PRIVACY POLICY

To maintain core gameplay functionality, optimize the gaming experience, and support User-Generated Content (UGC) community sharing features, we collect only the following necessary account, technical, gameplay, and user content data, some of which may be de-identified, pseudonymized, or not directly identifying:

Account and Platform Identifiers: Account codes (such as encrypted user identifiers) provided by your distribution platform (e.g., Steam, Meta Quest) in accordance with their respective policies, and your email address if you voluntarily contact us for technical support.

Platform Profile and Ownership Status: When you sign in with a Meta account, we receive your Meta display name (alias) and profile picture to display as your in-game and community profile. Before granting access to the desktop route editor, we query the Meta platform to confirm whether your account owns ZipRush; we retain only the result of that check for the current sign-in and do not store your purchase history.

Gameplay and Spatial Telemetry Data: Completion times, global leaderboard rankings, in-game achievements, and spatial tracking telemetry generated by your VR hardware (such as headset and controller movement vectors). This spatial data is processed solely to animate your virtual avatar and calculate parkour physics in real-time; it is never utilized to identify or authenticate your physical identity.

User-Generated Content (UGC) Metadata: Custom route designs, layouts, thumbnails, and associated data files voluntarily created, edited, and uploaded by you through the built-in route editor. When you publish User-Generated Content, your player name, creator name, leaderboard information, or other publicly associated identifiers may be visible to other users and publicly displayed within in-game communities, leaderboards, workshops, or related sharing features.

Technical Diagnostics and Playtest Data: Device models, VR headset types, operating system versions, crash diagnostic reports, performance metrics, network latency logs, and bug reports voluntarily provided during playtest sessions. We may collect such information through cloud database services, analytics tools, crash reporting systems, content delivery networks (CDNs), and platform SDK services, including Firebase, Steamworks, Meta Platform Services, Google Analytics, or other functionally equivalent third-party services.

We process collected data based on contractual necessity, legitimate business interests, compliance with legal obligations, and other lawful bases permitted under applicable law, for the following purposes:

To Operate Community Sharing: To host, display, and maintain the custom routes you publish, allowing other players globally to download, play, and rate your creations within the game platform or workshop (e.g., Steam Workshop).

To Verify Ownership: To confirm that your platform account owns the Software before enabling the desktop route editor and User-Generated Content publishing, in order to prevent misuse of community sharing features.

To Maintain Stability: To utilize diagnostic data for software patching, bug fixing, and hardware compatibility optimization to maintain the technical security and stability of the Software.

To Improve Gameplay Locomotion: To analyze aggregated analytics to refine the user interface/experience (UI/UX) and conduct technical research regarding VR locomotion and motion-sickness mitigation.

We retain collected data only for as long as necessary to fulfill the purposes outlined in this Policy or as required by applicable law. Specifically:

• Account and gameplay statistics are retained until account deletion and permanently purged within 90 days thereafter.
• UGC content (custom routes) is removed from our servers within 30 days of receiving a valid deletion request.
• Technical diagnostics and crash logs are retained for a maximum of 12 months from the date of collection.

Upon expiration of the applicable retention period, data will be securely deleted or anonymized.

We do not sell your personal data, nor do we rent your data to third parties for their independent marketing purposes. We only share information with third parties under the following strictly defined circumstances:

Professional Research and Testing Collaboration: For Quality Assurance (QA) and User Experience (UX) evaluation, we may share gameplay analytics, survey feedback, and test records with our designated marketing, quality assurance, user research, or testing partners. Such partners are bound by strict confidentiality agreements and may only process data within the specific scope of software optimization and VR locomotion analysis.

Legal Requirements: We may disclose necessary information if required to do so by applicable laws, subpoenas, or formal, lawful requests from law enforcement, courts, or government authorities.

The Software is not designed for, directed at, or intended for use by children under the age of 13. We do not knowingly collect personal data from children under 13. If we discover or become aware that a user under the age of 13 has provided us with personal data or is using the Software, we will immediately terminate that user's account access and delete all associated personal data in accordance with applicable law, including the U.S. Children's Online Privacy Protection Act (COPPA).

If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us immediately at support_ziprush@playziprush.com. We will take prompt steps to investigate and remove such data.

We implement industry-standard technical and organizational security measures to protect your data against unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to, Transport Layer Security (TLS) encryption for data in transit, server-side access controls, and periodic security reviews.

Please note that no method of transmission over the Internet or electronic storage is completely secure. In the event of a data security incident, we will notify affected users within the timeframes required by applicable law.

The Software does not use browser cookies. However, the Software may utilize analytics, diagnostic, or performance monitoring tools to maintain service stability, detect errors, and improve user experience. If you access our official website or community leaderboard pages, those pages may employ basic web analytics tools (such as Google Analytics) solely to measure aggregate visitor counts and page interaction patterns. We do not use such tools to actively collect your real name, contact information, or payment information.

Third-Party Service Disclaimer: The operation of the Software relies on third-party distribution platforms (including Meta Quest, Steam, and their backend infrastructure). These platforms collect and process data in accordance with their own independent privacy policies; the Company does not assume joint liability or responsibility for such third-party data processing.

Cross-Border Data Transfers: To maintain global server connectivity and download speeds, you acknowledge and agree that your data may be transferred to, stored, and processed on servers located outside your home country (including Taiwan or the United States).

Policy Amendments: We may update this Privacy Policy from time to time to reflect modifications in software functionality, platform policies, or international legal requirements. Updated versions will be made available through our official channels without individual prior notice.

Language: In the event of any inconsistency between the Chinese and any other language version of this Privacy Policy, the Chinese version shall prevail.