Privacy Policy.

User ID: your Meta user ID

• What we collect: the ID number Meta gives your account for Curiosity Kills, and a one-time sign-in proof from Meta.
• How we get it: from Meta, through the Meta platform on your headset, each time the game starts and about every 20 minutes while you play. You don’t create a separate account with us.
• What we use it for: to sign you in to our online services (rooms, connections to other players and voice chat, and the online copy of your save); to notice if a different Meta account starts using the headset; and to make a stand-in name such as “Monkey 4821” if your username can’t be read. The stand-in name is made from your ID but doesn’t reveal it.
• Who receives it: Epic Games (Epic Online Services), our service provider. Epic checks the sign-in proof with Meta and links your Meta user ID to your player ID (see Your player ID). Epic’s online-services software inside other players’ games can also receive your Meta user ID, your sign-in name (your username, or your stand-in name, as Epic stores it) and when you last signed in, together with your player ID: in the games of the players in your room, and of players whose games find a room you host when they search for rooms. The game’s own code never reads, shows or saves this in their games, and the game never shows your Meta user ID on screen.
• Where it is stored: Epic stores the link between your Meta user ID and your player ID for us. On your headset, the game keeps your Meta user ID only in memory while it runs and never writes it into saves or its own logs. (Meta’s platform software, which runs inside the game, can write your Meta account number into the headset’s system log; see Logs and diagnostics.) The sign-in proof is used once and never stored.
• How long we keep it: in the game’s memory on your headset, until you close the game. At Epic, the link stays so you can sign in again, until we delete it at your request or no longer need it. In other players’ games, Epic’s software holds what it received in memory, at most until those games close.
• How to delete it: ask us. We delete the link at Epic together with the rest of your player record.

User Profile: your Meta username

• What we collect: your Meta username. If Meta gives the game no username, it uses your Meta display name instead. Meta’s profile data can also include a link to your profile picture; the game doesn’t use, store or share it.
• How we get it: from Meta, through the Meta platform on your headset, when the game starts (and again later if it couldn’t get it the first time).
• What we use it for: to show your name to other players, so everyone knows who is who and can mute or report the right person, and as your display name in our online services. On the room host’s headset, the names in the room are also used to make the fake names of the game’s Mimic monsters look like them (for example, whether they use numbers or underscores), and the fake names are compared with the real ones to avoid copying a real player’s name. Nothing is stored for this.
• Who receives it: everyone in your room, who can see it on your name tag, on the SUBJECTS board, in game-mode feeds and scoreboards and in other in-game messages. Players whose games search for rooms also receive it, because your name is listed with any room you host. Epic Games (Epic Online Services), our service provider, receives it as the name on your online sign-in and on rooms you host. If another player uses the in-game camera with name tags turned on, your name tag can appear in a photo saved on their headset, and it can appear in recordings other players make with their headset’s tools (see Voice chat).
• Where it is stored: Epic stores it with your player record and, while a room you host is open, in its room list. The games in your room keep it in memory while you play together. The game never writes your username into saves, and in released versions the game’s own code never writes it into logs.
• How long we keep it: in other players’ games, only in memory, and never longer than until those games close; in the room list, while your room is open; at Epic, until you sign in with a new name or we delete your player record at your request or no longer need it. Photos and recordings stay until the player who made them deletes them.
• How to delete it: your username belongs to your Meta account; change it there, and the game uses the new name the next time it starts. To delete the copy Epic keeps for us, ask us. We can’t reach photos or recordings on other players’ devices.

In-App Purchases: credit packs (add-ons)

• What we collect: the names and local prices of the credit packs in the Meta Horizon Store; when you buy a pack, which pack you bought and Meta’s purchase ID for it; and, each time the game starts, the list of packs you have paid for that haven’t been added to your credits yet. Credit packs are the game’s only in-app purchases; there are no other add-ons or downloadable content. We never receive your card number or other payment details.
• How we get it: from Meta’s store, through the Meta platform on your headset.
• What we use it for: to show the packs and prices in the Supply Booth, open Meta’s checkout, add the credits to your save exactly once (even after a crash, a reinstall or on a new headset), then tell Meta the purchase has been used, and to finish purchases that were interrupted.
• Who receives it: Meta, which runs the checkout and handles payment. Epic Games (Epic Online Services), our service provider, stores the online copy of your save, including your purchase IDs. If a pack is credited to you while you are in a room, the game on the room host’s headset receives the pack and its purchase ID to apply the credits in that room; it keeps them in memory only and doesn’t show them to the host player. Your credit balance is shared with everyone in the room as part of the game.
• Where it is stored: in your save on your headset (the purchase IDs of the packs credited to you, including packs credited on your other headsets) and in the encrypted online copy of your save at Epic. The room host’s game keeps it in memory only.
• How long we keep it: on your headset, until you uninstall the game or clear its data; online, until we delete it at your request or no longer need it; on the host’s headset, until you leave the room. Meta keeps its own purchase records under its policies.
• How to delete it: uninstall the game or clear its data to delete the copy on your headset, and ask us to delete the online copy. Meta manages your purchase history, and handles billing questions and refunds.

Your player ID (Epic Online Services)

• What we collect: the player ID that Epic Online Services gives you the first time you sign in: 32 letters and numbers, shown on the PLAYER ID page of the room computer. Epic also records when you last signed in.
• How we get it: Epic creates it from your Meta user ID when you first sign in, and the game receives it each time you sign in.
• What we use it for: it identifies you in our online services, for rooms, connections between headsets and voice chat, and for the online copy of your save. Your saves on the headset are linked to it, and you can give it to us with a support or deletion request.
• Who receives it: Epic; the games of the other players in your room, which use it to connect to you and to let another player take over as host if the host leaves; and, when you host a room, the games of players searching for rooms. Their games don’t show it on screen. Epic’s software in those games can receive it together with your Meta user ID, your sign-in name and when you last signed in (see User ID). The PLAYER ID page shows it only to you.
• Where it is stored: at Epic, in your player record; on your headset, in a small file that links your saves to it.
• How long we keep it: at Epic, until we delete your player record at your request or no longer need it; on your headset, until you uninstall the game or clear its data; in other players’ games, only in memory, and never longer than until those games close.
• How to delete it: ask us. If you sign in again after your player record has been deleted, Epic gives you a new player ID.

Rooms, gameplay and connections

• What we collect: room details (room and match IDs, private room codes, the game mode and who is in the room). We also collect connection information: your IP address (the internet address of your connection), your connection speed (ping) and the technical results of requests to Epic’s services. We collect your gameplay too: the positions and movements of your headset, hands and fingers, your button presses, your character’s look, your level and credit balance, your progress in the current game and, if you use the in-game camera, whether you have turned on ON AIR.
• How we get it: from your headset, when you create, look for or join a room and while you play.
• What we use it for: to find, create and join rooms of up to twelve players, connect headsets, run the game for everyone, and let another player take over as host if the host leaves. We use your movements only to show your character and run the game; we don’t use them to identify you or to learn about your body or health.
• Who receives it: Epic Games, our service provider: its servers run the room list and help headsets connect, so they see your IP address. The room host (one player’s headset) also receives a snapshot of your profile, such as your name, credits, cosmetics, fur color and challenge progress, to run the game. The other players in your room receive what their games need to show you and play with you, including your position and ping. Connections can be direct between headsets or relayed through Epic; a direct connection lets other players’ devices see your IP address. Players whose games search for rooms receive each room’s details, including the host’s name and player ID.
• Where it is stored: in the memory of the headsets in the room, and in Epic’s room list while the room is open. The games of players who search for rooms also keep each room’s details, including the host’s name and player ID, in memory. Epic’s software also collects technical service data, such as a random session ID, counts of requests, response times and error codes, to run its services.
• How long we keep it: in the memory of the headsets in the room and of the games that searched for rooms, never longer than until those games close; in Epic’s room list, while the room is open. We keep no history of positions, movements or what happens in rooms.
• How to delete it: there is nothing for us to delete, because we keep none of it after the room ends. Epic’s technical service data is covered by Epic’s terms with us.

Voice chat: live audio, not recorded by us

• What we collect: your microphone audio while voice chat is on, and how loud your voice is, as a simple level that moves your character’s mouth; plus your mic on/off choice and the players you mute.
• How we get it: from your headset’s microphone, after you allow the game to use it (your headset asks the first time you play with your mic switched on).
• When: your mic starts switched on, and you can switch it off at any time (see Your choices). Voice chat starts automatically in online rooms while your mic is on and your character is alive: in public rooms, which can include players you don’t know, and in private rooms, which anyone who enters the room’s code can join. Offline play has no voice chat. While your character is dead, living players can’t hear you; in game modes with ghosts, you can talk only with other players who are also out.
• What we use it for: so players in the same room can talk to each other, and so your character’s mouth moves when you speak.
• Who receives it: Epic Games’ voice service, our service provider, which delivers your voice live; and the other players in your room, who hear it. The loudness level goes to the players in your room, so they can see when you are talking. When you mute a player, the game tells Epic’s voice service to stop sending you their voice. Other players can also record what they hear (see “Recordings by other players” below).
• Where it is stored: we don’t store voice audio or loudness levels. The game and the studio don’t record voice chat and don’t identify people by their voices; Epic processes the audio only to deliver it. The one exception: if Meta sends us a recording with a player report, we keep it only with that report (see Player reports). Your mic choice is saved with your settings, and mutes are kept only in your game’s memory.
• How long we keep it: audio and loudness levels are used live and not kept. Mutes end when you close the game; your mic choice stays saved until you change it or delete your save.
• How to delete it: we don’t record voice chat, so we have no recordings of our own to delete. Anything that came with a player report is deleted with the report. Your mic choice is deleted with your save.

Recordings by other players: other players can record, cast or stream the game with their headset’s own tools or other apps, and a recording can include your voice, your name tag and your character. We don’t control those recordings. If a player turns on ON AIR on the in-game camera, a red REC mark shows next to their name for the other players in the room. If you don’t want to be recorded, turn your mic off or leave the room; you can also report a player.

Player reports

• What we collect: when someone uses Meta’s Report button about a player in Curiosity Kills, Meta sends us a copy of the report, with details such as who was reported (as Meta identifies them), the reason chosen, anything the reporter wrote and, if the reporter chooses to share it, their email address. If Meta sends us a recording, such as a video clip, with a report, we keep it only with that report.
• How we get it: from Meta, by email. The reporter fills in Meta’s report form; the game itself sends nothing.
• What we use it for: to review conduct and protect players under Meta’s Code of Conduct for Virtual Experiences, and to reply if the reporter shared an email address.
• Who receives it: the studio: email sent to jaidyn@superstudiogames.com is forwarded by Cloudflare Email Routing to our Yahoo mailbox. Meta keeps its own copy under its policies.
• Where it is stored: in the studio’s email mailbox.
• How long we keep it: while we need it to review the report and keep players safe; then we delete it.
• How to delete it: ask us to delete reports you made or reports about you.

Saved progress

• What we collect: your progress and settings, for example credits, level and experience, the cosmetics and items you own and wear, fur color, trophies and challenge progress, places you have visited, whether you have played the tutorial or received the OG cosmetics, your settings (including mic on or off), and the record of credit packs already credited (Meta purchase IDs). Each headset also adds a random installation ID. The game never writes your Meta user ID or username into a save.
• How we get it: the game creates it on your headset as you play.
• What we use it for: to keep your progress and settings and to credit each purchase exactly once, even after a reinstall or on a new headset.
• Who receives it: Epic Games, our service provider, which stores the online copy (see below); and the room host, which receives a snapshot of it while you play (see Rooms, gameplay and connections).
• Where it is stored: on your headset, encrypted (scrambled so it can’t be read without the game’s keys) and linked to your player ID (or to a device profile while you play offline), and in an encrypted online copy at Epic.
• How long we keep it: on your headset, until you uninstall the game or clear its data. The online copy stays with Epic Online Services until you ask us to delete it, or until we no longer need it (see How long we keep information).
• How to delete it: uninstall the game or clear its data in your headset’s settings. We delete the online copy of your save at Epic Online Services when we handle your deletion request. To ask, see How to request deletion of your data.

Online copy: while you are signed in, the game also keeps an encrypted copy of your save in Epic Online Services’ Player Data Storage, under your player ID. It includes your credits and the record of credit packs already credited (Meta purchase IDs and pack sizes), so a pack is never lost or credited twice, and a random installation ID for each headset you play on, so progress from two headsets with the same account can be combined. The copy is updated while you play and restored when you sign in on a reinstalled, reset or new headset with the same Meta account. Epic stores it for us as our service provider. The game turns off Android backup, so your headset’s cloud backup doesn’t keep another copy.

Emails you send us

• What we collect: your email address, your message and anything you include, such as screenshots, your PLAYER ID or your username.
• How we get it: from you, when you email us.
• What we use it for: to answer support, privacy and deletion requests and security reports.
• Who receives it: the studio: email sent to jaidyn@superstudiogames.com is forwarded by Cloudflare Email Routing to our Yahoo mailbox.
• Where it is stored: in the studio’s email mailbox.
• How long we keep it: until your question or request has been dealt with; then we delete what we no longer need. After a deletion request, we keep only a short note that it was completed, for as long as we may need to show that we handled the request.
• How to delete it: ask us.

Please don’t send passwords, sign-in codes, access tokens, payment details or ID documents.

Website visits

• What we collect: when you visit this website, our host, Cloudflare, receives technical information such as your IP address, browser and request details, and security information.
• How we get it: from your browser, automatically, as with any website.
• What we use it for: to deliver this website and protect it from attacks.
• Who receives it: Cloudflare, which hosts the website for us.
• Where it is stored and for how long: in Cloudflare’s systems. The request records Cloudflare keeps are covered by its terms with us and its privacy policy. We have not added analytics, advertising pixels, sign-ups, forms or tracking cookies; Cloudflare may still use technologies it needs to deliver and protect the site. We don’t track visitors across other websites or apps, and we don’t let advertising or analytics companies do so through this website or the game, so a browser’s “Do Not Track” signal doesn’t change anything here. This website can’t use your microphone or camera.
• How to delete it: we can’t delete Cloudflare’s request records ourselves; see Cloudflare’s privacy policy, linked at the end of this page.

Our Discord server: the website links to our community server on Discord. If you join it, we and the other members can see your Discord username and what you post there, and Discord’s own privacy policy (linked at the end of this page) applies.

Other information the game collects

• Ownership check: when the game signs you in, it asks Meta whether your account owns the game. Only the answer is used; it is kept in memory until you close the game and isn’t sent anywhere else.
• Fair-play checks: to keep play fair, the game checks your headset for signs of tampering, such as a modified copy of the game or cheating tools. The results stay on your headset and are never sent to us. If tampering is found, the game can turn off online play and saving progress. If you think a fair-play check got it wrong, email us.
• Date check: to decide time-limited rewards and events, such as the OG cosmetics for players who first play before 2027, the game reads the current date from a Meta web server. The request carries no account information, but like any web request it shows Meta your IP address and basic technical details (the game’s version and your headset’s Android version). The date is used only on your headset.
• Connection check: when the game starts, and again from time to time while it runs (for example, when your headset’s network connection changes), the game engine checks that you are online by contacting https://example.com/ (or, if that site doesn’t answer, Google’s website at https://google.com/ or Samsung’s at https://www.samsung.com/). The request carries no account information, but like any web request it shows that site your IP address and basic technical details about your headset and its software. The game uses only whether the site answered.
• Photos: if you use the in-game camera, your photos are saved to your headset’s Pictures folder. They can show other players’ characters and, if you turn on name tags in photos, their usernames. The game never uploads them; you can share or delete them yourself. Other players can also record the game with their headset’s tools (see Voice chat).
• Device identifiers: the game creates random IDs for each installation: one is part of your save (see Saved progress), and one is used only to make a stand-in name when you play offline. The game doesn’t read your headset’s hardware IDs, advertising ID or location.
• Logs and diagnostics: in released versions, the game’s own code writes only short technical messages, without your name or IDs, to your headset’s system log. Meta’s platform software, which runs inside the game, adds its own technical messages there, and these can include your Meta account number. That log is kept on your headset, and the game never sends logs to us. The game has no analytics, advertising or crash-reporting tools. Meta’s headset software, including parts that run inside the game, collects its own performance information, such as app load times and memory use, and may collect crash information, under Meta’s policies. When we test development versions of the game, their logs on our own devices can include the usernames and player IDs of players in the same room; we delete them when they are no longer needed, or when you ask.