Habitica

Habitica, formerly HabitRPG, is an online task management application run by HabitRPG, Inc.

5.3/10

How we calculate ratings →

Handling

Does the policy allow personally-targeted or behavioral marketing? Yes, but you may opt-out

4/10

Score

Yes

Yes, but you may opt-out

35%

Yes, but you must opt-in

70%

100%

Citation

5.1 We reserve the right to use anonymous, passive information about your visits to this and other websites (not including your name, address, email address or telephone number) for purposes of serving our ads and third party ads that are targeted to your interests ('3rd Party Behavioral Ads'). We reserve the right to share anonymous, passive information collected on the services with third parties for purposes of serving 3rd Party Behavioral Ads. These 3rd Party Behavioral Ads do not identify you personally. Instead, they associate your behavioral data on visited sites with your browser, so that the ads your computer sees on this site are more likely to be relevant to your interests. 3rd Party Behavioral Ads require that that you be served with a cookie containing a tracking code. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of this site.

Does the service allow you to permanently delete your personal data? No

0/5

Does the service allow third-party access to private personal data? Yes

0/10

This may come in the form of outright data sharing or by using local third-party analytics software (such as Google Analytics, which collects a plethora of user information).

Note that whether the policy allows sharing aggregated user data does not affect this question.

If the personal data is encrypted when it passes through the third-party, it does not count as third-party access (as the data is inaccessible to that party).

If personal data has been made public by, for example, posting it to a blog, it does not count as private personal information (and is therefore not considered by this question).

Score

Yes

The policy allows sharing personal data with third parties (not just critical service providers), and does not explicitly list the third parties.

Yes, all parties specified (including non-critical service providers such as advertisers)

30%

Yes, not all parties specified (but only to critical service providers)

70%

Yes, all parties specified (only to critical service providers)

80%

100%

Citation

Use and Sharing of Anonymous, Passive Information.
The Services may make full use of passively collected anonymous information, including without limitation the right to use such information to provide better service to Service users, customize the Services based on your preferences, compile and analyze statistics and trends, and otherwise administer and improve the Services for your use. We reserve the right to share this anonymous, passive information in aggregated form.
3rd Party Behavioral Ads; Google's AdSense Network.
5.1 We reserve the right to use anonymous, passive information about your visits to this and other websites (not including your name, address, email address or telephone number) for purposes of serving our ads and third party ads that are targeted to your interests ('3rd Party Behavioral Ads'). We reserve the right to share anonymous, passive information collected on the services with third parties for purposes of serving 3rd Party Behavioral Ads. These 3rd Party Behavioral Ads do not identify you personally. Instead, they associate your behavioral data on visited sites with your browser, so that the ads your computer sees on this site are more likely to be relevant to your interests. 3rd Party Behavioral Ads require that that you be served with a cookie containing a tracking code. You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of this site.

Use of 3rd Party Analytics.
We reserve the right to use analytics services provided by third parties. These services use 3rd party cookies to collect anonymous, passive information about your use of this site (see explanation of cookies in Collection of Anonymous, Passive Information above). We use this information for the purpose of evaluating your use of the Services, compiling reports on activity, and providing other services. These web analytics services may also transfer this information to third parties where required to do so by law, or where such third parties process the information on the service's behalf.
[...]
Use And Sharing of Personal Information: General Policy And Exceptions.
Our general policy is that we will use your personal information, including combining your personal information with passive information collected from this site, only for: the performance of the services or transaction for which it was given, our private, internal reporting for this site, and security assessments for this site, and we will not share, sell, or rent your personal information to others. The only exceptions to this general policy: (i) are described in the subsections below, and (ii) if you explicitly approve through our site.

8.1 Affiliates And Service Providers. We reserve the right to provide such information to our affiliates or subsidiaries, or trusted service providers for the purpose of hosting our servers or processing or archiving personal information for us. We require that these parties agree to privacy and security safeguards for this information that are consistent with this Privacy Policy.

8.2 Acquisition; Bankruptcy. In the event that we are acquired by or merged with a third party entity, we reserve the right to transfer such information as part of such merger, acquisition, sale, or other change of control. In the unlikely event of our bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditors' rights generally, we reserve the right to transfer such information to protect our rights or as required by law.

8.3 Enforcement; Legal Process. We reserve the right to transfer such information if we have a good faith belief that access, use, preservation or disclosure of such information is reasonably necessary (i) to satisfy any applicable law, regulation, legal process or enforceable governmental request, or (ii) to investigate or enforce violations of our rights or the security of this site.

8.4 Miscellaneous. We reserve the right to share personal information with the following additional parties: online organizers using our tools and resellers of our products and services from whose site the sale originated (even though the sale originates at site of the reseller, registration and collection of personal information occurs at this site).

When does the policy allow law enforcement access to personal data? When reasonably requested

3/5

Score

Always

This includes cases in which law enforcement either runs the service or has a known backdoor into (or relationship with) the service.

Not specified

When reasonably requested

60%

Only when required by a court order or subpoena

80%

N/A (no personal data to share)

The service would have no personal data to share with law enforcement.

100%

Never (special legal jurisdiction)

The service operates in a jurisdiction in which sharing data with law enforcement is never required.

100%

Citation

Transparency

Does the policy outline the service's general security practices? Somewhat

1/3

Score

Somewhat

The policy provides only a very vague overview of its security practices.

30%

Yes

60%

Yes, including audits

"Reviews," "monitoring," etc. also count as audits.

80%

Yes, including independent audits

Independent "reviews," "monitoring," etc. also count as independent audits.

100%

N/A

The service doesn't collect any personal information.

100%

Citation

We follow reasonable and appropriate industry standards to protect your personal information and data. Unfortunately, no data transmission over the Internet or method of data storage can be guaranteed 100% secure. Therefore, while we strive to protect your personal information by following generally accepted industry standards, we cannot ensure or warrant the absolute security of any information you transmit to us or archive at this site.

Is the policy's history made available? Yes, with revisions or a changelog

5/5

Does the policy require users to be notified in case of a data breach? Not necessarily

0/7

Will affected users be notified when the policy is meaningfully changed? Yes

5/5

Collection

Does the service collect personal data from third parties? No

10/10

Is it clear why the service collects the personal data that it does? Yes

10/10

Score

Somewhat

30%

Mostly

70%

Yes

100%

N/A

The service doesn't collect any personal information.

100%

Citation

The Services may make full use of passively collected anonymous information, including without limitation the right to use such information to provide better service to Service users, customize the Services based on your preferences, compile and analyze statistics and trends, and otherwise administer and improve the Services for your use. We reserve the right to share this anonymous, passive information in aggregated form.
[...]
Our general policy is that we will use your personal information, including combining your personal information with passive information collected from this site, only for: the performance of the services or transaction for which it was given, our private, internal reporting for this site, and security assessments for this site, and we will not share, sell, or rent your personal information to others. The only exceptions to this general policy: (i) are described in the subsections below, and (ii) if you explicitly approve through our site.

Does the service allow the user to control whether personal data is collected or used for non-critical purposes? On an opt-out basis, but only for some non-critical data/uses

3/10

Some services allow users to opt-out or opt-in to of non-critical collection or use of personal data, such as collecting data for personalized advertisements.

Score

On an opt-out basis, but only for some non-critical data/uses

30%

On an opt-out basis, for all non-critical data/uses

60%

On an opt-in basis

60%

N/A (no data used for non-critical purposes)

100%

Citation

5.2 We reserve the right to participate in Google's AdSense network for purposes of serving 3rd Party Behavioral Ads. Google uses DoubleClick's DART cookie for serving 3rd Party Behavioral Ads over the AdSense network. You may opt out of the use of the DART cookie. For information regarding how to opt out, go to http://www.google.com/privacy_ads.html.
[...]
If you supply us with your e-mail address you may receive periodic messages from us with information specific to the Services and required for the normal functioning of the Services as well as for new products or services or upcoming events. If you prefer not to receive periodic email messages, you may opt-out by following the instructions on the email.

Does the policy list the personal data it collects? Yes, generally

7/10

Score

The policy does not claim to not collect personal data, but it also doesn't provide any meaningful insight into the types of personal data it collects.

Only summarily

The policy uses overly vague language to provide a summary of the types of collected personal data.

30%

Yes, generally

All general categories of collected personal data are listed, though not all types of personal data are explicitly mentioned (for example, the list might use a phrase like 'such as' when listing types of personal data).

70%

Yes, exhaustively

All types of collected personal data are listed specifically

100%

N/A (no personal data is collected)

100%

Citation

We reserve the right to monitor your use of the services. As you navigate through the services, certain anonymous information may be passively collected (that is, gathered without your actively providing the information) using various technologies, such as cookies, Internet tags or web beacons, and navigational data collection (log files, server logs, clickstream). The following is a listing and a brief explanation of passive information collection methodologies which we may use from time to time to better understand how the Services are being used.

3.1 A 'cookie' is a text file that this site sends to your browser in the form of a text file The information generated by the cookie about your use of this site (including your IP address) will be transmitted to and stored. Most browsers automatically accept cookies, but they usually can be modified to decline cookies if you prefer; however, certain features of this site might not work without cookies.

3.2 'Session' cookies are temporary bits of information that are used to improve navigation, block visitors from providing information where inappropriate (the Services 'remembers' previous entries of age or country of origin that were outside the specified parameters and blocks subsequent changes), and collect aggregate statistical information on the Services. They are erased once you exit your Web browser or otherwise turn off your computer.

3.3 'Persistent' cookies are more permanent bits of information that are placed on the hard drive of your computer and stay there unless you delete the cookie. Persistent cookies store information on your computer for a number of purposes, such as retrieving certain information you have previously provided, helping to determine what areas of the Services you may find most valuable, and customizing the Services based on your preferences on an ongoing basis. Persistent cookies placed by this site in your computer do not hold personal information.

3.4 You can set your browser to accept all cookies, to reject all cookies, or to notify you whenever a cookie is offered so that you can decide each time whether to accept it. To learn more about cookies and how to specify your preferences, please search for 'cookie' in the 'Help' portion of your browser.

3.5 An Internet Protocol (IP) address is a number assigned to your computer by your Internet service provider so you can access the Internet and is generally considered to be non-personally identifiable information, because in most cases an IP address is dynamic (changing each time you connect to the Internet), rather than static (unique to a particular user's computer). The IP address can be used to diagnose problems with a server, report aggregate information, determine the fastest route for your computer to use in connecting to a site, and administer and improve the Services.

3.6 'Internet tags' (also known as Web Beacons, single-pixel GIFs, clear GIFs, invisible GIFs, and 1-by-1 GIFs) are smaller than cookies and tell the Web site server information such as the IP address and browser type related to the visitor's computer. Tags may be placed both on online advertisements that bring people to the Services and on different pages of the Services. Such tags indicate how many times a page is opened and which information is consulted.

3.7 'Navigational data' (log files, server logs, and clickstream data) are used for system management, to improve the content of the Services, market research purposes, and to communicate information to visitors.
[...]
We will ask you for personal information when you sign up for any specific benefit or purpose that requires registration. Personal information that we collect may vary with each registration, and it may include one or more of the following categories: name, physical address, an email address, phone number, and credit card information including credit card number, expiration date, and billing address, emergency contact information, current medications, allergies, medical insurance information.

Last Updated

May 14, 2021

Sources

Source #1 ↗

Contributors

doamatto