DragonRunners Privacy Policy
Last updated: October 8, 2026
App: DragonRunners (virtual reality game for Meta Quest, published on the Meta Horizon Store)
Data controller: AMZ STUDIO (United States)
Privacy contact and data deletion requests: dragonrunners.soporte@gmail.com
1. Summary
This policy applies only to the DragonRunners app. In short:
- We collect only the data needed to run the game. This includes your Meta user ID, your Meta display name (user profile), your in-app purchase records, a one-time identity code, your IP address, your head and controller position, your voice (live only, if you allow the microphone), your Scales wallet, optional error reports and, if you report someone or are reported, moderation reports. Section 2 lists every item.
- Your voice is never recorded or stored. It is relayed live to nearby players only.
- No advertising, no third-party analytics, no tracking, and we never sell your data.
- Any user, anywhere, can ask us to delete their data at any time, for free and without giving a reason (section 7).
2. Data we collect
2.1 Data we receive from Meta (Meta Horizon Platform)
| Data | What it is |
|---|---|
| Meta user ID | The numeric identifier of your Meta account for this app. |
| User profile: display name | The display name of your Meta account (if it has none, your Meta username). We do not access your profile picture, friends, email, messages or presence. |
| One-time identity code (nonce) | A single-use code from your headset that lets our server confirm with Meta that your account is real. |
| In-app purchase records | The purchase identifier and product code (SKU) of the Scales packs (and of any cosmetic bought directly) you buy through Meta. Payment details stay with Meta: we never receive your card or bank data. |
| Reports made through Meta's reporting service | If a player uses the "Report" option in the Meta menu, Meta emails us the reason chosen and the data Meta includes about the reported player (such as their display name). We keep it like our own reports (section 4). |
2.2 Data we receive from your Meta Quest headset
| Data | What it is |
|---|---|
| Voice (microphone) | Only if you allow the microphone permission. |
| Head and controller position | Used to move your dragon. |
| Game settings | Volume, comfort options, language, chosen dragon, colors, best times, whether you accepted the rules, the display names of players you muted or blocked, a local copy of your Scales balance and purchases, and the identifiers of purchases already credited. They stay on your headset. |
2.3 Data created while you play
| Data | What it is |
|---|---|
| IP address and connection data (your IP address, the port and a connection number our server assigns to you, and the times you connect and disconnect) | Unavoidable when connecting to our game server. |
| Installation ID | A random identifier the game creates the first time it runs (it is not your name, account or headset serial). It is sent to our server when you connect and is not stored on our server. |
| Live game data | Your dragon's look, position and match state. |
| Scales wallet | Your Scales balance, cosmetics bought with Scales, the identifiers of the Scales packs you bought (so they are never credited twice), date of your last free gift and a log of wallet movements. It is linked to a one-way hash (digest) of your Meta user ID, never to the ID itself. The hash cannot be turned back into your ID, but we still treat it as your personal data: it is deleted when you ask (section 7). |
| Moderation reports and bans | If someone reports you or you report someone: date, room, display names and connection numbers, the reported player's IP address and an unrecognizable digest of their Meta account, and the reason chosen from a fixed list (harassment, offensive language, cheating, other). |
| Error reports (optional, off by default) | The game's latest error messages (cleaned of file paths, emails, IP addresses and names), the game and engine version, your headset model, performance level and refresh rate, the date, and a keyed digest of your IP address (kept only so we can find and delete your reports if you ask). Only sent if you turn them on in Settings. |
3. How we use each piece of data
| Data | How we use it |
|---|---|
| Meta user ID | (1) Our server sends it with the one-time identity code to Meta to confirm your account is real. (2) Our server sends it to Meta to read which in-app purchases (Scales packs and any cosmetic bought directly) you have paid for and not yet received, so each purchase is credited exactly once. (3) A digest of it (never the ID itself) is the key of your Scales wallet and lets moderation recognize a banned account. |
| Display name (user profile) | Shown to the other players in your room so you can recognize each other. It passes through a name filter first. |
| One-time identity code | Sent once to Meta to verify your account; then discarded. |
| In-app purchase records | Crediting the Scales you bought and preventing the same purchase from being credited twice. |
| Voice | Talking to nearby players: it is compressed in real time and relayed by the server only to players within 40 meters. Never recorded, stored or included in reports. |
| Head and controller position, live game data | Showing your dragon to other players and letting the server validate tags and races. |
| IP address and connection data | Keeping you connected, limiting abuse (for example, too many reports or gifts) and enforcing bans. |
| Scales wallet | Giving you the free Scales gift (at most once every 7 hours), charging what you buy with Scales, remembering what you own and giving support (refunds, errors). |
| Moderation reports and bans | Reviewing behavior that breaks the community rules and keeping banned players out. |
| Installation ID | Identifying your connection to the server during the session. Not stored on our server. |
| Error reports | Finding and fixing bugs. |
| Game settings | Remembering your preferences. They stay only on your headset. |
We do not use any of this data for advertising, profiling, marketing or analytics, and we do not sell it.
4. How long we keep data
| Data | How long |
|---|---|
| Voice | Not stored at all |
| Head and controller position, live game data, display name | Only while you are in the room (your display name is also kept inside a moderation report if one is made, for the 90 days stated below) |
| IP address and connection data | In server memory only while you are connected. The IP address of a reported or banned player is kept inside that report or ban (90 days / until the ban expires) and deleted with it |
| One-time identity code | Discarded right after the check |
| Meta user ID | Not stored as is; only its unrecognizable digest, as part of the wallet, reports or bans |
| Installation ID | Not stored on our server; it stays on your headset until you uninstall the game |
| In-app purchase identifiers | Inside your Scales wallet, for as long as the wallet exists |
| Moderation reports | 90 days, then deleted automatically |
| Bans | Until they expire (30 days at most), then deleted automatically |
| Error reports | 30 days, then deleted automatically |
| Scales wallet | While you keep playing. Wallets with no activity for 24 months are deleted automatically, and at any time if you ask (section 7) |
| Wallet movement log | Kept in at most 5 rotating files of 1 MB each (in practice a few months of movements); older lines are overwritten automatically. Deleting a wallet also deletes its lines |
| Game settings and local copy of your balance | On your headset until you uninstall the game or clear its data |
The server checks and deletes expired data at startup and every 6 hours. Meta keeps your payment records under its own privacy policy.
5. Who we share data with
- Other players in your room see your display name, your dragon's look and position, and hear your voice if they are nearby and have not muted you.
- Meta Platforms: our server sends your Meta user ID and the one-time identity code to Meta (graph.oculus.com) to verify your account and your purchases, as described in section 3. If you use the "Report" option in the Meta menu, Meta's reporting service sends us the report by email; we use it only to review that behavior and keep it like other reports (90 days).
- DigitalOcean (our server hosting provider, in the United States) stores and processes the server data only to host the game, on our behalf.
- Authorities, only if a valid law or court order requires it.
We do not sell, rent or share your data with advertisers, analytics companies or data brokers.
6. Where data is processed
Our game server is hosted in the United States. If you play from another country, your connection and game data are transferred to and processed in the United States.
7. Requesting data deletion (all users)
Every user, wherever they live and whatever their age, can ask us to delete their data at any time. It is free, you do not need to give a reason and we do not need to approve it.
- Send an email to dragonrunners.soporte@gmail.com with the subject "Delete my data".
- Tell us your Meta username or the display name you use in the game, so we can find the reports and bans that mention you. Error reports contain no name: we locate them through the connection recorded in any report about you or, if there is none, through the IP address you played from, if you choose to give it to us; in any case they are deleted automatically after 30 days at most. To delete your Scales wallet as well, add the 10-character support code shown on the Wardrobe board in the game when you are online: the wallet is stored only under an unrecognizable digest, so that code is the only way we can find it. If you no longer have access to the game, tell us and we will help you find it.
- We delete your data and confirm it by email within 30 days (usually much sooner).
What we delete: your Scales wallet (including its backups and movement log), the reports and bans in which you appear as the reported player, and error reports linked to you. If you made a report about someone else, we remove your name and connection number from it and keep the rest of the report, because it describes another player's conduct and no longer contains any data about you. Deleting your wallet also deletes the Scales and cosmetics in it. We keep no other data after a deletion request, and there is no legal reason that would stop us from fulfilling one.
If you delete your Meta account, we no longer receive anything about you; the data we still hold expires automatically (section 4) or is deleted on request as described here.
The same instructions are on their own page: Data deletion instructions.
You can also delete the data stored on your headset yourself by uninstalling the game, and manage your Meta account data from your Meta account settings.
8. Your other rights
Every user, wherever they live, can also ask us at any time, free of charge, to:
- Access the data we keep about them, or receive a copy in a common format (JSON).
- Correct inaccurate data.
- Object to or restrict some processing.
- Withdraw consent: turn off error reports in Settings and revoke the microphone permission in the Quest headset settings at any time.
Write to dragonrunners.soporte@gmail.com and we will answer within 30 days. You may also complain to your local data protection authority.
9. Children
DragonRunners is intended for people aged 13 or older. We do not knowingly collect data from children under 13. If you believe a child under 13 has given us data, write to dragonrunners.soporte@gmail.com and we will delete it. This does not limit section 7: every user of any age can request deletion.
10. Security
The game server validates everything players send (for example, impossible positions and too many reports). Only the people in charge of moderation can see reports and bans. Account IDs are stored only as one-way hashes. If a security breach affects your data, we will notify you and the competent authority without undue delay. To report a security vulnerability in the game or the server, write to dragonrunners.soporte@gmail.com with the subject "Security".
11. Headset permissions
The game asks for the microphone (only for voice chat between players) and internet access (to play online). You can deny the microphone and the game keeps working without voice. We do not ask for the camera, location, contacts or storage.
12. Data we do not collect
We do not collect your location, contacts, photos, recordings of your room, biometric data, eye or face tracking, or health data.
13. Changes to this policy
If we make a significant change, we will update the date at the top and tell players in the game or on the store listing before it takes effect.
14. Contact
AMZ STUDIO
dragonrunners.soporte@gmail.com