Idle Cipher
COUNTER / STEP 03 OF 05 READING TIME / ABOUT 11 MIN ENDS IN / CHECKLIST 03, TEN ITEMS

Step 3 of 5

Step 3 — Reading the account and the sign-up terms

What a game account actually is

An online game keeps your progress on the company's servers, not on your computer. The account is how the servers know which progress is yours. That is the whole function of it, and it explains the rest: why an email address is required, why there is a password, and why the terms matter more than people expect for something described as free.

Because the account rather than the computer holds your position in the game, two things follow. You can usually log in from another machine and find everything where you left it. And losing control of the account means losing the progress, which is why the part of this step about passwords is not filler.

The usual sequence, in order

Across this category the sign-up follows the same four moves. The example this course follows uses exactly this sequence: create an account, confirm the email address, then log into the game.

  1. Registration. You give an email address, choose a password, and usually choose a display name. Some sign-ups ask for a date of birth; some ask for a country.
  2. Agreement. You tick that you accept the terms of service and acknowledge the privacy notice. This is a contract, and it is the moment the next section is about.
  3. Email confirmation. A message arrives at the address you gave, containing a link or a code. Following it tells the company that the address works and that you control it.
  4. First log-in. You sign into the client or launcher with the same details and the account becomes active in the game.

Nothing in that sequence is unusual, and none of it requires payment details in this category. If a sign-up for a game described as free asks for a card number before you can play at all, stop and work out why before continuing.

What confirming an email address does

Confirmation — sometimes called verification — proves two things to the company: that the address exists, and that the person who typed it can read its inbox. It is the reason an account created with a typo in the address never finishes activating.

It has a side effect worth knowing. Once confirmed, that address is the recovery route for the account. If you forget the password, the reset arrives there. So the address you use should be one you will still be reading in two years, and one you can get into if your computer changes. A forwarding address you have never signed into is a poor choice for this reason.

The confirmation email is also the first message that will look, to you, exactly like the messages an imposter would later send. Section seven of this step covers that.

The three things to read before typing

Nobody reads a full terms of service document, and pretending otherwise is not useful guidance. Three parts of it reward two minutes each.

One: the purchases clause. Find what the terms say about money — whether in-game items are sold, whether anything renews, and what the terms say about refunds. Read it alongside your own rights, which Step 5 covers, and note that a company's terms cannot remove rights that Australian law gives you.

Two: the account clause. Find what the terms say about suspension and termination, about sharing or selling accounts, and about what happens to items if an account closes. In this category, items are generally a licence to use something inside the game rather than property you own, and the terms will say so in their own words.

Three: the privacy notice. This is a separate document from the terms. Look for what is collected, who it is shared with, and whether it leaves the country. You are not auditing it; you are checking that it exists, is specific, and does not say something you would refuse if asked out loud.

A REASONABLE STANDARD

A company publishing a clear, specific privacy notice and a plain purchases clause is doing the ordinary thing. A document that is vague about both is a reason to slow down, not proof of anything. Treat it as information, read the rest more carefully, and remember that not signing up is always available.

Your details, and what the Privacy Act covers

In Australia, the handling of personal information is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. The regulator is the Office of the Australian Information Commissioner, which publishes the principles and plain-English guidance at oaic.gov.au. Reading one page of that guidance is the quickest way to know what kind of notice you are entitled to expect, and what an access request is.

Two practical points come out of it. You are generally entitled to be told what an organisation collects and why, in a notice available at the time of collection — which is the document you are looking for in part three above. And whether a particular overseas company falls within the Act depends on its own circumstances, so the realistic habit is to read the notice the company publishes rather than to assume which law applies to it.

The practical minimum, before typing anything: give what the form requires and nothing more. Optional fields are optional.

Keeping the account yours

General security guidance for individuals in Australia is published by the Australian Cyber Security Centre at cyber.gov.au, and it is a better source for this than any game site. The short version of what it covers, applied to a game account:

None of this is urgent and none of it suggests anything is wrong with your computer. It is the same hygiene you would apply to any online account, written down once so you can do it in the right order.

Sign-up pages that are not the sign-up page

Popular games attract imposters: pages that copy the look of an official site, messages that offer items in exchange for a log-in, third-party shops selling accounts. The National Anti-Scam Centre describes current approaches at scamwatch.gov.au, including how to report one.

Three habits cover most of it. Type or bookmark the address of the game's own site rather than reaching it through a message. Expect nothing free in exchange for a log-in, because an offer of items for credentials is not a transaction any company needs to make. And treat any message that creates pressure — an account closing, a reward expiring tonight — as a reason to go and look at the account yourself, from your own bookmark, rather than to click.

The worked example household

In the hypothetical household, the person signing up has two email addresses: a main one and an old one nobody reads. They use the main one, because the recovery route matters more than the tidiness of the inbox. They decline the optional fields on the form, read the purchases clause, note that the terms are the vendor's to publish and are not summarised by this course, and set a passphrase that is not used elsewhere.

The confirmation email arrives within a few minutes. It is followed, three weeks later, by a message offering a free vehicle part if they log in through a link — which they ignore, because they decided in advance that they would open the game from their own bookmark and nowhere else. This household is a hypothetical example; it has no name and reports no results.

BEFORE YOU MOVE ON
  • The account, not your computer, holds your progress.
  • Confirming the email address proves you control it and makes it the recovery route.
  • Read three things: the purchases clause, the account clause, the privacy notice.
  • Fill in required fields only; optional fields are optional.
  • Reach the sign-up page by typing or bookmarking it, not from a message.

Checklist 3 — Account and sign-up

Static boxes; this site records nothing. Also on the All checklists page.