Difference between revisions of "Linden Lab Official:Scripted Agent Policy"

From Second Life Wiki
Jump to navigation Jump to search
m (Removed a confusing reference to bots and traffic)
 
(2 intermediate revisions by one other user not shown)
Line 2: Line 2:
{{Policy Nav}}
{{Policy Nav}}


==Introduction==
==Overview==


This guide gives a brief introduction to privacy considerations for Personal Data of Second Life Residents. It is not a replacement for reading applicable global privacy regulations, but it may guide you to make informed decisions that respect the privacy rights of Second Life Residents.
This policy summarizes Linden Lab's policy on Scripted Agents. The policy covers all forms of Scripted Agents, such as bots, NPCs, and inviters. Any script or program that automates access to Second Life and its supporting web services through interfaces designed for the Second Life Viewer and its embedded browser is considered a Scripted Agent.


==Privacy Rights of Second Life Residents==
Second Life allows Scripted Agents with legitimate uses, but inappropriate uses are violations of this policy. The goal of this policy is to increase the fairness and reliability of Second Life’s search and communications services, to protect the privacy of Second Life Residents, and to make Scripted Agent developers and operators aware that the same global privacy regulations that apply when collecting Personal Data through websites apply when collecting data through Second Life.


Data transferred outside of the Second Life service or its supporting websites is not exempt from protection under applicable data privacy laws. This applies whether data is collected by Scripted Agents, LSL scripts, or external tools. Access to the Second Life service and access to Personal Data of Second Life Residents are both conditioned on adherence to all applicable global privacy regulations governing the collection, storage, processing, or transmission of Personal Data. These laws include Europe’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We recommend that you seek guidance from a privacy attorney for additional, updated information before using Personal Data of Second Life Residents outside of Second Life.
==Identification==
 
'''Set scripted agent status'''
 
Scripted Agents, often called bots, are avatars controlled by computer programs rather than people. See the Overview above for a fuller description.
 
If you own a Second Life account primarily operating as a Scripted Agent, you must specify this on the Scripted Agent Status page. By identifying Scripted Agents, you help us give you more accurate account statistics and in-world search results.
 
==Traffic==
 
Traffic is a numerical metric calculated for every parcel of land in-world. We can summarize this score as the cumulative minutes spent on the parcel by all visitors to the parcel on the previous day (Pacific Time, US). For details, see Guidelines for creating search listings in the Knowledge Base.
 
'''Using Scripted Agents to "game" or boost traffic is prohibited.'''
:You may not attempt to gain an unfair advantage in search results through the use of Scripted Agents to inflate the traffic for a parcel. This policy applies to both mainland and private estates, as Second Life search includes both. Please refer to the Second Life Terms and Conditions, section 5.i.
 
==Scripted Agent Communications==
Some Scripted Agents are used to automate communications with parcel visitors, and to provide interactive services for other Residents. These types of Scripted Agents can enhance the Second Life experience.
 
Every chat message, IM, inventory offer, group notice, group IM, and group invitation creates an additional load on Second Life’s communications services. There is an upper limit where Scripted Agents consume excessive resources and threaten to decrease the quality of service for others.
 
'''Sending an excessive number of messages with Scripted Agents is not allowed.'''
:You may not use Scripted Agents to send more than 5,000 messages in a calendar day. All Scripted Agents operated by a single user share a common limit.
 
For example, the following activities are violations of this policy:
* Scripted Agents causing unreasonable load on search or the regions in which they operate.
* Scripted Agents causing a nuisance by regularly getting stuck at welcome areas or InfoHubs. This includes the use of large numbers of Scripted Agents to get around the throttling of search requests.
* Scripted Agents joining groups and sending group IMs or notices such that more than 5,000 individual messages will be received.
* A single Scripted Agent sending more than 5,000 individual messages in a calendar day.
* Using multiple Scripted Agents to send an aggregate of more than 5,000 individual messages in a calendar day.


==What is Personal Data?==
==Mainland Purchase==
To understand Personal Data, one first needs to understand Personally Identifiable Information.


'''Personally Identifiable Information''', often abbreviated as PII, is information that is capable of identifying an individual user, account, computer, or household. Note that PII need not include the actual name of an individual. That the information can refer to any of the above alone or in conjunction with other data elements linkable with that information suffices to make it PII.
Some Scripted Agents have been used to automate the purchase of Mainland parcels priced below fair market values.


* Examples: A username, an agent ID, an IP address, or a tracking cookie are all examples of PII.  
'''Using Scripted Agents to purchase Mainland parcels is prohibited.'''
:The use of Scripted Agents that circumvent, automate and/or remove the human interaction required to purchase a Land parcel within Second Life on the Linden Lab owned Mainland is prohibited.


'''Personal Data''' includes all PII. Any additional information that one links to this PII also becomes Personal Data.
Reporting violations of the Mainland Purchase policy is crucial to helping Linden Lab with enforcement. To report a potential violation, we ask that Residents please use the in-world Report Abuse function and file it under the category Disturbing the Peace. When the Governance team receives a report, the team reviews it and performs an investigation to determine whether a violation has taken place.


* Examples: When one of the above examples of PII is combined with the contents of a Resident’s profile page, their online status, their chat, or their in-world travel behaviors, the PII and the linked data all become Personal Data.
==Privacy Preference Integrity==


==Understanding Personal Data in Second Life==
Second Life provides a set of privacy controls, such as limiting who can communicate with a Resident, who can see another Resident’s online status, who can discover their location within Second Life, and whether profiles are published on publicly visible web pages. Scripted Agents may not circumvent these privacy controls.


After Residents consent to the Second Life Terms of Service and connected Privacy Policy, Second Life presents select information about Residents to each other within the Second Life environment. This presentation is for the sole purpose of facilitating interaction within Second Life. Without a separate agreement in place (for e.g. as a sub-processor or vendor), there is no default right that any third party has to collect, store, process, or transmit a Second Life Resident’s Personal Data outside of Second Life.
==Enforcement of Scripted Agent Policy==


Reporting violations of the Scripted Agent policy is crucial to helping Linden Lab with enforcement. To report a potential violation, we ask that Residents please use the in-world Report Abuse function and file it under the category Disturbing the Peace. When the Governance team receives a report, the team reviews it and performs an investigation to determine whether a violation has taken place.  For additional guidance on filing an Abuse Report, please refer to Filing an Abuse Report


===Third-Party Collection, Processing, or Storage of Personal Data===
Violations of this policy may result in suspension and/or termination of your account.  If you feel there has been an unfair decision in this regard, use the Abuse Appeals process. 


In order to collect, store, process, or transmit Second Life user Personal Data, you must satisfy all applicable global privacy regulations.


Please keep in mind that Second Life has a global customer base, and the applicable law usually is determined based on the Resident’s country or state of residence. Second Life does not disclose the location or state of residence of Residents. Third-party developers should seek counsel from a privacy attorney to obtain legal advice on complying with these laws before they use Personal Data of Second Life Residents.
==Personal Data and Privacy Rights==


==Objecting to the Use of Personal Data==
Data transferred outside of the Second Life service or its supporting websites is not exempt from protection under applicable data privacy laws. This applies whether data is collected by Scripted Agents, LSL scripts, or external tools. Access to the Second Life service and access to Personal Data of Second Life Residents are both conditioned on adherence to all applicable global privacy regulations governing the collection, storage, processing, or transmission of Personal Data. These laws include Europe’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We recommend that you seek guidance from a privacy attorney for additional, updated information before using Personal Data of Second Life Residents outside of Second Life.
Linden Lab cannot govern activities that happen outside of the Second Life platform. Where Residents determine violations happen outside of Second Life, such as when Personal Data is presented on third-party websites without their consent, multiple options are available.


Every Resident is encouraged to begin by contacting the individual operating the site in order to achieve a peaceful resolution. This can take the form of a personal request using an email address they provide for this purpose, or by submitting a form (usually called a Data Subject Access Request) on their website to request your information to be removed.


Other options may include contacting regulators to file complaints against third-party websites, their hosting providers, or their content delivery networks where the site operator or hosting provider cannot be determined.
==Understanding Personal Data in Second Life==


Residents of California can learn about their options here: [https://oag.ca.gov/privacy/ccpa]
See our {{LLOlink|Using Personal Data}} page for data privacy considerations for Second Life Residents.


Residents of the European Union and the UK can learn about their options here: [https://gdpr.eu/faq/]
==Enforcement of Privacy Rights==


This policy requires that third parties fully comply with applicable global privacy regulations. Linden Lab reserves the right to act where we see evidence of non-compliance with the Scripted Agent Policy or applicable privacy regulations. At our discretion, enforcement may include removing violating Scripted Agents and supporting scripts from Second Life, requesting explanations of Personal Data activities, requesting changes to how Automated Access mechanisms function, or suspending or terminating service.


==Further Reading==
==Further Reading==
Line 48: Line 75:
* [https://community.secondlife.com/knowledgebase/english/privacy-concerns-r606/ Second Life Knowledgebase: Privacy concerns]
* [https://community.secondlife.com/knowledgebase/english/privacy-concerns-r606/ Second Life Knowledgebase: Privacy concerns]
* {{LLOlink|Residents' privacy rights}}
* {{LLOlink|Residents' privacy rights}}
* [https://gdpr.eu/faq/ GDPR EU Compliance FAQ]
 
* [https://oag.ca.gov/privacy/ccpa California Consumer Privacy Act (CCPA)]
 
 
 
 


[[Category:Policies]]
[[Category:Policies]]

Latest revision as of 11:36, 3 April 2023


Overview

This policy summarizes Linden Lab's policy on Scripted Agents. The policy covers all forms of Scripted Agents, such as bots, NPCs, and inviters. Any script or program that automates access to Second Life and its supporting web services through interfaces designed for the Second Life Viewer and its embedded browser is considered a Scripted Agent.

Second Life allows Scripted Agents with legitimate uses, but inappropriate uses are violations of this policy. The goal of this policy is to increase the fairness and reliability of Second Life’s search and communications services, to protect the privacy of Second Life Residents, and to make Scripted Agent developers and operators aware that the same global privacy regulations that apply when collecting Personal Data through websites apply when collecting data through Second Life.

Identification

Set scripted agent status

Scripted Agents, often called bots, are avatars controlled by computer programs rather than people. See the Overview above for a fuller description.

If you own a Second Life account primarily operating as a Scripted Agent, you must specify this on the Scripted Agent Status page. By identifying Scripted Agents, you help us give you more accurate account statistics and in-world search results.

Traffic

Traffic is a numerical metric calculated for every parcel of land in-world. We can summarize this score as the cumulative minutes spent on the parcel by all visitors to the parcel on the previous day (Pacific Time, US). For details, see Guidelines for creating search listings in the Knowledge Base.

Using Scripted Agents to "game" or boost traffic is prohibited.

You may not attempt to gain an unfair advantage in search results through the use of Scripted Agents to inflate the traffic for a parcel. This policy applies to both mainland and private estates, as Second Life search includes both. Please refer to the Second Life Terms and Conditions, section 5.i.

Scripted Agent Communications

Some Scripted Agents are used to automate communications with parcel visitors, and to provide interactive services for other Residents. These types of Scripted Agents can enhance the Second Life experience.

Every chat message, IM, inventory offer, group notice, group IM, and group invitation creates an additional load on Second Life’s communications services. There is an upper limit where Scripted Agents consume excessive resources and threaten to decrease the quality of service for others.

Sending an excessive number of messages with Scripted Agents is not allowed.

You may not use Scripted Agents to send more than 5,000 messages in a calendar day. All Scripted Agents operated by a single user share a common limit.

For example, the following activities are violations of this policy:

  • Scripted Agents causing unreasonable load on search or the regions in which they operate.
  • Scripted Agents causing a nuisance by regularly getting stuck at welcome areas or InfoHubs. This includes the use of large numbers of Scripted Agents to get around the throttling of search requests.
  • Scripted Agents joining groups and sending group IMs or notices such that more than 5,000 individual messages will be received.
  • A single Scripted Agent sending more than 5,000 individual messages in a calendar day.
  • Using multiple Scripted Agents to send an aggregate of more than 5,000 individual messages in a calendar day.

Mainland Purchase

Some Scripted Agents have been used to automate the purchase of Mainland parcels priced below fair market values.

Using Scripted Agents to purchase Mainland parcels is prohibited.

The use of Scripted Agents that circumvent, automate and/or remove the human interaction required to purchase a Land parcel within Second Life on the Linden Lab owned Mainland is prohibited.

Reporting violations of the Mainland Purchase policy is crucial to helping Linden Lab with enforcement. To report a potential violation, we ask that Residents please use the in-world Report Abuse function and file it under the category Disturbing the Peace. When the Governance team receives a report, the team reviews it and performs an investigation to determine whether a violation has taken place.

Privacy Preference Integrity

Second Life provides a set of privacy controls, such as limiting who can communicate with a Resident, who can see another Resident’s online status, who can discover their location within Second Life, and whether profiles are published on publicly visible web pages. Scripted Agents may not circumvent these privacy controls.

Enforcement of Scripted Agent Policy

Reporting violations of the Scripted Agent policy is crucial to helping Linden Lab with enforcement. To report a potential violation, we ask that Residents please use the in-world Report Abuse function and file it under the category Disturbing the Peace. When the Governance team receives a report, the team reviews it and performs an investigation to determine whether a violation has taken place. For additional guidance on filing an Abuse Report, please refer to Filing an Abuse Report

Violations of this policy may result in suspension and/or termination of your account. If you feel there has been an unfair decision in this regard, use the Abuse Appeals process.


Personal Data and Privacy Rights

Data transferred outside of the Second Life service or its supporting websites is not exempt from protection under applicable data privacy laws. This applies whether data is collected by Scripted Agents, LSL scripts, or external tools. Access to the Second Life service and access to Personal Data of Second Life Residents are both conditioned on adherence to all applicable global privacy regulations governing the collection, storage, processing, or transmission of Personal Data. These laws include Europe’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We recommend that you seek guidance from a privacy attorney for additional, updated information before using Personal Data of Second Life Residents outside of Second Life.


Understanding Personal Data in Second Life

See our Using Personal Data page for data privacy considerations for Second Life Residents.

Enforcement of Privacy Rights

This policy requires that third parties fully comply with applicable global privacy regulations. Linden Lab reserves the right to act where we see evidence of non-compliance with the Scripted Agent Policy or applicable privacy regulations. At our discretion, enforcement may include removing violating Scripted Agents and supporting scripts from Second Life, requesting explanations of Personal Data activities, requesting changes to how Automated Access mechanisms function, or suspending or terminating service.

Further Reading