Privacy Policy

Effective date: October 6, 2026 · Last updated: October 6, 2026

This Privacy Policy explains what information Steal a Sigmon (the "Game"), a multiplayer virtual-reality game for Meta Quest, collects, how we use it, who we share it with, how long we keep it, and how you can access or delete it. "We", "us" and "our" mean the Steal a Sigmon development team, which operates the Game and its online services. If you have questions, contact us at privacy@stealasigmonvr.com.

1. Information we collect

We only collect what the Game needs to run its online features. We do not collect your real name, email address (unless you email us), phone number, contacts, photos, precise location, or payment card details.

Information you or your device give us when you sign in

• Account identifiers: your Meta (Oculus) user ID when you sign in with your Meta account, or, if Meta sign-in is unavailable, an identifier generated by your device. We create a numeric player ID linked to it.
• Profile: your Meta display name (shown as your in-game nickname) and, if available, your Meta profile picture link.
• Sign-in verification: a one-time proof from Meta that the sign-in is genuine and, on Quest, a Meta device-integrity (attestation) result confirming the Game is running unmodified on a real device. We use these only to verify the sign-in; we do not keep them.

Information collected automatically

• Device and connection information: a device identifier, the Game version, your device's operating system version, your IP address, and how quickly your device reaches our server regions (latency). To choose the nearest region, the Game also asks the service ip-api.com to estimate your general region (state/region and city) from your IP address; this is not precise location.
• Gameplay information: your player ID, in-game currency balances, the Sigmons and items you own, your base, rebirth level, number of successful steals, cosmetics and themes, friends list and friend requests, the rooms you join, leaderboard rank, and reward codes you redeem.
• Gameplay analytics: events such as signing in or out, buying, selling, catching or stealing a Sigmon and rebirthing, with your player ID, nickname, the room you were in and the time. We use Unity Gaming Services to process these events and to deliver game settings (Remote Config).
• Security and moderation records: sign-in attempts (including rejected ones), bans, kicks, and reports made by or about you.
• Movement in the game: your headset and controller/hand positions are sent in real time to the other players in your room so they can see your avatar. We do not store this movement data, and the Game does not collect eye-tracking, face-tracking, or room/passthrough camera data.

Purchases

In-app purchases are processed by Meta. We never see or store your payment details. Meta tells us the purchase ID, the item (SKU) and the time so we can deliver and keep track of what you bought, and we check the purchase with Meta before granting it.

Voice and text chat

If you allow microphone access, your voice is transmitted live to other players in your room. Text chat messages are sent to the players or channel you message. See section 4.

2. How we use your information

• To create and sign in to your account, keep your progress, inventory, currency and purchases, and deliver items you buy.
• To run multiplayer features: matchmaking and rooms, voice and text chat, friends, leaderboards and events.
• To choose a nearby server region and keep connections stable.
• To keep the Game fair and safe: verifying sign-ins, preventing cheating and fraud, handling reports, and enforcing bans.
• To understand how the Game is played so we can fix problems and improve it.
• To answer you when you contact us, and to meet legal obligations.

We do not sell your personal information, we do not share it for targeted (cross-context behavioral) advertising, and the Game does not show third-party ads.

Where the EU/UK GDPR applies, we rely on: performance of our contract with you (providing the Game and its online features); our legitimate interests (security, anti-cheat, moderation, improving the Game); your consent (microphone access, which you can withdraw at any time); and legal obligations.

3. How we share your information

We share information only with service providers that help us run the Game, under contracts that limit their use of it to providing their services to us:

• Meta Platforms: sign-in, device-integrity checks, entitlement and in-app purchases.
• Exit Games (Photon): multiplayer networking, voice chat and text chat.
• Unity Technologies: gameplay analytics and remote game settings (Unity Gaming Services).
• Hetzner Online: hosting of our game server and database (United States).
• Cloudflare: domain name (DNS) services.
• ip-api.com: estimating your general region from your IP address to pick a server region.
• Discord: our moderation team receives notices (for example rejected sign-ins, bans and player reports, which can include nicknames, player IDs and IP addresses) in a private, staff-only Discord server.

Other players can see your nickname, profile picture, avatar, base, Sigmons, leaderboard rank and online status, and can hear your voice when you use voice chat.

We may also disclose information if required by law, to protect the safety of players or others, to investigate fraud or abuse, or as part of a merger or sale of the Game (in which case this policy will continue to apply to your information).

4. Voice chat, text chat and other players

• Voice chat uses your microphone only after you grant permission on your headset. Your voice is streamed in real time through Photon to players in your room. We do not record or store voice chat. You can mute yourself or turn off microphone permission in your headset settings at any time.
• Text chat messages are relayed through Photon to the recipients and are not stored on our servers.
• You can report other players in the Game. We keep the report (who reported whom, and when) to review it.
• The Game includes an optional in-game camera (LIV) that lets you capture photos or video on your own device. We do not receive those recordings unless you choose to share them with us.

5. How long we keep information

• Account and gameplay data: for as long as your account exists, and deleted within 30 days after you ask us to delete it.
• Sign-in attempt records: automatically deleted after 30 days.
• Server backups: overwritten on a rolling basis within 7 days.
• Purchase records: kept as long as needed for accounting, tax and fraud-prevention obligations, then deleted.
• Ban records: kept while the ban is in effect so it can be enforced.
• Analytics data held by Unity: kept according to Unity's retention settings; we request its deletion together with your account.

6. Deleting your data

You can ask us to delete your account and all personal information associated with it at any time:

1. Email privacy@stealasigmonvr.com with the subject "Delete my data".
2. Include your in-game nickname and, if you know it, your player ID (shown in the Game), so we can find your account. If you sign in with Meta, you can include your Meta username instead.
3. We may ask you to confirm the request from the Game or your Meta account so nobody can delete someone else's account.

We delete your account, progress, inventory, friends, reports you made and records linked to your player ID within 30 days and confirm by email. We also request deletion of your analytics data from Unity. Information we are legally required to keep (such as purchase records for tax purposes) is kept only as long as required and is not used for anything else. Deleting your data permanently removes your progress and purchased in-game items.

You can also stop all further collection at any time by uninstalling the Game.

7. Your rights and choices

Depending on where you live (for example under the EU/UK GDPR or US state laws such as the CCPA/CPRA), you may have the right to:

• access the personal information we hold about you and get a copy of it;
• correct inaccurate information;
• delete your information (see section 6);
• object to or restrict certain processing, and withdraw consent (for example microphone access);
• receive your information in a portable format;
• not be discriminated against for exercising your rights.

To use any of these rights, email privacy@stealasigmonvr.com. We answer within 30 days. You may also complain to your local data-protection authority.

8. Children

Steal a Sigmon is made for a general audience and is only available to people who meet Meta's minimum age requirements for Meta Quest. For preteen accounts, Meta's parent-managed account rules and parental supervision tools apply. We collect only the information needed to run the Game, as described above, and we do not knowingly collect personal information from children beyond that or in violation of applicable law (including COPPA). If you are a parent or guardian and believe your child has given us personal information, contact privacy@stealasigmonvr.com; we will review it and delete it on request.

9. Security

All connections between the Game and our servers for sign-in and account data use HTTPS encryption. Sessions use signed, expiring tokens, our database is not reachable from the internet, and access to player data is limited to our team. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the relevant authorities of a data breach as required by law.

10. Where your information is processed

Our servers are located in the United States. Our service providers may process information in other countries. When information is transferred from the EU, UK or other regions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

11. Changes to this policy

We may update this policy as the Game changes. We will post the new version on this page with a new "Last updated" date, and if the changes are significant we will also tell you in the Game before they take effect.

12. Contact us

Steal a Sigmon team
Email: privacy@stealasigmonvr.com
Website: stealasigmonvr.com