Privacy Policy

Outlandish Creative Ltd.

Last Updated: August 23, 2025

1. Introduction

Outlandish Creative Ltd. ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains what we collect, how we use it, and your choices when you use our applications, games, websites, or services (collectively, the "Services"). It is designed to meet the Meta Horizon Developer Data Use Policy and Quest Privacy VRC requirements.

2. Company Information

Company Name: Outlandish Creative Ltd.
Company Number: 15400393
Registered Address: 3 Wenlock Street, London, N1 7NT, United Kingdom
Contact (Privacy): privacy@outlandishcreative.com

3. Data We Collect

3.1 Data from Meta Horizon Platform (when you use our VR apps on Quest)

When you log in with Meta and connect to platform services, we collect and process the following “Developer User Data” and “User Data” permitted by the platform and you:

USER_ID: Your Meta platform ID used to authenticate you, establish your game account, prevent fraud, and link your account to third-party services (e.g., PlayFab).
USER_PROFILE: Limited profile details provided by Meta such as display name, avatar/profile image URL, and locale (used to show your in-game identity, friends/matchmaking, leaderboards, and social features).
USER_AGE: Your age group/classification as supplied by Meta (used only to apply age-appropriate features, safety settings, and content restrictions; we do not attempt to infer your exact age).
Purchase & Entitlement Data: Non-financial purchase confirmations and entitlements for in-app purchases (IAP) and subscriptions received from Meta to grant content and manage billing status. We do not receive your full payment card details.

3.2 Gameplay & Service Data

Session & Progress Data: Cosmetic selections, unlocks, scores/leaderboards, and progression needed to operate the game and your account.
Multiplayer Data: Match identifiers, lobby/matchmaking metadata, basic connectivity diagnostics, and anti-abuse signals.
Crash/Diagnostics: Error logs or crash reports to maintain and improve stability and security.

3.3 Website and Newsletter

Email Address (optional): If you sign up for our newsletter, we store your email only to send updates.
Contact Form: Name, email, and message content to respond to your inquiry.

4. How We Use Your Data

4.1 VR Applications and Games

Authentication & Account Linking: Use USER_ID/USER_PROFILE to sign you in, create and manage your game account, and link to PlayFab for account storage, leaderboards, and entitlements.
Gameplay & Social Features: Display your profile name/avatar, manage cosmetics, friends/matchmaking, and leaderboards.
Purchases & Subscriptions: Validate receipts/entitlements from Meta to deliver IAP content and manage subscription status and renewal/cancellation.
Age-Based Settings: Apply age-appropriate features and safety requirements based on USER_AGE.
Security & Integrity: Fraud prevention, abuse mitigation, and enforcing our terms.
Support & Operations: Diagnose crashes, bugs, and performance issues; respond to support requests.

4.2 Website and Newsletter

Send product updates and announcements if you opt in.
Respond to contact requests.

5. Legal Bases (EEA/UK)

Contract: To provide the game/services you request (account creation, multiplayer, cloud features, purchases).
Legitimate Interests: Security, fraud prevention, crash diagnostics, service improvement (balanced against your rights).
Consent: Newsletter marketing (you may withdraw anytime via unsubscribe).
Legal Obligation: Transaction records and compliance obligations.

6. Data Sharing and Disclosure

We do not sell your personal information. We share it only as needed to operate the Services or as required by law:

Meta Platform Services: To authenticate users, validate entitlements, and enable platform features (IAP, subscriptions, age gating).
PlayFab (Microsoft Azure): Backend game services for accounts, leaderboards, cloud save/entitlements. PlayFab acts as our processor for these purposes.
Cloud/Infrastructure & Support Vendors: Service providers that host our systems, process crash logs, or provide customer support tools—bound by confidentiality and data processing terms.
Legal & Safety: To comply with applicable law, enforce our terms, or protect users and our Services.

7. International Transfers

Your information may be processed in the UK, EEA, and other countries (including the United States). Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

8. Data Retention

Account/Game Data: Retained while your account is active. If you request deletion, we delete or irreversibly de-identify within 30 days unless we must retain certain records for legal reasons.
Purchase/Subscription Records: Retained as required by tax/accounting laws.
Crash/Diagnostics: Typically 12 months unless needed longer for security or legal purposes.
Newsletter: Retained until you unsubscribe.

9. Your Rights

Depending on your location, you may have rights to access, correct, delete, or port your data; to object to or restrict processing; and to withdraw consent (for marketing). To exercise these rights, contact us at privacy@outlandishcreative.com.

10. Data Deletion Requests

In-App: You can request deletion via the in-app “Delete Account & Data” option (Settings > Account). This removes your PlayFab-linked game account and associated personal data, and severs the link to your Meta USER_ID.
Email: You can also email privacy@outlandishcreative.com with the subject “Data Deletion Request” and include your display name and Meta USER_ID (if available). We will verify your request and delete associated data within 30 days, subject to lawful retention requirements.

Note: Uninstalling the app alone will not delete server-side account data such as entitlements or cloud records.

11. Children's Privacy

Our Services are designed for users aged 13+ (or as permitted by Meta’s age groups in your region). We do not knowingly collect personal information from children where parental consent is required. If you believe a child has provided personal data, contact us to request deletion.

12. Security

We use appropriate technical and organizational measures (including access controls, encryption in transit, and least-privilege practices) to protect your information against unauthorized access, alteration, disclosure, or destruction.

13. Changes to This Privacy Policy

We may update this policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. If changes materially affect you, we will provide additional notice (e.g., in-app notice).

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@outlandishcreative.com
Post: Outlandish Creative Ltd., 3 Wenlock Street, London, N1 7NT, United Kingdom