Privacy Policy for Graffiti Squad

Effective Date: October 5, 2026

1. Introduction

Graffiti Squad is a social VR graffiti game for Meta Quest. We respect your privacy and are committed to protecting it. This policy explains what data the game uses, why it needs it, who it is shared with and how long it is kept. "We" and "us" mean the developer of Graffiti Squad (see section 12 for contact details).

We do not run our own game servers or player databases. Online features are provided by the Meta Horizon platform and by Epic Online Services, as described below.

2. Information We Request From Meta Horizon

When you play Graffiti Squad on the Meta Horizon platform, the game requests the following from Meta's platform services:

• User ID: your unique Meta Horizon identifier, together with a one-time sign-in proof that confirms the request really comes from your account.

• User Profile: your public display name (Meta Horizon username).

• User Age Group: the age category Meta provides for your account (for example 10–12, 13–17 or 18+).

• Friends and Invites: access to Meta's own invite panel and "who's here" panel, so you can invite friends and see who you are playing with.

• Deep Linking: lets you join a friend's room directly from an invite, a notification or their profile.

• In-App Purchases: lets you buy optional cosmetic add-ons and restore items you already own.

Meta also confirms that your account is entitled to use the app.

3. Information Created While You Play

• Display name: shown to other players in rooms and in the room list.

• Voice chat audio: only if you allow microphone access (see section 5).

• Movement data: the position of your head, hands and controllers (or tracked hands), used to animate your avatar for other players in real time.

• Gameplay data: your paint strokes, colors and finishes, your selected outfit and spray can, and the location you are in.

• Room information: room name, room code, location, host display name, number of players and whether the room is public or private.

• Network data: your IP address, which every online connection requires (see section 6).

• Settings and saved walls: stored only on your device (see section 7).

We do not collect your real name, email address, phone number, precise location, payment details, contacts, photos, camera or passthrough images, eye or face tracking data, or advertising identifiers.

4. How We Use Your Information

• Online sign-in: your Meta User ID and sign-in proof are sent to Epic Online Services (EOS) to create an anonymous, game-specific player ID. You do not need an Epic account and never see one. If Meta sign-in is temporarily unavailable, the game may sign you in with an anonymous device-based EOS ID instead; in that case it sends your device model (for example "Quest 3") and your display name.

• Playing together: creating, listing and joining rooms, and keeping everyone's avatars, paint and voice in sync.

• Friends, Invites and Deep Linking: the game tells Meta which location you are in and whether your room can be joined (Group Presence), so friends you invite can join you. Invites are chosen by you in Meta's own panel. We do not receive, store or process your friends list ourselves.

• In-App Purchases: purchases are processed entirely by Meta. The game only receives the list of add-ons your account owns, so it can unlock them.

• User Age Group: used only to provide an age-appropriate experience and to meet Meta's platform requirements. It is not stored, and it is not shared with other players or third parties.

• Safety: Meta's Report and Block tools, muting, and the host's ability to mute or remove players from a room.

• Settings and saved walls: remembering your preferences and letting you save and restore your artwork.

We do not use any of this data for advertising, marketing, profiling or tracking, and we do not sell it.

5. Voice Chat

• The game asks for microphone permission. You can refuse; the game still works without voice.

• Your voice is streamed live only to the players in the same room. We do not record or store voice audio.

• You can mute your own microphone at any time and mute any other player for yourself. The host can mute players for the whole room or remove them from the room.

• When you report someone using Meta's Report tool, Meta may capture a recording of the recent session as part of its own reporting process, under Meta's policies.

6. Sharing and Third Parties

We share data only as needed to run the game:

• Meta Platforms Technologies (Meta Horizon platform services, purchases, invites, Group Presence and reporting). See the Supplemental Meta Platforms Technologies Privacy Policy.

• Epic Games, Inc. (Epic Online Services: sign-in, rooms and peer-to-peer connections, including relay servers). Epic processes your anonymous player ID, display name, room information and connection data to provide these services. See the Epic Games Privacy Policy.

• Other players: players in your room can see and hear your display name, avatar and outfit, movements, voice and paint. Public rooms appear in the in-game room list with the room name, host display name, location and player count. Private rooms are joinable only by invite or room code.

• Peer-to-peer connections: as in most peer-to-peer multiplayer games, your IP address may be visible to the devices of other players in your room. It is used only to establish the connection.

• Legal requirements: we may disclose information if required by law.

We do not sell, rent or share your data with advertisers, data brokers or analytics companies.

7. Data Retention

• Meta profile data (User ID, display name, age group): kept in memory only while the game is running. We do not store it on any server.

• On your device: settings, language, colors and favorites, tutorial progress, your selected outfit and spray can, and saved walls. These stay on your headset until you delete them or uninstall the game.

• Saved walls: any player can save the current wall to their own device. A saved wall may include artwork painted by other players in that room. When a host loads a saved wall, it is shown to everyone in the room.

• Rooms: room information and member display names are stored by Epic Online Services only while the room is open.

• EOS player ID: Epic keeps the link between your Meta User ID and your anonymous EOS player ID, so the game recognizes you the next time you play. You can ask us to delete it (see section 13).

• Voice, movement and live gameplay data: transmitted in real time and not stored.

• Purchases: purchase records are kept by Meta under Meta's policies.

8. Children

Graffiti Squad does not knowingly collect personal information from children beyond what Meta's platform provides and what is described in this policy. We use the age group supplied by Meta to provide an age-appropriate experience. If you are a parent or guardian and believe your child has shared personal information with us, contact us and we will delete it.

9. Your Choices and Rights

• Refuse or revoke microphone access in your headset settings, or mute yourself in game.

• Mute, block or report other players, and leave any room at any time.

• Play in private rooms that only invited friends can join.

• Delete data stored on your device by uninstalling the game.

• Manage your Meta account data in your Meta account settings.

Depending on where you live (for example in the EU, UK or California), you may have the right to access, correct, delete or object to the processing of your personal data, and to complain to your local data protection authority. To exercise these rights, contact us at the address below.

Where the GDPR applies, we process data to provide the game you requested (performance of a contract), with your consent for microphone access, and on the basis of our legitimate interest in keeping multiplayer safe. Meta, Epic and Unity may process data outside your country, including in the United States, under their own safeguards.

10. Security

We use appropriate security measures to protect user data from unauthorized access, misuse, disclosure or destruction. Online connections are handled through Meta and Epic Online Services. However, no security system can provide absolute protection against every risk.

11. Changes to This Policy

We may update this policy to reflect new features, platform requirements or changes in our practices. When we do, we will post the updated policy with a new Effective Date.

12. Contact Us

If you have questions or concerns, please email: mgwdgames@gmail.com 

13. Data Deletion Requests

To request deletion of your data, including your EOS player ID, email us at mgwdgames@gmail.com . Please include your Meta Horizon username so we can find your data. We will respond within 30 days.

By continuing to use Graffiti Squad, you acknowledge that you have read and understood this Privacy Policy.

MGWD is the studio name of Marcin Gwóźdź, an independent developer based in Poland, who is the data controller for the processing described in this policy and can be contacted at mgwdgames@gmail.com.