Privacy Policy for Endless Climber

Effective Date: 18 October 2026

1. Introduction

This Privacy Policy explains how Endless Climber processes information when you play the game on the Meta Horizon platform, use its leaderboard and online multiplayer features, or contact us for support.

Endless Climber is provided by MGWD ("we", "us", or "the developer"), the controller responsible for the processing described in this policy. You can contact us at mgwdgames@gmail.com .

Endless Climber is a virtual reality climbing game in which you climb as high as you can, set personal highscores, and compete on a global leaderboard. It does not require you to create a separate Endless Climber account. Meta platform features, the global leaderboard, and optional in-app purchases use Meta's online services. Online multiplayer uses Epic Online Services (EOS), provided by Epic Games, for player authentication, creating and joining lobbies, and establishing peer-to-peer connections, including connections routed through EOS relay servers.

We do not operate our own backend that stores player profiles, Meta account records, leaderboard records, or purchase records. However, the game processes information on your device, sends information to Meta and EOS where needed for their services, and exchanges information with other players during multiplayer sessions. The absence of a developer-operated backend does not mean that no information is transmitted or stored by service providers.

2. Personal Data and Online Features

2.1. Meta User ID

Endless Climber accesses the signed-in user's Meta Horizon User ID through the Meta Platform SDK. This is a unique identifier associated with your Meta account; it is not your real name.

The game uses this identifier to identify the current platform user and associate platform operations, profile information, leaderboard entries, purchase checks, and content entitlements with the correct account. This includes verifying and restoring eligible purchased content.

The Meta User ID is also used for EOS authentication as explained in section 2.7. We do not use it for advertising, marketing, behavioural profiling, analytics, or cross-app tracking.

2.2. User Age Group

On Meta Quest, Endless Climber requests your age category through Meta's User Age Group / Get Age Category API. This may indicate a child, teen, adult, or unavailable age category.

The game uses this information to comply with Meta's age-group requirements and determine whether age-specific restrictions apply, including whether your display name and scores are submitted to the global leaderboard (see section 2.5) and age-related handling of automatic public-room behaviour in multiplayer. The category may also appear in local diagnostic logs as described in section 3. Endless Climber does not receive an exact date of birth and does not request an exact age, date of birth, or identity documents.

Age-category information is not used for advertising, marketing, behavioural profiling, or analytics.

2.3. User Profile

Endless Climber accesses limited profile information through the Meta Platform SDK. Depending on what Meta makes available and the feature being used, this may include:

your display name or username;
your Meta profile picture or profile-image URL;
profile information necessary to identify the current platform user within the game.

This information is used to identify the signed-in user and display their identity in the leaderboard and other platform-connected parts of the game. Your display name may also be included in multiplayer lobby information and shown to other players.

We do not use Meta profile information for advertising, marketing, behavioural profiling, analytics, data brokerage, or tracking across unrelated applications.

2.4. In-App Purchases

Endless Climber supports optional purchases of digital content through Meta's in-app purchase system in versions where these purchases are available.

The game processes information returned by Meta's purchase services, which may include product identifiers or SKUs, purchase identifiers where provided, purchase results, ownership information, and content entitlements. We use this information to initiate checkout requested by you, determine whether a purchase succeeded, unlock purchased content, verify ownership, and restore eligible purchases. Minimal information indicating which content is unlocked may be stored locally on your device.

Payments are processed through Meta's checkout system. Endless Climber does not receive or store payment-card numbers, bank-account information, or payment authentication credentials, and receives no information about purchases made in unrelated applications.

2.5. Global Leaderboard

Endless Climber uses Meta's leaderboard service to show a public high-score table. When eligible, the game sends your Meta User ID and your game scores to Meta's leaderboard service. Meta uses these fields, together with your Meta profile information, to place you on the leaderboard.

Your display name, profile picture, and score may be visible to other players in the in-game leaderboard and other public high-score screens.

The leaderboard is available only to players aged 13 or older. If Meta returns a child age category, the game does not submit your display name or scores to the leaderboard. No personal information other than that described in this section is sent to the leaderboard service.

2.6. Information We Do Not Request or Use

Endless Climber does not request access to your followers, contacts, or social relationships unless a future version introduces a feature requiring that access and this policy is updated accordingly.

We do not record voice chat or collect camera recordings for developer use. Live microphone processing for voice chat is described in section 2.9.

We do not collect information for personalised advertising, behavioural advertising, marketing profiling, data brokerage, or cross-app tracking. The game does not include third-party advertising or behavioural analytics services.

2.7. Epic Online Services Authentication

Endless Climber uses the EOS Connect service to authenticate players for online multiplayer. The game sends your Meta User ID and a sign-in proof supplied by Meta to EOS so that EOS can verify the platform user and create or retrieve an EOS Product User ID for Endless Climber.

The EOS Product User ID is a pseudonymous player identifier. It is not your real name, but it can be associated with your platform account and used to recognise you across sessions. It should not be understood as fully anonymous information.

You do not need to create or sign in to an Epic Games account. Endless Climber does not receive your Meta password.

If Meta sign-in is temporarily unavailable, the game may use EOS device-based authentication instead. For that process, the game provides the device model and a display name, and EOS creates or uses a device-based identifier. This identifier is used for game authentication, not advertising.

2.8. Lobbies, Peer-to-Peer Connections, and Multiplayer Data

EOS enables the game to create, find, join, and leave multiplayer lobbies and establish connections between participating players. One participating player's device acts as the session host. Connections first attempt a direct peer-to-peer connection and may use an EOS relay if a direct connection cannot be established. A relay server forwards traffic between the connected devices.

Information processed for these features includes:

player and connection identifiers, including the EOS Product User ID;
display names used in multiplayer;
lobby identifiers, membership, and information needed to identify and join a session;
lobby attributes such as the room name and code, selected mode or location, host display name, player count, public/private setting, and protocol-version information needed to match compatible players;
IP addresses and technical connection information needed to establish, route, and maintain multiplayer connections;
live gameplay information needed to keep the session synchronised, such as avatar poses and cosmetic choices, head and hand or controller movements, climbing position and height, scores, readiness and host status, and connection-quality information;
live voice audio when microphone access and voice transmission are enabled, as described in section 2.9.

Lobby information is processed by EOS. Live gameplay and voice data are exchanged between players' devices using the game's multiplayer networking, including through the device acting as host. Depending on the connection, this traffic may travel directly between devices or through EOS relay servers.

If a direct peer-to-peer connection is used, your IP address may be visible to the devices of players connected to you. Relay routing can avoid exposing your IP address to another player's device, but EOS still processes network information needed to provide the connection.

These features are used to provide online play, not advertising or behavioural profiling.

2.9. Microphone and Peer-to-Peer Voice Chat

Endless Climber offers live voice chat between players in the same multiplayer session. The game requests microphone permission for this feature. You can refuse or revoke microphone access in your headset settings and continue playing without transmitting your voice.

When microphone access and voice transmission are enabled, audio is captured temporarily and transmitted through the game's peer-to-peer multiplayer connections. The device hosting the session forwards voice packets to the other participants. If a connection uses an EOS relay, the relay forwards the voice traffic as part of the multiplayer traffic. Endless Climber does not use a separate Epic Voice/RTC service.

We do not record or retain voice chat audio. Other participants can hear what you say, so information you choose to disclose over voice is shared with them. You can mute your microphone and mute other players locally using the game's voice controls.

3. Device Processing, Multiplayer Synchronisation, and Local Storage

XR Input Data

Endless Climber temporarily processes headset and motion-controller information needed to operate the virtual reality experience, such as headset and controller position and orientation, controller input, tracking status, and temporary interaction information. This enables climbing, grabbing holds, movement, tracking checks, and haptic feedback.

During multiplayer, the movement and interaction information needed to represent your actions and synchronise the session is also transmitted to other participants through the connections described in section 2.8. This information is therefore not processed exclusively on your own device.

We do not intentionally record XR input for profiling or upload an XR movement history to a developer-operated backend.

Local Game Data

Endless Climber stores gameplay information locally so that it can remember progress and preferences. Depending on the game version, this may include personal best scores and progress, unlocked content, gameplay settings, comfort preferences, and audio and haptics settings. Local data is stored in the application's local storage unless backed up by Meta's platform services.

Meta Cloud Backup

We do not operate our own cloud-save service. Where Meta's system-level Cloud Backup is enabled for Endless Climber and the user, Meta may back up eligible local application data under Meta's systems and policies.

Local Diagnostic Logs

The game and its networking components generate local diagnostic messages to help identify platform, authentication, connection, and microphone errors. These messages can include technical session information and the age category returned by Meta. They do not contain voice recordings.

We do not operate a developer service that automatically collects these logs. If you choose to send diagnostic information to us for support, we process it as support correspondence under section 5.

4. Purposes and Legal Bases of Processing

We process the information described in this policy to:

operate Endless Climber, its VR controls, and its climbing mechanics;
save and restore personal bests, progress, and preferences;
identify and authenticate the signed-in platform user;
retrieve and display relevant Meta profile information;
submit eligible scores to and display the global leaderboard;
provide Meta platform features and verify or restore eligible in-app purchases;
determine whether age-related Meta requirements or restrictions apply;
create, find, and join multiplayer lobbies;
establish and maintain multiplayer connections, including relay connections;
synchronise players and shared gameplay;
provide live voice chat when enabled;
diagnose platform, networking, and microphone issues;
respond to support, privacy, and data-deletion requests.

We do not use this information for advertising, marketing profiling, behavioural profiling, cross-app tracking, selling personal information, or data-broker activities.

Where the GDPR or similar laws require a legal basis, we rely on:

Performance of a contract: processing necessary to provide the game and requested features, including authentication, the leaderboard, multiplayer networking, and purchase entitlements.
Legitimate interests: processing necessary to operate and maintain the service, address technical issues, protect its security, and respond to enquiries, where those interests are not overridden by your rights.
Legal obligations: processing necessary to comply with applicable law and respond to valid legal or privacy-rights requests.
Consent, where required: including optional microphone processing. You can stop voice transmission or revoke microphone access at any time. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

Information required for authentication or multiplayer connections is necessary to provide those online features; if it cannot be processed, they may not work. Microphone access is optional for gameplay.

5. Information You Provide When Contacting Us

If you contact us by email, we receive your email address and information you voluntarily include, such as a technical issue, purchase reference, diagnostic log, support enquiry, privacy request, or deletion request. We use this information to respond to your enquiry and comply with applicable legal or platform requirements. Support correspondence is not used for advertising or marketing.

Correspondence is processed through our email service provider, Google (Gmail). This is separate from the game's online services.

Please do not send passwords, full payment-card information, authentication tokens, or unnecessary sensitive information by email.

6. Data Retention

Information

How long it is kept

XR input and live multiplayer state

Processed temporarily for gameplay and session synchronisation. We do not keep an archive of movement or multiplayer traffic.

Voice audio

Processed only in temporary capture, network, and playback buffers. We do not retain recordings.

Meta User ID, profile, and age category

Processed during relevant platform requests, leaderboard operations, EOS authentication, and age checks. We do not store them in a developer-operated backend.

Leaderboard data (User ID, profile, score)

Stored on Meta's servers for as long as needed to maintain the leaderboard, under Meta's policies.

EOS player identifiers and account associations

May persist beyond a session so EOS can recognise the same player later. They are not erased automatically when you leave a lobby, close or uninstall the game; they are kept while needed for the online service, subject to deletion requests (section 9) and legal requirements.

Lobby data

Processed by EOS while needed to operate the lobby. Closing a lobby ends its active use but does not necessarily erase all related service records or technical logs immediately.

EOS connection and operational records

Governed by the EOS service terms and, where Epic acts as an independent controller, its privacy policy. We do not set a separate retention period for Epic's independently controlled records.

Purchase information

Processed as needed for ownership checks; minimal local unlock information may remain to provide access.

Local game data

Kept until you clear the app's storage or uninstall it, subject to any Meta backup.

Local diagnostic logs

Kept according to the device or platform's log rotation and clearing behaviour.

Meta Cloud Backup

Kept separately under Meta's policies and controls, where enabled.

Support correspondence

Kept only as long as reasonably necessary to resolve the enquiry, handle follow-ups or disputes, and meet legal obligations.

Meta independently determines retention of the account, profile, leaderboard, payment, transaction, platform, and backup information it controls.

7. Disclosure, Service Providers, and International Processing

We do not sell or rent personal information or disclose Endless Climber player information to advertisers, advertising networks, data brokers, or behavioural analytics providers.

Epic Online Services

Epic Games provides EOS authentication, lobbies, and peer-to-peer networking, including relay infrastructure. EOS processes the authentication information, player identifiers, display names, lobby information, and network data described in section 2. When a connection is relayed, multiplayer traffic, including live voice packets, passes through the relay. See the EOS Trust Statement and, for processing where Epic acts as an independent controller, the Epic Games Privacy Policy.

Other Players

Players in your multiplayer session receive the information needed to display your multiplayer identity, represent your avatar and actions, synchronise gameplay, and play your voice when you transmit it. Their devices, including the device acting as host, also process the player identifiers and connection information needed for the session. Players viewing the global leaderboard can see eligible display names, profile pictures, and scores.

The in-game lobby list shows information such as the room name, host display name, mode or location, and player count. Lobby attributes, including room codes and member display names, are also shared through EOS lobby discovery and lookup. A room being omitted from the public list does not make its lobby metadata confidential: it can still be discoverable by other game clients through EOS queries. Direct peer-to-peer IP visibility is described in section 2.8.

Email Provider and Legal Disclosures

Support correspondence is processed by Google through Gmail; see the Google Privacy Policy. We may disclose information where required by applicable law, regulation, court order, or other valid legal process.

International Processing

Meta, Epic, and Google operate internationally, and information may be processed outside your country of residence, including in the United States. Information about their transfer safeguards is available in their privacy notices. Where required by law, transfers must be covered by an adequacy decision or appropriate safeguards, such as standard contractual clauses. You can contact us for information about safeguards applicable to transfers made on our behalf.

8. Security Measures

We use reasonable technical and organisational safeguards appropriate to the information processed by Endless Climber. These include limiting processing to information needed for the described functions, storing local data within application storage, and limiting access to support correspondence and service-management tools.

Meta account, profile, leaderboard, and purchase operations use Meta's platform services. Multiplayer authentication, lobbies, and network connections use EOS and the game's networking components. Endless Climber does not collect your Meta password, payment-card numbers, bank-account credentials, or payment authentication information.

No method of storage, transmission, or electronic processing can guarantee absolute security.

9. Your Choices, Data Deletion, and Other Rights

To request access, correction, deletion, or information about personal information under our control, including information processed through EOS on our behalf, email mgwdgames@gmail.com with the subject line "Endless Climber Privacy Request".

We will respond without undue delay and within the period required by applicable law. Where the GDPR applies, this is generally within one month; if an extension is legally permitted and necessary, we will explain it within that period.

We may request only information reasonably needed to verify your identity and locate the relevant records. You may include your Meta Horizon username, but we may need an additional account or player identifier. Do not send your password or sign-in tokens.

EOS-Related Data

You can ask us to access or delete Endless Climber-related data held through EOS, including player identifiers and account associations. We will use the available EOS tools or work with Epic to process a valid request within the scope of our control and applicable law.

Some EOS identity associations may be shared across products within the same developer organisation. If a request would affect access to another of our games, we will explain the scope before acting. Deleting EOS-related data does not delete your Meta account or Meta purchase records, and using online features again may re-create the records needed to provide them.

Leaderboard Data

You can ask us to remove your entries from the Endless Climber leaderboard. Information Meta controls independently should be managed through Meta's privacy and account controls.

Local Device Data

You can remove locally stored Endless Climber information by clearing the application's storage in your device settings or uninstalling the game. We cannot remotely erase files stored only on your device. Device diagnostic logs may remain until the system rotates or clears them. Clearing local data does not delete data held by EOS, Meta, or other service providers.

Meta Cloud Backup, Account, and Purchases

Uninstalling the game does not necessarily delete Meta-managed backups; use Meta's Cloud Backup controls. Clearing local data does not delete your Meta account, profile, purchase history, or entitlements, and purchased content may become available again after reinstallation. Requests about information Meta controls independently should go through Meta's privacy, account, or support controls.

Microphone and Multiplayer Choices

You can refuse or revoke microphone permission in headset settings, mute your microphone in game, mute other players locally, or leave a multiplayer session. These choices do not automatically delete records already held by service providers.

Other Rights

Depending on applicable law, you may have rights to access, correction, deletion, restriction, objection, data portability, withdrawal of consent, and to lodge a complaint with a competent data-protection authority. Where we do not hold or control the information concerned, we will explain this and, where possible, identify how to manage or delete it.

10. Children and Age-Appropriate Use

Access to Endless Climber and its online features is subject to the application's selected Meta age group, Meta account requirements, applicable parental controls, and applicable law.

The age category returned by Meta's Get Age Category API is used as described in section 2.2. Players in the child age category do not have their display name or scores submitted to the global leaderboard. The category is not used for advertising, marketing, behavioural profiling, or analytics.

Multiplayer features involve sharing the session information described in this policy with other players, and voice chat transmits microphone audio when enabled. Parents or guardians may contact us with privacy questions or requests relating to their child.

11. Changes to This Privacy Policy

We may update this policy to reflect changes to Endless Climber, its online services, Meta or EOS requirements, applicable law, or our data practices. The updated version will include a new Effective Date. Where required by law, we will provide additional notice of material changes.

12. Contact Us

For questions, privacy requests, deletion requests, or security concerns relating to Endless Climber, contact:

MGWD
Email: mgwdgames@gmail.com

MGWD is the studio name of Marcin Gwóźdź, an independent developer based in Poland, who is the data controller for the processing described in this policy and can be contacted at mgwdgames@gmail.com.