Effective date: 4 September 2025
Owner / Data Controller: Eric Thullen ("ErThu")
Contact: contact@erthu.de

This policy describes how we collect, use, disclose, and protect information when you use our website erthu.de and our games Ancient Dungeon and Ancient Dungeon Beta on Meta Quest / Rift.

---

1) What we collect and process
We collect and/or process the following categories of data when you use the game:

A. Meta Platform account data
When you sign in or run the game on Meta Quest / Rift, we access limited account data provided by the Meta Platform SDK:

• App‑scoped User ID (USER_ID)
• User profile basics (USER_PROFILE): Meta alias/username, optional display name, and a profile image/avatar URL

We use standard SDK calls to retrieve this data at runtime to provide platform features and personalization (see §2). We do not collect your email address from the platform.

B. Multiplayer & networking data (Photon Fusion 2)
To provide online multiplayer, we use Photon Fusion 2 (Photon Engine Cloud). In the course of connecting you to game sessions/rooms, Photon processes:

• Network identifiers: app/game ID, room/session ID, your in‑game/player ID and/or app‑scoped user ID we use for matching
• Connectivity data: your IP address, region, routing/relay information, timestamps, and technical diagnostics
• In‑game display name: your chosen Meta alias/username (or in‑game name) is shown to other players in lobbies/sessions

Photon acts as our processor for real‑time networking. We do not receive your IP address directly, but Photon processes it to route traffic.

C. Voice chat data (Photon Voice)
If you enable voice chat, audio is captured and transmitted in real time to other participants in your room via Photon Voice. We do not record or store voice audio on our servers. Photon processes audio packets for transmission; stream identifiers (e.g., player/voice IDs) are used to route audio to the right recipients.

D. Gameplay analytics (de‑identified)
We gather anonymous gameplay event data to improve balance and stability, such as:

• Which pickups were collected
• Which floor the player died on
• How many runs were completed
• Crash/diagnostic data on technical issues

These analytics events are not linked to your real‑world identity. We avoid storing Meta profile fields with analytics.

E. Website logs (erthu.de)
Our web servers may log: IP address, user‑agent, pages visited, timestamps, and error details for security and performance.

---

2) How we use the data

• Provide platform features: Use your app‑scoped User ID and profile basics to show your alias/display name and avatar in menus, associate saves or stats with your account, and enable platform features you use.
• Achievements: Read and update your achievements using the platform’s Achievements feature. Your app‑scoped ID identifies your profile for achievements; your alias/display name may be used for UI display.
• Multiplayer: Create/join rooms, synchronize gameplay state, and display your chosen name to other players.
• Voice chat: Transmit your voice to other players in your session when enabled.
• Support & safety: Diagnose bugs, enforce anti‑abuse measures (e.g., rate limiting, ban evasion checks), secure our services.
• Analytics & quality: Improve balance, content, and performance using de‑identified gameplay metrics and crash diagnostics.

We do not sell your data or use it for targeted advertising.

---

3) What others can see about you
During multiplayer sessions, other players can see your chosen display name (Meta alias or in‑game name) and hear your voice if you enable voice chat. Depending on platform settings, they may also see your profile image/avatar. You can mute yourself or others and choose a different display name in your platform settings.

---

4) Sharing with service providers
We share data with the following categories of processors, only as necessary to run the game:

• Photon Engine (Fusion 2 & Photon Voice): real‑time networking, relay/routing, and voice transmission
• Hosting/IT & analytics vendors: storage, crash reporting, and operational tooling

These providers are contractually restricted to use data solely to provide services to us and must implement security measures. We do not grant them rights to use your data for their own marketing.

---

5) Data retention

• Meta account/profile data: Accessed at runtime; we do not persist USER_PROFILE on our servers. If your app‑scoped ID appears in server logs or support records, we keep it only as long as needed for the stated purposes and then delete or anonymize it.
• Photon networking/voice: Photon may retain limited technical logs (e.g., IP addresses, timestamps) for operations, security, and abuse prevention for a limited period per their policies. We do not control Photon’s independent retention.
• Analytics & diagnostics: Kept only as long as needed for game improvement and stability.
• Website logs: Kept for security/performance for a limited period and then deleted or anonymized.

---

6) International transfers
Photon and other processors may operate servers globally. When you connect to multiplayer or voice chat, your data may be processed outside your country. We take steps to ensure appropriate safeguards are in place when required.

---

7) Your rights & choices (including deletion)

• Access/Correction/Deletion: You can request access to, correction of, or deletion of data we control. Email contact@erthu.de with the subject “Data Request – Ancient Dungeon” or “Data Deletion – Ancient Dungeon.” Include your Meta alias/username and the app name. We will respond and fulfill verified requests within 30 days where applicable.
• Platform controls: Manage what your Meta account shares with apps in your Meta account settings. You can also mute voice chat, choose a different display name, or leave multiplayer.
• Opt‑out of analytics: If we add an in‑game toggle in future builds, turning it off will stop sending non‑essential analytics from that point forward.

---

8) Legal bases (EEA/UK only)
Where GDPR/UK GDPR applies, we process your data based on: (i) performance of a contract (to provide the game/features you request, including achievements, multiplayer, and voice); (ii) legitimate interests (security, fraud prevention, analytics, product improvement); and (iii) legal obligations (e.g., responding to lawful requests).

---

9) Children
Our products are not directed to children under 13. We do not knowingly collect personal information from children under 13.

---

10) Security
We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the data. No method of transmission or storage is 100% secure.

---

11) Changes to this policy
We may update this policy from time to time to reflect changes in features, vendors, or legal requirements. We will post updates here with a new effective date.

---

12) Contact
Eric Thullen (ErThu)
Email: contact@erthu.de
Website: https://erthu.de