Privacy Policy

We only collect what RecBase needs to work and to keep the platform safe. That falls into four groups:

• Account data — your display name, avatar, email address, date of birth, password (stored as a hash, never in plain text) and the platforms you play on.
• Content you create — rooms, worlds, items, avatars, screenshots, comments, titles and descriptions you publish, and the games you build or upload.
• Activity data — rooms you visit, time spent, scores and leaderboard results, friends and blocks, messages you send, and voice chat audio while you are in a room.
• Device data — device type, operating system, app version, IP address, general region, crash reports and performance logs. On VR headsets we also process headset and controller position data in real time so your avatar can move; this is used to render the experience and is not sold or used for anything else.

We do not ask for your real name, phone number, or payment details, and we do not collect precise GPS location.

We use your data to:

• Run the service: sign you in, sync your progress across devices, and let you play, build and compete.
• Show your profile, avatar and creations to other players in the rooms and worlds you choose to join.
• Keep RecBase safe: detect cheating, spam, harassment and abuse, and enforce our community rules.
• Provide support: answer your requests, investigate reports you file, and restore lost progress.
• Improve the platform: understand which features are used, fix bugs, and tune performance on each device.
• Send you service messages such as password resets, security alerts and replies to your reports.

We do not sell your personal data, and we do not use your private messages or voice chat for advertising.

Your data stays with RecBase except in these limited situations:

• Service providers who host our infrastructure, store backups, send transactional email and monitor crashes — under contract, and only for the job they do.
• Platform stores (iOS, Android, Meta Quest, PlayStation, PC) when you install or update RecBase through them, since they manage your purchase and account on their side.
• Other players, because RecBase is social: your display name, avatar and anything you publish or say in a room is visible to them.
• Authorities, lawyers or courts if we are legally required to act, or if disclosure is genuinely necessary to prevent harm, fraud or a threat to safety.
• A buyer or successor entity in the event of a merger, acquisition or sale, who must continue to honour this policy.

We use strictly necessary cookies and local storage to keep you signed in, remember your settings and protect against fraud. Optional analytics cookies help us see how RecBase performs; you can decline them in Settings without losing access to the game.

We keep your account for as long as it is active. If you delete your account, we remove your profile, creations and personal data from live systems within 30 days, then from backups on the normal backup-rotation schedule. Records needed for a legal obligation, an open safety investigation or a ban enforcement are kept only for as long as that reason lasts.

Wherever you live, you can:

• View and edit your profile, avatar and settings at any time in Settings.
• Export a copy of the data attached to your account.
• Correct anything that is wrong, or ask us to erase it.
• Object to or restrict certain processing, and withdraw consent where we relied on consent.
• Delete your account, which removes your personal data as described above.

If you live in the EEA, UK, California or another region with enforceable data-protection laws, these rights apply to you by law and you may also complain to your local supervisory authority. To exercise any of them, contact us using the details below; we answer within 30 days and may need to verify that the request is yours.

RecBase is intended for players aged 13 and over. Players under the age of digital consent in their country may only use RecBase with a parent or guardian's permission, and we offer family-safe rooms with moderated chat and no user-generated content for younger players. We do not knowingly collect personal data from a child without that permission; if you tell us we have, we delete it.

Data is encrypted in transit and at rest, access is limited to staff who need it, and we monitor for unusual activity. We also offer two-step verification on your account. No system is perfectly secure, so please use a unique password and tell us straight away if you think your account has been accessed by someone else.

RecBase is played worldwide, so your data may be processed in countries other than where you live. When that happens we rely on recognised safeguards, such as standard contractual clauses, to keep the same level of protection.

If we change this policy in a way that affects how we handle your data, we will update the date above and, for significant changes, tell you in-app or by email before the change takes effect.

Questions, data requests or complaints about this policy: email privacy@recbase.example and we will get back to you. You can also report a privacy concern in-app from the room you are in.