Privacy Policy
Last updated: March 10, 2025
Introduction
Subspace Games Limited (“Subspace Games“, “we“, “us“, or “our“) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and share your personal information when you use our virtual reality (VR) games and related services. Our games are available on Meta Quest (Oculus), Steam, and PlayStation platforms, and we also operate a company informational website (subspace.games). We comply with all applicable privacy laws and platform-specific privacy requirements, including Meta’s developer privacy guidelines and Data Use Policy. By using our games or website, you agree to the collection and use of information in accordance with this policy.
Information We Collect
We collect various types of information to provide and improve our games and services. The types of data we collect include:
- Platform Account Information: When you use our games through third-party platforms like Meta Quest (Oculus), Steam, or PlayStation, we receive basic account information from those platforms. This may include your user ID, username, avatar, and other profile information that the platform shares with us. We do not receive or store your account passwords or payment information from these platforms.
- Gameplay and Device Data: We collect data about your gameplay and the device you use to run our games. This includes in-game actions, achievements, scores, session duration, and game settings. We may also collect technical information such as your device type (e.g. VR headset model or console model), operating system, device identifiers, crash reports, and general location based on IP address. This data helps us ensure the game functions properly and helps us troubleshoot and improve performance.
- Website Usage Data: When you visit our website (subspace.games), we automatically collect standard web analytics data. This may include your IP address, browser type, operating system, referring URLs, pages viewed, and the dates/times of access. We use cookies and similar tracking technologies (like web beacons) on our site to understand how visitors navigate our content and to improve user experience. For example, we use Google Analytics on our website, which collects aggregated information about site traffic and user interactions.
- Contact and Communications: If you contact us via email, support ticket, or a form on our website, we will collect the information you provide (such as your name, email address, and the content of your message). We will use this information to respond to your inquiry or provide customer support. We may also keep records of our communications with you for quality assurance and future reference.
- Third-Party Analytics Data: Within our games, we may use third-party analytics services such as Unity Analytics (from Unity Technologies) or platform-provided analytics. These services automatically collect certain data about how you use the game. This can include device identifiers, gameplay events, and usage statistics. This data is generally aggregated or anonymized and does not directly identify you. We use this information to understand player engagement and to improve game design and stability. (See Third-Party Services and Analytics below for more details.)
We do not actively collect sensitive personal information such as financial details, health information, or biometric identifiers. Any personal data collected is limited to what is necessary to operate our games and services effectively and in compliance with platform rules.
How We Use Your Information
We use the collected information for the following purposes:
- Provide and Maintain Services: We use your platform account information to authenticate you and allow you to access the games on Meta Quest, Steam, or PlayStation. Gameplay data is used to run game features (for example, saving your progress, updating leaderboards, matching you with friends or other players in multiplayer, and unlocking achievements or in-game content).
- Improve and Optimize Our Games: We analyze gameplay and device data (including analytics and crash reports) to fix bugs, enhance performance, balance game mechanics, and introduce new features. This helps us create a better gaming experience and ensure the stability and security of our services.
- Website Functionality and Analytics: Data collected from our website (via cookies and Google Analytics) is used to understand how users engage with our site, so we can improve its content, layout, and functionality. For example, learning which pages are most visited helps us make our website more useful and user-friendly.
- Customer Support and Communication: Information you provide through support requests or feedback is used to assist you and resolve issues. If you reach out to us with questions or problems, we will use your contact information to communicate with you. We may also send service-related communications (for example, important updates about our games or this Privacy Policy). We will not send you marketing emails unless you have explicitly subscribed to a newsletter or otherwise given consent.
- Ensure Compliance and Security: We may use data to enforce our Terms of Service and to prevent fraud or other misuse of our games. For instance, we might use log and account data to investigate cheating or to protect the integrity of our multiplayer environment. We also use information as needed to meet legal obligations or respond to lawful requests (such as verifying age compliance – see Children’s Privacy below).
We will only use your personal information for the purposes described above. If we need to use your data for a new purpose that is not compatible with these original reasons, we will seek your consent or provide you with relevant notice, as required by law.
Platform-Specific Privacy and Compliance
We adhere to the privacy rules of each platform our games are on. Each platform may provide us with different types of data, and we handle that data in compliance with their specific policies:
Meta Quest (Oculus)
When you play our games on Meta Quest (the Oculus platform), your Oculus/Meta account information is used to log you in and enable gameplay features. This may include your Oculus user ID, display name, avatar, friend list (if you choose to engage in social features), and other information that Meta allows developers to access for your profile. We comply with Meta’s Developer Data Use Policy and other Oculus privacy requirements. This means we only use Oculus user data to support gameplay and VR features, and we do not share it with third parties except as needed to provide the service (e.g. for multiplayer matchmaking or cloud save functionality). We do not use data from your Oculus account for targeted advertising or any purposes outside of our game’s functionality. Additionally, we honor Meta’s rules for data deletion: if you request deletion of data related to your Oculus account (or if you remove our app from your Oculus device/account), we will delete any personal data obtained through Oculus that we hold, unless we are required to keep it for legal or compliance reasons.
Steam
For users playing via Steam, we receive limited information from your Steam profile through Valve’s Steamworks API. This typically includes your Steam user ID and public username (and possibly avatar) to identify you in-game (for example, displaying your name on leaderboards, in multiplayer lobbies, or recording your achievements). We do not receive sensitive personal details like your real name, email, or billing information from Steam unless you explicitly provide such information to us through other means. We abide by Steam’s privacy guidelines and the Steam Web API Terms of Use, which require us to only use Steam user data for the purposes of operating and improving the game, and to handle that data securely. We do not share your Steam account data with outside parties except as necessary for the operation of the game. Any game-specific data we store (such as high scores or game progress) is associated with your Steam ID only for in-game use. If you uninstall our game or revoke its permissions on Steam, we will stop accessing your Steam account data. Should you request deletion of any personal data we have from your Steam usage, we will remove it from our systems, provided we are not legally required to retain it.
PlayStation
When you play our games on PlayStation, we may access your public PlayStation Network (PSN) Online ID and certain profile information as allowed by Sony’s platform for in-game identification. This lets us show your username or profile avatar within the game (for example, on scoreboards or when you play multiplayer). We do not receive personal details like your email address or real name from Sony unless you separately provide them to us (for instance, via a support request). We handle PlayStation user data in accordance with Sony Interactive Entertainment’s privacy guidelines and developer requirements. This means we use your PSN data only to support gameplay features and we protect that data similar to how we treat other platform data. We do not share your PSN ID or related data with any third parties outside the needs of running the game. We also respect any privacy settings you have on your PlayStation account (for example, if your profile or activity is hidden from other users, we will abide by that in our game as well). If you delete our game or request that we delete data related to your PlayStation gameplay, we will remove the personal data that we control, in line with Sony’s rules and applicable law.
Third-Party Services and Analytics
We use certain trusted third-party services to operate and improve our games and website. These third parties only have access to information as needed to perform specific tasks on our behalf, and they are obligated not to use or disclose it for any other purposes.
- Unity Analytics: Our VR games may incorporate Unity Analytics, a service provided by Unity Technologies, to gather insights on game usage. Unity Analytics may automatically collect data such as your device identifiers (for example, an Oculus device ID or other hardware ID), IP address, general location (country or region), and in-game events (e.g. level progress, session length, error logs). This information helps us understand how players interact with our game — for instance, which levels are most popular or where players encounter difficulties — so we can improve the gaming experience. The data collected by Unity Analytics is generally aggregated and does not include your name or direct contact information. Unity may use this data in accordance with its own privacy policy. You can review Unity’s privacy practices in the Unity Privacy Policy. If you wish to opt out of Unity Analytics data collection where possible, please contact us (see Your Rights below) and we will assist you with any available opt-out mechanisms or guide you to relevant settings (some platforms may allow you to limit analytics data sharing at the device or account level).
- Google Analytics: We use Google Analytics on our website to collect anonymous statistics about visitors. Google Analytics uses cookies and similar technologies to track website interactions. This includes information about how you found our site, which pages you visit and for how long, your general geographic region, and device information (such as browser and operating system). We use these insights to improve our website content and usability. The information collected by Google Analytics is aggregated and does not directly identify you. Google operates under its own privacy policy when providing this service; you can learn more at Google’s Privacy & Data Practices for Analytics. If you prefer not to be included in Google Analytics tracking, you can opt out by using the Google Analytics Opt-Out Browser Add-on, or adjust your browser’s cookie settings to refuse analytics cookies.
- Other Service Providers: We may use additional third-party tools or services for purposes such as cloud hosting, data storage, error/crash reporting, or email communications. For example, we might host game databases and user data on a secure cloud service (which would process data only to store and retrieve it on our behalf), or use an email service to send support responses or newsletter updates (if you subscribed). We only share data with these providers to the extent necessary for them to perform their services. All such partners are bound by confidentiality obligations and robust data protection agreements. They cannot use your data for their own purposes and must handle it in accordance with our instructions and applicable privacy laws.
We want to be clear that we do not sell your personal information to any third parties. Any sharing of data is only as described above, and mainly limited to enabling our internal operations, analytics, and providing the game’s functionality to you.
Data Sharing and Disclosure
We understand the importance of keeping your information private. We only share personal data in a few specific situations:
- Within Subspace Games (Employees and Contractors): Members of our development and support team may access personal data only as needed to perform their jobs. For example, a support agent may view your account identifier and support history to assist you, or a developer might analyze crash logs tied to a device ID to diagnose a technical issue. All our team members are bound by confidentiality obligations.
- Service Providers and Partners: As described in the section above, we share information with third-party service providers who assist us in operating our games and website (such as analytics providers, cloud hosting services, or customer support tools). These parties are bound by contractual obligations to keep information confidential and to use it only for the services they provide to us. We ensure that they implement appropriate security measures to protect your data.
- Platform Providers: When you use our game on Meta Quest, Steam, or PlayStation, certain data is shared between us and the platform to enable gameplay and account integration. For example, the platform will know that you have downloaded/played our game, and we receive your platform ID as described earlier. These platforms handle your data according to their own privacy policies, and any data we share back to them (such as game achievements or leaderboard scores) is limited to what is needed for the platform’s services. We recommend reviewing Meta’s, Valve’s, and Sony’s privacy policies to understand how they manage your data.
- Legal Compliance: We may disclose your information if required to do so by law or in response to valid legal requests by public authorities (for example, a court order, subpoena, or government demand). We will only disclose the information that is necessary and will, when possible, inform you of such disclosure if we are legally allowed to do so.
- Protection of Rights and Safety: If we believe that an account is being used in ways that harm other players, violate our terms, or threaten the rights, property, or safety of Subspace Games, our users, or others, we may share data as necessary to prevent or address such issues. For example, we might report relevant information to a platform’s security team or law enforcement if a player engages in fraudulent or dangerous behavior. This kind of sharing is done only in good faith to protect our community and others.
- Business Transfers: In the unlikely event that Subspace Games Limited is involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the succeeding entity or party as part of the business transfer. If such a transfer occurs, we will ensure that your personal data remains protected and that the successor is bound by terms that are at least as protective as those in this policy. We will also provide notice on our website or through the app if a transfer materially affects how your personal data is used, and inform you of any choices you may have.
Importantly, we do not share your personal data with third parties for their own marketing or advertising purposes without your explicit consent.
Data Storage and Security
We take reasonable measures to protect the confidentiality and security of your information. Personal data collected by Subspace Games is stored on secure servers. These may be located in the United Kingdom, the European Union, or other jurisdictions where our service providers operate. Regardless of location, we apply appropriate safeguards to ensure your data is protected in line with this Privacy Policy and applicable law.
Security measures we implement include encryption of data in transit (for example, we use SSL/TLS protocols when you interact with our website or when our game communicates with our servers), and encryption at rest for sensitive data where appropriate. We maintain access controls so that only authorized personnel can access personal data, and we train our staff about the importance of privacy and security. We also update our systems regularly and monitor for possible vulnerabilities or attacks, employing industry best practices to prevent unauthorized access.
However, please note that no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. You should also take care to protect your own account information. For example, keep your platform account credentials (Oculus, Steam, PlayStation login details) secure and do not share them. If you believe your interaction with us or our services is no longer secure (for instance, if you suspect that your account has been compromised), please contact us immediately so we can help investigate and resolve the issue.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. In practice, this means:
- Account and Profile Data: Platform account identifiers and profile info (like your user ID and username) are kept as long as you continue to use our game. If you stop playing or uninstall the game, we may retain associated data for a period of time in case you return or for legitimate business analysis, but we will not keep it longer than necessary. We perform periodic reviews of the data we hold and will delete or anonymize account-related data that is no longer needed for active services.
- Gameplay Telemetry and Analytics: Raw gameplay logs and analytics data are kept for a limited time in identifiable form. Over time, we aggregate or anonymize this information for long-term analysis (so individual players are not identifiable). For example, we might keep detailed logs for a few months to analyze recent updates, and thereafter retain only aggregated statistics. Crash reports or error logs containing device identifiers are usually reviewed and then deleted or anonymized once issues are resolved.
- Support and Contact Records: If you’ve contacted us for support or feedback, we may retain those communications and our responses for a reasonable period (for example, up to a couple of years). This helps us maintain a history of support interactions, which can be useful if you contact us again, and to improve our customer service. We will delete these records earlier upon request, provided we have no ongoing obligation to keep them (e.g., if required for legal dispute resolution).
- Website Analytics Data: Data collected via Google Analytics on our website is subject to Google’s data retention settings, which we configure in accordance with our needs. Currently, we might retain analytics data for a period such as 14 months (as an example), after which Google may automatically delete it. In any case, this website usage data is aggregated, and you can clear cookies or use browser settings to remove or block tracking data at any time.
- Legal and Compliance: We will retain information as needed to comply with legal obligations, resolve disputes, and enforce our agreements. For instance, we may keep certain data in our business records for accounting/tax purposes or to comply with reporting requirements. Even if you request deletion, we may retain certain information to meet our legal responsibilities, but we will not use that information for other purposes.
When we no longer have a legitimate need to retain your personal information, we will securely delete or anonymize it. If immediate deletion is not possible (for example, because the data is stored in secure backups), we will isolate the data from any further use until deletion is feasible.
Your Rights and Choices
You have rights regarding your personal data and choices about how it is used. We are committed to providing you with access and control over your information. Subject to applicable laws (such as the EU/UK General Data Protection Regulation (GDPR) or similar data protection laws), your rights may include:
- Access & Portability: You have the right to request a copy of the personal data we hold about you. We can provide you with a summary of this information, and in certain cases you may be entitled to receive it in a portable format (i.e., a structured, commonly used, machine-readable form) so you can transfer it to another service.
- Correction: If any of your information that we have is inaccurate or outdated, you have the right to request that we correct or update it. For example, if you believe we have an incorrect contact email or an outdated record of your gameplay data, let us know and we will rectify it where possible.
- Deletion: You have the right to request deletion of your personal data that we have collected, also known as the “right to be forgotten.” If you want us to delete information we hold that can identify you, you can contact us to make this request. We will honor valid deletion requests and erase your personal data, provided we do not have a legitimate reason or legal obligation to keep it (for example, some data may need to be retained for financial record-keeping or security purposes). If the data in question was obtained via a third-party platform (like Oculus, Steam, or PlayStation), you may need to take additional steps such as deleting your game profile on that platform or revoking our access, in order to ensure we stop receiving your data.
- Objection & Restriction: You may have the right to object to certain processing activities or to request that we limit how we use your data. For instance, if we were processing your data for direct marketing (which we only do with consent), you can object and opt-out at any time. In some cases, you can also ask us to temporarily restrict processing if you contest the accuracy of data or have other concerns while an issue is being resolved.
- Withdraw Consent: Where we rely on your consent to process data (such as if you joined an email newsletter or agreed to share additional data), you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing we already performed, but it will mean we stop the specific activity you had consented to. For example, if you opt-in to receive news updates and later opt-out, we will stop sending you those updates.
- Platform Privacy Controls: In addition to the above, you can manage certain privacy settings through the platform you use to play our games. Meta Quest (Oculus), Steam, and PlayStation each offer account settings or privacy dashboards where you can control what information is shared with apps/games. For example, Oculus allows you to control your active status or whether your friends list is visible to apps; Steam has profile visibility settings; and PlayStation lets you adjust data collection for personalization. We encourage you to review those platform settings to augment the control you have over your data. Using those tools in combination with the rights you have with us ensures you have a comprehensive control over your personal information.
To exercise any of your rights or make an inquiry about your data, please contact us at [email protected]. We may need to verify your identity before fulfilling certain requests (for example, by confirming you own the account in question), to protect your privacy and security. We aim to respond to requests as soon as possible and within any legally required timeframes (generally within 30 days for GDPR-related requests). There is no fee for making a request unless it is excessive or unfounded, in which case we will inform you of any cost and reasoning.
If you are located in the EU, UK, or other jurisdiction with data protection authorities, you also have the right to lodge a complaint with a supervisory authority if you believe we have infringed your privacy rights. For example, in the UK you can contact the Information Commissioner’s Office (ICO). We would, however, appreciate the chance to address your concerns directly first, so please feel free to reach out to us with any issues.
Children’s Privacy
Our games and website are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are under 13 (or the minimum age required in your country for your consent to personal data processing), please do not use our games or submit any personal information to us.
If we learn that we have inadvertently collected personal data from a child under 13 without appropriate consent, we will take prompt action to delete that information from our records. If you are a parent or guardian and you believe your child under 13 has provided personal information to us, please contact us at [email protected] so that we can investigate and delete any such data.
We also comply with platform-specific age restrictions and policies. For example, Meta Quest and other VR platforms have their own age guidelines (often restricting use of certain services to users 13+ or with parental consent). We rely on these platforms to enforce age limits for accounts. If a platform notifies us that an account is under the required age or has been removed for age reasons, we will delete the associated data we may have from that account.
Changes to This Privacy Policy
We may update or revise this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes to how we handle your personal information, we will provide notice in an appropriate way. For example, we might post a prominent notice on our website or notify users within our games (or via email, if we have your contact details for this purpose) to inform you of important updates.
Please check the “Last updated” date at the top of this policy to see when it was last revised. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our services after any changes to this policy will signify your acceptance of the updated terms, to the extent permitted by law.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us. We are here to help and will address your inquiries promptly.
Contact Information:
- Email: [email protected]
Subspace Games Limited is the data controller for the personal information processed under this policy. We value your privacy and will do our best to resolve any questions or issues you have about how your information is handled.
Thank you for reading our Privacy Policy and for trusting Subspace Games with your gaming experience. Your privacy and security are important to us, and we are committed to safeguarding the data you share when enjoying our VR games.