
New User
Registered: Apr 2012
From Japan
Posted August 30, 2023
Only if:
1: you communicate all of this explicitly with an up-to-date accurate privacy policy (none of these details are explained properly in the privacy policy)
And
2: if you trust google. Most of us do not trust google but they are your trusted partners...so GOG by association can't be trusted.
Lazarus_03
Dedicated Lurker
Registered: Dec 2016
From Other
Posted August 30, 2023
About the customer matching process
How it works
You create a customer data file based on information shared by your customers.
To keep your data secure, you can hash your customer data yourself using the SHA256 algorithm, or Google Ads will hash the data for you using the same SHA256 algorithm, which is the industry standard for one-way hashing
Google even have this hashed value of the Google user's email address recorded. They did said so: You create a customer data file based on information shared by your customers.
To keep your data secure, you can hash your customer data yourself using the SHA256 algorithm, or Google Ads will hash the data for you using the same SHA256 algorithm, which is the industry standard for one-way hashing
Email address and phone matching
Google keeps track of the email addresses and phone numbers for Google accounts and the corresponding hashed strings for those email addresses or phone numbers.
After you've uploaded your customer list of email addresses and/or phone numbers, Google Ads will compare each hashed string on your customer list with the hashed string for email address or phone number of Google accounts. If there's a match, Google adds the corresponding Google account to your Customer Match segments (Customer list).
And sure enough, they have their guarantees: Google keeps track of the email addresses and phone numbers for Google accounts and the corresponding hashed strings for those email addresses or phone numbers.
After you've uploaded your customer list of email addresses and/or phone numbers, Google Ads will compare each hashed string on your customer list with the hashed string for email address or phone number of Google accounts. If there's a match, Google adds the corresponding Google account to your Customer Match segments (Customer list).
• Limited data use. We won’t use your data files for any purpose other than to create your Customer Match audiences and ensure compliance with our policies. We won’t use your data files to build or enhance profiles of your customers.
• Limited data access. We won’t share your data files with other Google teams other than to create your Customer Match audiences and ensure compliance with our policies. We use employee access controls to protect your data files from unauthorized access.
• Limited data sharing. We won’t share your data files with any third party, including other advertisers. Google may share this data to meet any applicable law, regulation, legal process or enforceable governmental request.
• Limited data retention. We won’t retain your data files for any longer than necessary to create your Customer Match audiences and ensure compliance with our policies. Once those processes are complete, we'll promptly delete the data files you uploaded via the Google Ads interface or the API.
…followed by: • Limited data access. We won’t share your data files with other Google teams other than to create your Customer Match audiences and ensure compliance with our policies. We use employee access controls to protect your data files from unauthorized access.
• Limited data sharing. We won’t share your data files with any third party, including other advertisers. Google may share this data to meet any applicable law, regulation, legal process or enforceable governmental request.
• Limited data retention. We won’t retain your data files for any longer than necessary to create your Customer Match audiences and ensure compliance with our policies. Once those processes are complete, we'll promptly delete the data files you uploaded via the Google Ads interface or the API.
[…] As with other Google advertising products, we may use information derived from impressions or clicks on Customer Match ads to improve Google Ads and other Google products and services.
Note: About the 'Limited data retention.', the data files they mention that they would delete will be the user's Email Address to be handed by GOG in this case, not the 'Customer Match data' that will be created by the whole process. There's also one for Facebook, but I couldn't be bothered skimming.
―――――――――― ―――――――――― ――――――――――
Not that they trust them or anything. (nor it was reassuring)
lightwo_owo
Linux User
Registered: Sep 2017
From Croatia
Posted August 31, 2023
It's more of a loophole than a genuine form of anonymisation.
And as for advanced fingerprinting, it is unnecessary if Google/Facebook already know exactly who you are based on what I just described.
Post edited August 31, 2023 by lightwo_owo
lightwo_owo
Linux User
Registered: Sep 2017
From Croatia
Posted August 31, 2023
At least if you announced that in some way or made it clearer on the redemption segment, I would be satisfied with the response, but this is still disappointing.
About "immediately revoking consent", anyone who is unaware will never get the chance to do it. It feels like malicious and deceptive design.
Braggadar
Discombobulate
Registered: Mar 2018
From Australia
Posted August 31, 2023
Post edited November 27, 2023 by Braggadar