Privacy Policy

Published by Quantum Arcadia LLP | Vadodara, Gujarat, India

Effective Date: July 2, 2026 | Last Updated: July 2, 2026

1. Introduction and Scope

This Privacy Policy describes how Quantum Arcadia LLP ("we", "our", or "us") collects, uses, discloses, and protects personal data of users ("you" or "your") of the Arcade Mania virtual reality game application ("the Application"), available on the Meta Quest platform (including Meta Quest 2, Meta Quest 3, and Meta Quest Pro devices).

This policy applies to all data processing activities related to the Application, including gameplay, account management, in-app purchases, and any interactions with the Meta Platform SDK and third-party services integrated within the Application.

By downloading, installing, or using Arcade Mania, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, you must not use the Application.

2. Developer and Data Controller Information

The data controller responsible for your personal data is:

Quantum Arcadia LLP

Vadodara, Gujarat, India

Email: info@quantumarcadia.com

Contact for Privacy Inquiries: info@quantumarcadia.com

3. Data We Collect

3.1 Account Information (via Meta Platform SDK)

When you log into Arcade Mania through your Meta/Oculus account, the Meta Platform SDK provides us with:

Meta User ID (anonymised platform identifier)
Meta display name or username
Platform entitlement tokens (to verify legitimate purchase and prevent piracy)

We do not receive your email address, real name, payment card details, or other sensitive Meta account data directly. These remain with Meta under their own privacy policy.

3.2 PlayFab Account Data

Arcade Mania uses Microsoft PlayFab as its backend game services provider. The following data is created and stored in PlayFab:

A PlayFab Player ID (auto-generated, not linked to real-world identity)
Your Meta display name (used as your in-game username)
Gameplay progress, save states, unlockables, and achievements
In-game leaderboard scores
Session tokens for authentication

3.3 Gameplay Analytics

We collect anonymised gameplay data to improve the Application, including:

Game session duration and frequency
Mini-game scores, levels completed, and difficulty progression
Feature usage patterns (which mini-games are played most)
Crash reports and performance diagnostics

This data is collected in aggregated or pseudonymised form and is not used to identify you individually.

3.4 In-App Purchase History

All in-app purchases within Arcade Mania are processed exclusively through Meta's payment infrastructure. We receive:

Confirmation of purchase completion (receipt token)
Item purchased (e.g., game credits, cosmetic items)

We never receive, store, or process your payment card number, billing address, or any financial account details. All payment data is governed by Meta's Payment Terms and Privacy Policy.

3.5 Technical and Device Data

We may automatically collect limited technical data including:

Device model (e.g., Meta Quest 2) and operating system version
Application version number
Error logs and crash diagnostics

This data is used solely for debugging, stability improvements, and customer support.

3.6 Customer Support Data

If you contact us for support, we may collect your name, email address, and a description of your issue. This data is used solely to resolve your support request.

4. How We Use Your Data

We use your personal data only for the following legitimate purposes:

Account Management: To create and maintain your in-game profile, authenticate your login, and sync your game progress across sessions via PlayFab.
Gameplay Services: To enable core game functionality including leaderboards, achievements, save data, and mini-game progression.
Purchase Verification: To confirm that in-app purchases are valid and to unlock purchased content within the Application.
Analytics and Improvement: To understand how users interact with the Application and to improve gameplay balance, performance, and new feature development.
Security and Fraud Prevention: To detect and prevent cheating, account abuse, and unauthorised access.
Customer Support: To respond to and resolve support requests.
Legal Compliance: To comply with applicable Indian law, Meta Platform policies, and any other applicable regulations.

We do not use your data for targeted advertising, profiling for commercial purposes, or any purpose not listed above. We do not use gameplay data to make automated decisions that produce legal or similarly significant effects on you.

5. Legal Basis for Processing

We process your personal data on the following legal bases:

Contract Performance: Processing necessary to provide the game services you have contracted for (account management, save data, purchase verification).
Legitimate Interests: Analytics and crash reporting to maintain Application quality, where such processing does not override your fundamental rights.
Legal Obligation: Processing required to comply with applicable laws and regulatory requirements.
Consent: Where we rely on consent (such as optional analytics), you may withdraw consent at any time by contacting us.

For users in the European Economic Area (EEA) or United Kingdom, these bases correspond to Article 6 of the GDPR. For users in India, processing is conducted in accordance with the Digital Personal Data Protection Act, 2023 (DPDPA).

6. Data Sharing and Third-Party Disclosure

We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

6.1 Meta Platforms, Inc.

As Arcade Mania is distributed exclusively through the Meta Quest platform, Meta Platforms, Inc. has access to data related to your use of their platform in accordance with Meta's own Privacy Policy. This includes entitlement checks, purchase processing, and platform-level analytics. We do not control Meta's data practices; please review Meta's Privacy Policy at https://www.meta.com/legal/privacy-policy/.

6.2 Microsoft PlayFab

We use Microsoft PlayFab for backend game services including player accounts, cloud saves, and leaderboards. PlayFab processes data as a data processor on our behalf, under Microsoft's data protection terms. For more information, see Microsoft's Privacy Statement at https://privacy.microsoft.com.

6.3 Legal Requirements

We may disclose your personal data to government authorities, law enforcement agencies, or courts when we are legally required to do so, including to meet national security or law enforcement requirements, or to respond to lawful subpoenas, court orders, or similar legal processes. We will notify you of such requests where legally permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred to the acquiring entity. We will notify you via email or a prominent notice in the Application prior to such transfer and advise you of any changes to this Privacy Policy.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this Policy:

Active Account Data (PlayFab profile, game progress): Retained for the duration of your active use of the Application, plus 90 days following account deletion to allow for error recovery.
Purchase Records: Retained for 7 years following the date of purchase, as required by Indian accounting and tax regulations.
Analytics Data: Retained in aggregated, non-identifiable form indefinitely. Pseudonymous session-level data is deleted after 12 months.
Customer Support Records: Retained for 2 years following the resolution of your support request.
Crash and Error Logs: Automatically purged after 90 days.

Upon account deletion, we will permanently delete or anonymise all personal data within 30 days, except where retention is required by law.

8. Your Data Rights

Depending on your country of residence, you may have the following rights with respect to your personal data:

8.1 Rights under GDPR (EEA / UK Users)

Right of Access: Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete personal data.
Right to Erasure: Request deletion of your personal data (subject to legal retention obligations).
Right to Restriction: Request that we restrict processing of your data in certain circumstances.
Right to Data Portability: Receive your personal data in a structured, machine-readable format.
Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

8.2 Rights under India DPDPA 2023 (Indian Users)

Right to Information: Know what personal data is being processed and for what purpose.
Right to Correction and Erasure: Request correction of inaccurate data or erasure of data no longer needed for the specified purpose.
Right to Grievance Redressal: File a grievance with us regarding personal data processing.
Right to Nominate: Nominate another individual to exercise your rights in the event of your death or incapacity.

8.3 How to Exercise Your Rights

To exercise any of the above rights, please contact us at info@quantumarcadia.com with the subject line "Data Privacy Request". We will respond within 30 days. We may request proof of identity before processing your request.

EEA/UK users also have the right to lodge a complaint with their local data protection supervisory authority if they believe we have processed their data unlawfully.

9. Children's Privacy

Arcade Mania is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. The Application requires a Meta/Oculus account for access; Meta's account registration policies prohibit account creation by children under 13.

If you are a parent or guardian and believe that your child under the age of 13 has provided personal data to us without your consent, please contact us immediately at info@quantumarcadia.com. We will promptly investigate and delete any such data upon verification.

For users aged 13 to 17, we recommend parental oversight. Parents or guardians may contact us at any time to request access to, correction of, or deletion of their minor child's data.

10. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, including:

All data transmitted between the Application, PlayFab, and our servers is encrypted using TLS 1.2 or higher.
Account credentials and session tokens are stored using industry-standard hashing and are never stored in plain text.
Access to backend systems is restricted to authorised personnel only, on a need-to-know basis.
We conduct periodic reviews of our security practices and update them as necessary.

While we take reasonable steps to protect your data, no security system is impenetrable. We cannot guarantee absolute security of data transmitted over the internet. In the event of a data breach that is likely to result in high risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

11. International Data Transfers

Your personal data may be transferred to and processed in countries outside India, including the United States (where Microsoft PlayFab and Meta Platforms, Inc. operate their infrastructure). We ensure that such transfers are protected by appropriate safeguards, including:

Transfers to Microsoft PlayFab are governed by Microsoft's Data Processing Addendum and Standard Contractual Clauses where applicable.
Transfers to Meta Platforms, Inc. are governed by Meta's Data Transfer Mechanisms as set out in their Privacy Policy.

By using the Application, you consent to such international transfers of your personal data where required for the provision of the Application's services.

12. Meta Platform SDK — Specific Disclosures

Arcade Mania integrates the Meta Platform SDK, which enables the following specific platform features. For each feature, we disclose the data accessed and its purpose:

Platform Entitlement Check: We verify that you have legitimately purchased or obtained access to the Application using your Meta User ID. This check occurs at launch and is required by Meta's developer policies.
User Identity (Display Name): We retrieve your Meta display name to populate your in-game username. You may contact us to change your displayed username.
Achievement and Leaderboard Integration: If enabled, the Meta Platform SDK may submit achievement unlocks and leaderboard scores to the Meta platform on your behalf.

We do not access your Meta Friends list, social graph, VR usage data, physical environment or guardian data, eye-tracking data, hand-tracking data, or biometric data through the Meta Platform SDK. We only request the minimum platform permissions necessary to operate the Application.

13. Cookies and Tracking Technologies

The Application is a native VR application and does not use browser cookies. Any web-based portal or support pages associated with Arcade Mania may use essential cookies for session management. We do not use tracking pixels, fingerprinting, or advertising trackers on any Arcade Mania web properties.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or the features of the Application. When we make material changes, we will:

Update the "Last Updated" date at the top of this document.
Display a prominent in-app notification the next time you launch Arcade Mania.
Where required by law, seek your renewed consent before applying material changes to the processing of your data.

We encourage you to review this Privacy Policy periodically. Your continued use of the Application after the effective date of any updated Policy constitutes your acceptance of the changes.

15. Governing Law and Dispute Resolution

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000 (and its amendments), the Digital Personal Data Protection Act, 2023 (DPDPA), and all applicable rules and regulations thereunder.

Any disputes arising out of or relating to this Privacy Policy, including any question regarding its existence, validity, or termination, shall be subject to the exclusive jurisdiction of the courts of Vadodara, Gujarat, India.

EEA and UK users retain the right to bring complaints before their local data protection authority notwithstanding the above governing law clause.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Quantum Arcadia LLP

Vadodara, Gujarat, India

Privacy Contact: info@quantumarcadia.com

Subject line for privacy requests: "Data Privacy Request"

We aim to respond to all privacy-related enquiries within 30 calendar days. If you are an EEA or UK resident and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or the relevant EU Data Protection Authority in your country of residence).

— End of Privacy Policy —

Quantum Arcadia LLP | info@quantumarcadia.com