In early 2025, a Final Fantasy XIV mod ignited concerns about player stalking due to reports of its ability to harvest sensitive player data. This included character details, retainer information, linked alternate characters, and more.
The mod, "Playerscope," tracked player data within a user's proximity, sending this information to a central database controlled by the mod's creator. This exposed data normally inaccessible through in-game tools, including "Content ID" and "Account ID," allowing cross-character tracking. This exploited the Content ID system introduced in the Dawntrail expansion, designed for player blacklisting.
Opting out required joining the Playerscope Discord server. Essentially, any player outside this server was potentially having their data scraped, raising significant privacy concerns. The community reacted strongly, with many labeling the mod's purpose as stalking.
Initially hosted on Github, Playerscope's popularity surged after its discovery. Subsequently removed from Github due to Terms of Service violations, alleged mirrors on Gittea and Gitflic were verified as inactive by IGN. However, the mod might still circulate privately.
Yoshida stated that Square Enix is considering requesting removal and deletion of the tool, and pursuing legal action. He reassured players that account information like addresses and payment details could not be accessed through these tools. He urged players to avoid using third-party tools, refrain from sharing information about them, and emphasized that such usage violates the Final Fantasy XIV User Agreement.
While third-party tools like Advanced Combat Tracker are commonly used (and data cross-referenced on sites like FFlogs), Yoshida's legal threat represents a significant escalation.
Community Response:
The community's response to Yoshida's statement was largely critical. Many criticized the lack of proactive measures to address the root cause of the vulnerability, suggesting solutions like preventing client-side data exposure. The Playerscope author has yet to comment.