Last Updated: September 23, 2022
Linden Research, Inc. and its affiliates (collectively “Linden Lab”, “we”, “us”, “our”) respect the privacy of its online visitors and users of its websites, apps, products and services, including communication services, (collectively, the “Services”).
We collect two types of information – “personal information” and “anonymous information” – which we may use to create a third type of information, “aggregate information”.
“Personal Information”, also often referred to as “Personal Data”, means information that identifies (whether directly or indirectly) a particular individual, household, or device, such as the individual’s first and last name, postal address, e-mail address, telephone number, username, and/or image.
“Anonymous Information” means information that does not directly or indirectly identify, and cannot reasonably be used to identify, an individual, household, or device.
“Aggregate Information” means information about groups or categories of individuals which does not identify, and cannot reasonably be used, to identify an individual, household, or device. We may share Aggregate and Anonymous Information with other parties without restriction.
Information You Provide
We collect the information which you provide us which may include:
Registration or Account Information. Information you provide when you register to use our Services or create an account such as: your first name and last name, country of residence, date of birth, e-mail address, username and password.
Linked Account. When creating your account, and depending on the Services used, you may opt to link an existing profile with a third-party provider (such as a social media account) to create your account to use the Services. Please note that we will use the personal information made available to us from the third-party profile that we deem necessary for the creation of the account and for the best experience when using the Services. If you would like to delete any of this information, you can do so within your account, to the extent the information is not mandatory to your account.
Purchase and Transaction Information. When you purchase a Service from us, we will collect certain information which may include identification information (copy of valid passport or government-issued photo identification document), your date of birth, your postal and/or residential address, telephone number and payment information. If the Services you use allow you to conduct transactions, we may collect and retain some or all of the information related to these transactions, including transaction amount(s), parties involved, time and manner of exchange, and other transaction circumstances, such as payment method and names or emails of external third-party accounts (for example, PayPal or Skrill).
Information You Provide when Using our Services. Please note that our Services may offer chat functions (either one-to-one or within a limited group) or other forms of communication services (such as real time voice communication either one-to-one or within a limited group), forums, community environments (including multiplayer gameplay) or other tools that are either restricted to other account holders or Services users or that do not have a restricted audience and can be accessible by anyone. Any information, content or communications, including personal information, you provide when you use any of these features will be available to the recipients (dependent on the nature of the tool) and may be publicly posted and otherwise disclosed without limitation as to its use by us or by a third party.
Your Marketing Preferences. We like to keep in touch with our users and future users through different communications such as emails. To ensure you find these communications useful, we ask you for your marketing preferences which may include your personal information.
Surveys, Contests and Promotions. As part of our Services, we sometimes offer or ask you to take part in surveys, contests, or promotions. Depending on the nature of the survey, contest, or promotion, we may ask you, or you may volunteer, to provide certain personal information, such as your name, address or opinion.
When you do Business with us. If you are a vendor, service provider, or business partner (or a prospective vendor, service provider or business partner) of us, we may collect information about you and the services you provide, including your or your employees’ business contact information and other information you or your employees provide to us as part of the services you may provide and our agreement with you.
Communications. We collect information you provide when you contact us, for example regarding customer support inquiries or other inquiries related to your account, or to provide us with feedback on the Services.
Information We Collect Automatically
When using our Services, in addition to the information you provide us, there is also some information we may collect automatically that identifies you or the device you are using to access the Service, such as your computer, or mobile device. Generally, this information relates to your use of the Services and your preferences, such as the types of Services you view or engage with, the features you use, the actions you take, the people or accounts you interact with, and the time, frequency and duration of your activities. In addition, we may also collect location information when you use the Services, including geolocation information or your internet protocol (IP) address.
Information We Receive From Third Parties
We generally do not receive any information from third parties that specifically identifies you. However, we may receive limited information from a business partner or service provider if you became a user of our Services through the use of theirs. For example, if you learn of our Services through a joint campaign with a business partner, the business partner may inform us of this connection.
Sensitive or Special Category Data
We generally do not actively seek any sensitive or special category data from you, but we may be exposed to it
pursuant to your use of the Services. For example, if when using our chat functions or other communication
services, you choose to discuss your political views, sexual orientation or other sensitive or special category
data, this will be collected by us as with any other information in the communications. If you would not like
this information to be accessible by us, we encourage you not to disclose it through the use of the Services or
2. USE OF YOUR INFORMATION BY LINDEN LAB
Linden Lab may use your personal information, subject to and at all times in compliance with applicable laws and your choices and controls, for the following purposes:
Services. To provide you with the Services you request, including to create and manage your account, process payments, and provide you with customized Services and experiences based on your preferences.
Service Communications. Communicate with you about your account or transactions with us, or other Service-related announcements such as regarding features on our Services and applications or changes to our policies or terms.
Marketing Communications. Send you offers and promotions for our Services or, as permitted, third-party products and services, via email, text or, mobile or browser push notifications.
Other Communications. If you submit a question, inquiry or concern to us, we will use your personal information to respond to you.
Advertising. Provide you or serve you with advertising or information based on your activity on our Services and on third-party sites and applications.
Surveys, Contests or Promotions. If we administer a survey, contest, or promotion, we will need to process certain personal information to do so. This will vary depending on the nature of the survey, contest, or promotion.
Improve Our Services. Develop and test our Services and operations to optimize and improve our Services and operations.
Verification and Monitoring. Verify accounts and monitor activities within our Services to promote safety and security of our Services, our users and our properties.
Compliance. Comply with applicable laws and regulations and any lawful requests from regulators, governmental bodies or other authorities.
When you consent to us to sharing your personal information with another company, such as:
When companies perform services on our behalf, including those who help us provide the best services to you and others (such as hosting/storage, anti-fraud functions, billing, collections, registration, customer support, e-mail delivery, age verification, or other operations). These companies are prohibited from using your personal information for purposes other than those requested by us or required by law;
With our business partners who we perform joint campaigns with;
With our business partners who may include partners in our ad network (see section “Your Controls, Rights and Choices” for more information on these partners);
In connection with the sale of any of our Services, assets and/or businesses, or when the ownership or control of all or part of our Services changes;
To enforce our Terms of Service or other rules or policies, to ensure the safety and security of our users and third parties, to respond to requests from law enforcement, officials, regulatory agencies and other lawful requests or legal processes, or to comply with a legal obligation to which we are subject, or other legal process or in other cases if we believe in good faith that disclosure is required by law; and
To effectively perform our Services, we may share your personal information with our affiliates.
Some of our Services, such as Second Life, are made available to young adults and children over the age of 16. In accordance with the law, a child is considered anyone below the age of 18. We recognize the need to provide further privacy protections with respect to personal information that we may collect from young adults and children through our Services.
If you are a California resident in accordance with the California Consumer Privacy Act (CCPA), the following information applies to you.
Personal Information We May Collect
During the past twelve (12) months, we may have collected the following categories of personal information about you:
Categories of personal information
Full name (including any nickname or alias you have used), date and place of birth, taxpayer or government-issued identification number (such as your Social Security number, driver’s license or identification number, passport number, or other similar identifiers), IP address, device identifier, avatar information if this reflects your identity, unique personal identifier, online identifier, and Services account name.
Personal Information under CA Code §1798.80(e)
Contact details (name, address, email address, telephone number, any information you may provide to us about yourself).
Characteristics of Protected Classes or Groups Under State or Federal Law
Age, gender, national origin, race, colour, ancestry, national origin, citizenship, religion or creed, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, marital status, age, medical condition, physical or mental disability, genetic information (including familial genetic information), veteran or military status.
Financial Information (information described in CA Code §1798.80)
Services obtained, transaction histories, purchasing or consuming histories.
Internet or Network Activity
Internet protocol (IP) address, device ID, and device settings (e.g., language preference, time zone), login information, browser type and version, browser plug-in types and versions, operating system and platform, and information about your visit on our website.
Device location, geographic location from which your transaction originates.
Inferences drawn from any of the categories of Personal Information above
We may verify your identity against third-party databases; potential fraudulent activity or behaviour.
Professional and employment information
Business; job title.
Audio, electronic, visual, thermal, olfactory, or similar information
If you utilise our communication services, such as online chat functions or real-time voice communications, we will collect personal information pursuant to such usage.
Purposes for collection and use
To collect, process, and retain your personal information where required by law.
To fulfill our obligations under federal and state laws.
To provide you with the information, products, and services that you request from us.
To run the virtual world Second Life through our Services.
To provide, maintain, personalize, optimize, and improve the Services, including research and analytics regarding use of the Services, or to remember you when you leave and return to the Services.
To provide you with the same preferred settings each time you use our Services.
Provide you with more relevant content in marketing, promotional, or other communications to which you may be subscribed.
To inform you about events and news we think you’ll be interested in.
Detect, investigate, and prevent activities that may violate our policies or may be fraudulent or illegal.
To ensure you are who you’re telling us, and to ensure you are playing from where you are telling us.
We collect or receive your personal information from the following sources:
From you and your use of our Services.
We may also combine your personal information from the Services with the categories of sources listed above.
Disclosure of Personal Information
The categories of third parties to whom we disclose personal information about you depends on, among other things, our relationship or interaction with you. During the past twelve (12) months, we have disclosed your personal information for our business purposes described above to the following categories of third parties:
Service providers that assist us in providing the Services, including in relation to hosting/storage, anti-fraud functions, billing, registration, customer support, e-mail delivery, age verification, or other operations;
Third parties authorised by you;
Advertising platforms (for further information, see our Cookies Policy); and
Analytics and search engine providers.
The CCPA grants certain rights to California residents, namely:
Right to Access. A California resident has the right to request a report showing the personal information collected, shared, and sold about them in the past twelve (12) months.
Right to Deletion. A California resident has the right to request we delete any personal information collected about them.
Right to Opt-Out of Sale of Personal Information. A California resident has the right to opt-out of the sale of their personal information to third parties (see further below).
Right to Non-Discrimination. A California resident also has the right to not be discriminated against by us if they choose to exercise any of the above rights.
If you wish to exercise any of these rights, please see section “Your Controls, Rights and Choices” for email and postal details.
Sale of Personal Information
We do not sell personal information.
Other U.S. State Privacy Laws and Requirements
“Shine the Light” and “Eraser” Laws: Residents of the State of California may request a list of all third parties to which we have disclosed certain information during the preceding year for those third parties’ direct marketing purposes. If you are a California resident under the age of 18, and a registered user of the website where this policy is posted, you may request removal of content or information you have publicly posted. Please be aware that such a request does not ensure complete removal from the Internet of the content or information you posted, and there may be circumstances in which the law does not require or allow removal. If you wish to exercise these rights, please see section “Your Controls, Rights and Choices”.
Vermont Residents: We will not share your information with companies outside of Linden Lab, except for our everyday business purposes, for marketing our products and services to you, or with your consent. We will not disclose credit information about you within or outside Linden Lab except as required or permitted by law.
The controller of your personal information is Linden Research, Inc. of 945 Battery Street San Francisco, CA 94111.
For information on the rights exercisable by EU or UK individuals, and details on how to exercise them, please see section “Your Controls, Rights and Choices”.
In addition to those listed below, EU and UK individuals also have the right, at any time, to submit a complaint to a data protection authority. We would however appreciate the opportunity to resolve your issue before you do this.
As an organisation operating globally, we may be required to transfer your personal information to countries other than that from which it was collected. Whenever your personal information is transferred, stored or processed by us, we will take reasonable steps to safeguard the privacy of your personal information in accordance with applicable law. In particular, when transferring personal information from the EU or UK, we will either only transfer your personal information to a country which has been deemed by the European Commission or the UK data protection authority, the Information Commissioner’s Office, to be adequate or we will ensure the following appropriate measures are in place so your personal information is treated by the recipients in a way that is equivalent to, and which respects, the EU and UK laws on data protection and your rights as an EU or UK data subject. These include:
the European Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to the GDPR, as may be amended or replaced from time to time (the “EU Clauses”); and
standard data protection clauses specified in regulations made by the Secretary of State under section 17C(b) of the 2018 Data Protection Act and for the time being in force in the United Kingdom (the “UK Clauses”).
Where necessary, we may also further supplement the EU Clauses and/or UK Clauses with additional measures specific to a relevant transfer, such as increased security. If you require further information about either the EU Clauses or the UK Clauses, or the other protective measures in place, please contact us using the details provided in section “Comments and Questions”.
Lawful Basis for Processing
We will only collect, use, process and store your personal information where we have a valid lawful basis. Our lawful bases include:
Consent (you have given us consent, for example to send you marketing communications, which you can remove at anytime);
Performance of a contract (our processing is necessary for the performance of a contract we have with you or to take specific steps before entering into a contract with you. This may be, for example, a contract to receive Services from us);
Legal obligation (processing is necessary for us to comply with applicable laws, regulations and regulatory authorities, court orders or law enforcement requests); and
Legitimate interests (processing is necessary for ours, or a third party’s, legitimate interests. The legitimate interests pursued by us are improving our business or customer relationships, marketing and advertising, resolving disputes, preventing fraud and abuse, analysing and improving safety and security of our Services, enforcing our Terms of Service. You have the right to object to processing based on legitimate interests).
We will only retain your personal information for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. For example, we retain your personal information while each of your accounts is in existence or as needed to provide you with Services.
To determine the appropriate retention period for personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.
In certain circumstances, you may have the right to:
Correct or Update: You may correct or update your account registration or your personal information or you may also ask us to change or update your information in certain cases, particularly if it is inaccurate;
Delete: You may delete your account or ask us to erase or delete all or some of your personal information (for example, if it is no longer necessary to provide Services to you);
Object to processing: You may object to the processing of your personal information where we are relying on a legitimate interest (or that of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal information for direct marketing purposes;
Limit or Restrict use of Personal Information: You may ask us to stop or suspend using all or some your personal information in certain scenarios (for example if we have no legal right to keep using it) or to limit our use of it (for example, if your personal information is inaccurate or unlawfully held);
Withdraw Consent: You may withdraw consent at any time where we are relying on consent to process your personal data and you may change your choices for subscriptions, newsletters and alerts (for example, you may choose whether to receive offers and promotions, or other marketing, from us for our products and services, or products and services that we think may be of interest to you);
Right to Access Your Information: You may request access to the personal information we hold about you; access includes details about your personal information and how it is being processed and a copy of such personal information (commonly known as a “data subject access request”);
Right to Move Your Personal Information: You may request a copy of your personal information in machine-readable form, and you may have the right to transmit such data to another controller, without hindrance from us.
To exercise one of the above rights, please contact us at the postal address below or by emailing email@example.com
We will consider your request in accordance with applicable laws. We may need to request specific information from you to help us confirm your identity and ensure your right to exercise the right. This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within the timeframe required by applicable law. Occasionally it could take us longer than this if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
We participate in ad and/or affiliate networks operated by various third-party companies. We and these third-party companies may collect and use certain information about you and your visits to our Services to help serve advertising that is relevant to your interests. If you would like to learn more about these specialized advertising technologies, the Network Advertising Initiative offers useful information about Internet advertising companies, including information about how to opt-out of certain information collection.
For more information on how to opt-out of receiving internet-based advertising, please visit:
Digital Advertising Alliance (US) https://www.aboutads.info/choices/
Digital Advertising Alliance (Canada) https://youradchoices.ca/en/tools
Digital Advertising Alliance (EU) https://www.youronlinechoices.com/
Network Advertising Initiative https://optout.networkadvertising.org/?c=1
On many mobile devices, you can control interest-based advertising through your device’s settings. These options can include resetting your device’s advertising ID or selecting “Limit Ad Tracking” (for iOS devices) or “Opt out of Ads Personalization” (for Android devices) in your device settings.
Ad choices settings and options will vary depending on your browser and device settings, and this is not an exhaustive list. Please note that your opt-out choices will only apply to the specific browser or device from which you opt out. We encourage you to explore your device and browser settings to better understand your choices.
When you use any of our Services that send push notifications or offers to your mobile device, you can change your preferences at any time through the settings on your mobile device.
You can withdraw consent for our collection, use, and transfer of precise location information by adjusting the location settings on your device.
We implement technical, physical and organizational security safeguards designed to protect your personal information, from loss, misuse and unauthorized access and disclosure. In addition, we limit access to your personal information to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal information on our instructions, and they are subject to a duty of confidentiality.
We regularly monitor our systems for possible vulnerabilities and attacks. However, given the nature of
electronic communications and information processing technologies, we cannot guarantee the security or
safety of any information that is sent to us, transmitted through the Internet or stored on our systems.
There is no guarantee that information may not be accessed, disclosed, altered, or destroyed by breach by
others of any of our physical, technical, or organizational safeguards. We have put in place procedures to
deal with any suspected data security breach and will notify you and any applicable regulator of a suspected
breach where we are legally required to do so.