TUBBY COMPANY — PRIVACY POLICY

Last updated: October 29, 2026

Tubby Company ("the Game") is a multiplayer virtual reality game for Meta Quest,

made by GrahamVR ("we", "us", "our"). This policy explains what information the

Game collects, why we use it, who we share it with, and how you can ask us to

delete it. By playing the Game, you agree to this policy. If you do not agree,

please do not play.

1. INFORMATION WE COLLECT

The Game uses the Meta Horizon platform for accounts, social features and

purchases. Through Meta, we receive:

- User ID: a unique ID Meta gives your account for this Game. We use it to

  recognise you, save your progress and purchases, and enforce bans.

- User profile: your Meta display name and profile picture. Other players can

  see your display name in the Game.

- User age group: an age category (for example preteen, teen or adult) from

  Meta. We do not receive your exact date of birth.

- In-app purchases and downloadable content: which items you own and your

  purchase history in the Game. Meta handles all payments. We never see your

  card or payment details.

- Subscriptions: whether you have an active subscription, its status and its

  renewal date.

- Avatars: your Meta Avatar, so your character looks the way you set it up.

  Other players can see your avatar.

- Deep linking: information sent when you open the Game from a link,

  invitation or notification, such as which room to join.

- Friends: your Meta friends who also have the Game, so you can find and join

  them.

- Blocked users: the players you have blocked on Meta, so we can keep them away

  from you in the Game.

- Invitations: invitations you send or receive to join a game session.

- Parties: the party you are in, so party members can play in the same room.

- Challenges: the challenges you create or join, including scores and rankings

  that other participants can see.

- Device ban: a device-level identifier from Meta. It lets us stop a headset

  that has been banned for breaking our rules from playing again.

When you play online, we also collect:

- Gameplay data: the rooms you join, your in-game position and movement,

  cosmetics, in-game currency, progress and settings.

- Voice chat: if voice chat is on, your voice is sent live to the other players

  in your room. We do not record or store voice chat.

- Technical data: IP address, headset model, operating system version, game

  version, and crash or error reports.

- Reports: if you report a player, we get the report and details of what

  happened.

We do NOT collect your real name, email address, phone number, precise

location or payment card details. We do NOT sell your information or use it

for targeted advertising.

2. HOW WE USE YOUR INFORMATION

- To run the Game and connect you to multiplayer rooms.

- To save your progress and deliver your purchases, DLC and subscriptions.

- To power social features: friends, parties, invitations, deep links and

  challenges.

- To show your display name and avatar to other players.

- To give younger players extra protection, based on their age group, and to

  follow the law.

- To keep the Game safe: we enforce our rules, respect your block list,

  investigate reports, and ban accounts or devices that cheat, harass others

  or break the rules.

- To fix bugs and improve performance.

If you are in the EU, EEA or UK, we rely on these legal bases: providing the

Game you asked for (contract), our legitimate interest in keeping the Game

working and safe, and complying with the law.

3. WHO WE SHARE INFORMATION WITH

- Other players see your display name, avatar, voice (if voice chat is on),

  in-game actions and challenge scores.

- Meta Platforms, Inc. provides the platform features listed above. Meta's

  own Privacy Policy covers the information Meta collects.

- Service providers that run parts of the Game for us. They may only use your

  information to provide their service to us:

    [EDIT THIS LIST TO MATCH YOUR GAME, FOR EXAMPLE:]

    - Photon (Exit Games): multiplayer and voice chat servers

    - PlayFab (Microsoft): accounts, saved data and in-game currency

    - Unity Technologies: game engine and crash reporting

- Authorities, when the law requires it, or when we need to protect the

  safety of players or the public.

- A new owner, if the Game is sold or transferred. This policy will still

  apply to your information.

4. CHILDREN'S PRIVACY

Meta Quest accounts for preteens (ages 10 to 12) are managed by a parent or

guardian. The parent decides whether the preteen can use the Game. We use the

age group Meta provides to give younger players extra protection, such as

[LIMITED VOICE CHAT AND SOCIAL FEATURES — EDIT TO MATCH YOUR GAME].

We do not knowingly collect more information from children than this policy

describes. If you think a child has given us personal information without a

parent's permission, contact us and we will delete it.

5. HOW LONG WE KEEP INFORMATION

- Account, progress and purchase data: while you keep playing, or until you

  ask us to delete it.

- Technical logs and crash reports: up to 90 days.

- Reports and ban records: as long as we need them to enforce a ban or follow

  the law.

6. SECURITY

We take reasonable steps to protect your information. No system is 100%

secure, so we cannot guarantee absolute security.

7. YOUR CHOICES AND RIGHTS

- You can mute, block or report players in the Game or through Meta.

- You can manage your friends, privacy and avatar settings in your Meta

  account.

- Depending on where you live (for example in the EU, the UK or California),

  you may have the right to access, correct, delete or download your

  information, to object to how we use it, and to complain to your local data

  protection authority.

To use any of these rights, email us at stelladevvv@gmail.com. We will reply

within 30 days.

8. HOW TO DELETE YOUR DATA

1. Email stelladevvv@gmail.com with the subject "Delete My Data".

2. Include your Meta username and your in-game display name.

3. We will delete your data within 30 days and email you when it is done.

Uninstalling the Game does NOT delete your data. We may keep a small amount of

information when the law requires it or to enforce an active ban. Meta keeps

its own purchase records under Meta's Privacy Policy.

9. INTERNATIONAL USERS

Our service providers may store and process information in countries other

than yours, including the United States. Data protection laws there may be

different from the laws where you live. Where the law requires it, we use

safeguards for these transfers.

10. CHANGES TO THIS POLICY AND CONTACT

We may update this policy from time to time. When we do, we will change the

"Last updated" date above. If the change is important, we will also tell you

in the Game.

Questions? Contact us:

GrahamVR

Email: stelladevvv@gmail.com