Discovery Grid

Not logged in

Privacy Policy

23 May 2018

Who we are

Our website address is: https://discoverygrid.net Discovery Grid is a virtual world using the opensim operating system. The grid is part of the larger hypergrid metaverse using the same opensim platform. For purposes of the document, customer or client will be referred to as “Avatar” unless otherwise directed. The pronouns 'we' or 'us' refers to Discovery Grid.

What personal data we collect and why we collect it

When you create an account

When you create an account with Discovery Grid, you will be required to enter a real email address that can be used to contact you in the event of a breach of data or other issue within the grid that may affect your privacy. This email address will need to be verified before you will be allowed to access the grid.

You will also be required to create an Avatar name that is NOT the same as your real name. This avatar name will be how you are recognised within the grid. This is not considered personally identifiable information and is required for the business of running the grid.

Lastly you will be required to enter the country you are mainly using your account from within. Again, this is not personally identifiable information but is necessary for business purposes.

As a matter of course, your IP address will be registered when you create an account but the information from this will never be used unless there becomes a serious breakdown between yourself and the grid requiring banning of the IP.

From time to time an email will be sent to your email address requiring you to revalidate your account with Discovery Grid. This is necessary to meet the business requirement of being able to contact you should a breach in security occur. Until you validate this email, your account will be locked but once validated you will have normal access to your account again.

When you purchase a region (sim)

In order to purchase a region you will need to provide the following details in the secure purchasing environment:

  • Your avatar name
  • Your real life name
  • Your address
  • Your email (which must match your registered email)
These details are required as part of normal business operations. These details are passed to PayPal via encrypted connections and fall under the PayPal’s privacy policy. This information is kept in a secure location and is only available to senior management of Discovery Grid.

Cookies

The Discovery Grid website uses session cookies to help manage logins to the website. Cookies are tiny bits of code stored on a user’s computer and are standard practice for most websites. The cookies used by this website are solely used to maintain a secure login connection. Local storage is used to hold the background color and other personal adornment data.

If you prefer you can adjust your browser settings to disable the use of cookies. These settings are usually found in your browser’s preferences, however, disabling cookies means you will not be able to log into your WEB account.

Embedded content from and links to other websites

Articles on this site may link to or include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. There also may be links to other websites. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website. NOTE: Discovery Grid cannot control the collection activities of other WEB sites.

Who does Discovery Grid interact with and what access do they have to your data?

PayPal: The only business that we directly share your data with is PayPal and that is done by your giving permission to make payment via the PayPal portal.

WHMCS software: The support software currently used by Discovery Grid is securely hosted on the Discovery Grid servers and is only available to top level managers of the grid.

SoYouStart: hosts the servers for Discovery Grid. Soyoustart is a subsidiary company of OVH.co.uk who have confirmed to us they comply with the EU GDPR requirements.

GoDaddy: Hosts the domain name for the grid and has no access to personal data of the avatars in the grid.

Podex: Provides virtual currency services within the grid. The information passed to Podex is a requirement of business for Podex to collect but is not part of the Discovery Grid purview. Podex has confirmed to us that they are EU-GDPR compliant.

Gloebit: Provides an alternative virtual currency within the grid. Gloebit has confirmed to us that they are EU-GDPR compliant.

Hypergrid visitors: The data that is transferred, when an avatar from another grid uses the Hypergrid feature to visit Discovery Grid, is ephemeral and transactional. A temporary UUID is created for your avatar that does not allow for personal real life tracking information to be retained or used by the grid in any way. The contents of the suitcase folder are transferred temporarily. Once you leave Discovery Grid that you have visited, this temporary data disappears.

How long do we retain your data

While you have an active avatar within Discovery Grid, your data will be maintained in a secure data repository. For legal and business needs, logs of various activities will be created. These logs are needed for diagnostic and/or data recovery purposes. The logs are stored in a secure repository. Logs are rotated (daily generations recorded) and maintained for approximately 45 days before they are erased. Certain logs may be retained for longer period if legal or critical business needs arise. Databases are maintained to track the virtual resources avatars create as well as the placement on those resources in regions (virtual data spaces). The backups of these databases are rotated and retained for approximately 45 days before they are erased. Some backups may be retained for longer periods if legal or critical business needs arise.

What rights you have over your data

At any time you are able to delete your avatar account. This is accomplished by logging into the Discovery Grid WEB site then clicking on the "Delete Acount" button. The consequences of this action are permanent and will result in full removable of your personal and avatar details. The only items that will remain are objects you have traded with or given to others in some way. However, your name will disappear from the items and will be replaced by a non-de-plume. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Permissions

Using the Discovery Grid website, you can choose the following permission options:

  • Send Avatar IM to Email: When ticked, when you are offline you will receive any messages from individual avatars to your email.
  • Group IM to Email: When ticked, when you are offline you will receive any messages from groups that you have allowed to send messages to your email.
  • Online Visible: When ticked other avatars will be able to see if you are within the grid.
  • Email Marketing: When ticked you might receive advertising from Discovery Grid to provide feedback or information.
Each option can be either ticked (to allow) or not ticked (to disallow), the choice is entirely up to the individual avatar.

What data breach procedures we have in place

Discovery Grid website is hosted by SoYouStart and covered under their security policy. They maintain appropriate firewalls with their hosting services. We are notified of any data breaches that occur, and Discovery Grid will notify avatars of the data breach within 72 hours. The servers are configured and monitored to standard data protection policies.

What third parties we receive data from?

No one.

What automated decision making and/or profiling we do with user data?

None.