3

Step 3 of 5

Reading the account terms, privacy notice and age rules first

A sign-up page asks for about forty seconds of your attention and creates an arrangement that can last a decade. This step gives you four things to find in it, and a way to find them quickly, so that reading the terms is a ten-minute task rather than an impossible one.

The four things to find

Nobody reads a full terms of service document, and advice that begins "read the terms carefully" is therefore advice nobody takes. The practical alternative is to go in looking for four specific things, find them, and stop. Those four are: what the company says it collects about you and who it gives it to; the minimum age for an account and what happens if a young person has one; how purchases and refunds work; and what you would have to do to get back into the account if you lost the password.

Everything else in the documents is real, but those four are the ones that change a decision. They are also the four most likely to differ between companies, which is why a general method is more useful than a walkthrough of any particular company's screens.

Where the documents actually live

On nearly every game site the documents are linked from three places: the footer of the home page, a line of small text underneath the sign-up form, and sometimes a dedicated legal or support section. They usually carry predictable names — Terms of Service, End User Licence Agreement, Privacy Policy or Privacy Notice, Refund Policy, Community Rules.

Two habits make the reading quick. The first is to use your browser's find function rather than scrolling: searching the page for words such as "age", "refund", "delete", "transfer", "disclose", "terminate" and "recovery" takes you to the paragraphs that matter in seconds. The second is to save a copy. Printing the terms to a file, or saving the page, gives you the version you agreed to on the day you agreed to it, which is worth having if anything is ever disputed.

One: the privacy notice

A privacy notice says what personal information a company collects, why, who it shares it with, and how long it keeps it. You are looking for four passages, and most notices have all four under recognisable headings.

What is collected beyond the obvious. An email address and a password are expected. The interesting entries are the ones you would not have guessed: device identifiers, approximate location derived from your IP address, in-game behaviour, chat logs, and information obtained from a platform account if you sign in through one.

Who it is disclosed to. Look for the list of categories — payment processors, hosting providers, anti-cheat vendors, analytics and advertising partners — and whether information is transferred to other countries. Most large game companies operate internationally, so some transfer is ordinary; the question is whether the notice says where.

How long it is kept, and what happens when you close the account. Many notices distinguish between deleting an account and deleting the data associated with it, and the gap between those two is worth knowing before rather than after.

What rights you have. In Australia, the handling of personal information by many organisations is governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. The Office of the Australian Information Commissioner explains those principles and what you can ask for at oaic.gov.au, including how to make a privacy complaint if a company will not answer you. Whether and how the Act applies to a particular overseas company is a question for the OAIC's guidance rather than for this page, and this workbook does not give legal advice.

Two: the age rule

Every online game sets a minimum age for holding an account, and it appears in the terms rather than on the sign-up form. It is often phrased as a minimum, sometimes with a second, lower threshold at which a parent or guardian may create and supervise an account. These are contractual rules set by the company; they are not the same thing as a classification.

The classification is a separate matter and comes from the Australian Classification Board, whose national database of classified games, with the consumer advice attached to each, is at classification.gov.au. A classification describes the content. The age rule in the terms describes who may hold the account. A title can be classified for a broad audience and still require an account holder older than the children playing it.

Where a young person is involved, three further things are worth finding before the account exists: whether the game offers parental or family controls and where they are configured; whether chat and voice can be limited by the account holder; and whether purchases can be disabled or require approval. The eSafety Commissioner publishes guidance for parents and carers about games and online safety at esafety.gov.au, including advice on setting up these conversations rather than only these settings.

This workbook does not present games that sell purchasable randomised items as suitable for children. Step 5 explains what those items are; where a household includes young people, reading Step 5 before the sign-up rather than after is the more useful order.

Three: the refund and purchase terms

Even if you intend to spend nothing, read this section, because the moment you need it is always a moment you did not plan for. You are looking for how purchases are made, whether a payment method is stored, whether purchases are final, and what happens to things you have bought if the account is suspended or the service closes.

The company's own refund policy is one layer. The other layer is Australian law. The Australian Consumer Law provides consumer guarantees that apply to goods and services supplied to consumers in Australia, and digital products are covered. A business's own "all sales final" wording does not remove those guarantees. The Australian Competition and Consumer Commission sets out what the guarantees are and what remedies exist at accc.gov.au, and that page is the authority here, not this one.

Two practical habits belong with this. Prefer a payment method where you can see and control the charges — many banks and card providers allow spending limits or merchant blocks, and those sit outside the game entirely. And read how the game handles a chargeback: in many services, reversing a charge results in the account being locked, which is a surprise worth not having.

Four: the account recovery method

The account you are about to make will one day be the account you cannot get into. Perhaps a forgotten password, perhaps a changed phone number, perhaps a mailbox you no longer have. Finding the recovery method in advance costs two minutes and decides how that day goes.

Look for which of these the company supports: a reset by email, a second factor such as an authenticator application or a security key, a recovery code you can store yourself, and a support process for when none of those is available. Note what the support process asks for, because it is usually evidence that is easier to gather now than later — the date the account was created, the first payment, the original email.

Turning on multi-factor authentication at the moment you create the account is the single highest-value habit in this workbook. It means a stolen password is not, by itself, enough to take the account. The Australian Cyber Security Centre publishes free, general guidance on multi-factor authentication and on passphrases for individuals at cyber.gov.au.

Choosing the email address

The email address attached to an account is the master key: whoever controls it can usually reset the password. Three considerations follow. Use an address you expect to keep — a personal one rather than one supplied by an employer, a school or an internet provider you might leave. Use one protected by its own multi-factor authentication, because an unprotected mailbox undoes every other precaution. And consider whether you want this address to be the same one you use for banking; separating hobby accounts from financial ones is a small, free piece of tidiness.

Some sign-up pages offer to create the account through an existing platform or social account instead. That is convenient and it binds two accounts together: losing access to one can mean losing access to the other, and the privacy notice will say what information passes between them. Neither choice is wrong, but it is a choice, and it is easier to make deliberately before the button is pressed.

Telling the real sign-up page from a copy

Accounts in popular online games have resale value, which makes convincing copies of login and sign-up pages worth someone's effort. The general defences are the same across the whole internet and cost nothing: reach the sign-up page by typing the vendor's address yourself or from your own bookmark, rather than from a message, a chat link or a search advertisement; check the address bar before typing anything; treat any offer of free in-game currency, rare items or early access in exchange for logging in as the oldest trick in the category; and never enter account details on a page you arrived at from an in-game private message.

Scamwatch, run by the National Anti-Scam Centre, describes current scam patterns and takes reports at scamwatch.gov.au. Nothing on this page suggests your computer or account is at risk right now; this is ordinary hygiene, described once so you can do it once.

If you are checking the terms of the title named on this site, the vendor's own site is where its privacy notice, age rules and purchase terms are published, and they are the vendor's to change. Visit the World of Tanks website and apply the four checks above to what you find there.Paid affiliate link. The publisher is paid a commission if you create and activate an account after following it. The four checks are the same for any title you look at.