Privacy Policy for “Nightrix”

Last updated: 29 August 2025

Publisher: Siroxtag with Project-M13 (the “Team”) (“we”, “our”, “us”)

Contact: nightrix@projectm13.xyz • Mailing address: 123 Example Street, City, Country

1) Who is responsible? (VRC.Privacy.1)

This Privacy Policy is published and managed by Siroxtag with Project-M13 for the “Nightrix” application available on Meta Quest headsets. It applies to the use of the app and any associated services (the “Service”).

Official link: https://sites.google.com/view/nightrix/privacy-policy

2) What data do we collect? (VRC.Privacy.2)

Depending on your usage, we may process the following categories of data:

• Technical identifiers: device ID/Remote ID provided by the platform, Meta user ID, authentication tokens.
  
  

• Usage data: in-app events (level opens, session length), crash reports, error logs.
  
  

• Network data: IP address, latency, region/locale.
  
  

• Optional data (only with your action or consent): email address for support, username, screenshots or user-generated content.
  
  

• VR and sensor data (only if necessary for features): headset and controller position/rotation processed locally for gameplay. We do not store your camera feeds or environmental data unless a feature explicitly requires it and you are informed here.
  
  

What we do not collect: sensitive health data, biometric data for identification, background audio/video recordings, precise geolocation, unless specifically stated otherwise.

3) Why do we use this data? (VRC.Privacy.3)

We use the data listed above for the following purposes:

• Provide the Service: enable login, progression, multiplayer/leaderboards, fraud prevention, and maintaining security.
  
  

• Improve the app: diagnose bugs, measure performance, understand feature usage.
  
  

• Customer support: respond to support requests, reset accounts, process refunds.
  
  

• Legal obligations: comply with applicable laws, store policies, and prevent abuse.
  
  

We do not use your data for behavioral advertising nor do we sell your data.

4) Legal basis (if targeting EU/EEA)

• Contract performance (Art. 6(1)(b) GDPR) to provide the Service.
  
  

• Legitimate interests (Art. 6(1)(f)) for security, fraud prevention, and app improvement (limited and proportionate analytics).
  
  

• Consent (Art. 6(1)(a)) for optional features (e.g., newsletter, advanced analytics). You may withdraw your consent at any time in settings or by contacting us.
  
  

5) Data retention

We only keep data for as long as necessary for the stated purposes:

• Logs and crash reports: 90 days
  
  

• Accounts/identifiers: as long as the account is active, then deletion/anonymization within 30 days
  
  

• Support emails: 2 years maximum
  
  

6) Sharing with third parties

We may share data with service providers who help us deliver the Service (hosting, analytics, crash reporting, multiplayer). These providers may only process data on our instructions, apply reasonable security measures, and are bound by contractual agreements. Example list:

• Hosting: Porkbun
  
  

• Crash/Analytics: None
  
  

• Multiplayer/Leaderboards: None
  
  

We do not transfer data for sale purposes.

7) International transfers

If data is transferred outside your country (e.g., to the United States), we apply appropriate safeguards (Standard Contractual Clauses, UK equivalents, etc.).

8) Your rights

Depending on your region, you may have the rights to access, correct, port, restrict, object, or withdraw consent. See the Data Deletion section below.

9) Data deletion requests (VRC.Privacy.4)

You may request deletion of data collected through the app via email:

• By email: send your request to nightrix@projectm13.xyz with the subject “Data Deletion – Nightrix.” Include your Meta user ID (if known) and/or associated email address.
  
  

Acknowledgment within 7 days, processing within 30 days. Deletion may affect your progression and access to in-app purchases.

10) Security

We apply reasonable technical and organizational measures (encryption in transit, access control, logging, data minimization). No system is 100% secure; in case of an incident, we will notify you as required by law.

11) Children

This app is not directed to children under the minimum age allowed by the platform and/or local law. We do not knowingly collect data from children without verifiable parental consent.

12) Changes to this policy

We may update this policy from time to time. The latest version is published at this address. In case of substantial changes, we will take reasonable steps to notify you.

13) Contact

For any privacy-related questions or requests:

• Email: nightrix@projectm13.xyz
  
  

• Address: 123 Example Street, City, Country
  
  

Appendix — Mapping Table (for VRC review)

Data Category

Purpose

Legal Basis

Sharing/Processor

Retention

User ID/Remote ID

Authentication, progression

Contract

None

While account active + 30 days

Logs/Crash data

Diagnostics and stability

Legitimate interest

None

90 days

Support email

Customer support

Consent/Contract

None

2 years

Compliance tip: if your app does not collect additional personal data, explicitly state it here and make sure it is true in code/SDK (disable analytics/crash reporting, etc.). Still keep section 9 with a deletion procedure for minimal data (e.g., anonymous IDs).

2025 Nightrix All Right Reserved