https://en.wikipedia.org/wiki/Missionary_Church_of_Kopimism

Under GDPR this kind of data collection and sharing HAS to be opt-in i.e. with an informed consent. You can’t just bury it in your TOS and/or privacy policy. The user has to be explicitly shown what they are collection, on what basis they are doing it and how they are using it, then give the user the choice to accept or decline that, and they have to respect that decision.

Best Fallout game ever.

It’s good to live in the EU where such terms don’t apply.