Effective Date: November 17, 2023
Visual Purple Inc, a Wyoming corporation doing business as Fractal Blue Entertainment, a subsidiary of Visual Purple Inc, (“we”, “us”, “our” and their derivatives) provides Scrap Age, (Collectively, the “Game”), websites including https://www.fractalblueentertainment.com and https://www.scrapage.com and their respective subdomains (Collectively, the “Websites”), and other online services (With the game and the websites, the “Services”).
- What does this privacy Notice Cover?
This privacy notice (this “Notice”) sets forth how we collect, use, protect, store, disclose, and otherwise process your personal information (Defined below). This Notice does NOT apply to information you provide to any third party or is collected by any third party (except as otherwise stated below).
By using our services, you are confirming that you understand English well enough to understand this Notice. Should you have questions about this Notice, please contact us by emailing us at support@fractalblueent.com so we clarify and address your questions.
- How do we process Children’s personal information?
In accordance with the policies of Meta® for VR games, the Game is not designed for children, and we do not intentionally or knowingly collect, use, store, disclose, or otherwise process any personal information about children. If you become aware that a Child has provided us with Personal Information, please contact us by email at support@fractalblueent.com so we may remove their personal information. User age is collected by third party gaming platforms Meta® and Epic Games® in accordance with their policies. We do not collect information about the age of our users, however, if we are notified that you are a Child, your account will be banned. A “Child” is a person under the age needed to consent to the processing of Personal Information in their country of residence.
- What categories of Personal Information do we collect?
We may collect different types of information from you depending on how you use our Services, including personal information. “Personal Information” means information that relates to an identified or identifiable natural person. The categories of Personal Information we may collect are listed below. Certain types of Personal Information may fall under more than one category.
We do NOT knowingly or intentionally process any sensitive Personal Information.
We may also collect information that does not generally identify you but may become associated with your account. We may use information that does not identify you for any permissible business or operational purpose under applicable law.
Game
When you play the Game, we may process your:
- Identifiers: usernames (Game username and Meta Username), email address, unique or online ID (such as a third party ID from Oculus or Epic Online Services), Internet Protocol address, and hardware ID and hardware information;
- Commercial information: purchase history of in-game items or DLCs;
- Internet or other similar network activity: gameplay information and user preferences;
- Audio, electronic, visual, thermal, olfactory, or similar information: movement data (tracking your hands and head) and voice data; and
- Other: information from the content that you send to use directly by submitting a support ticket.
Websites
When you visit the Websites, we may process your:
- Identifiers: first and last name, Oculus ID, and email address;
- Internet or other similar network activity: interaction with the Websites;
- Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code §1798.80 €): first and last name; and
- Other: information from the content that you send to us directly by completing the “Contact Us” form on the websites or by submitting a support ticket.
Game Discord Channel
When you visit the Game Discord Channel, we may process your:
- Identifiers: Discord username, Discord user ID, and email address; and
- Other: information from the content that you share publicly on Discord.
- From what sources do we collect Personal Information?
Directly From You
We may collect your personal information when you provide it to us directly, including the examples below.
- When you create an account for the Game, we may collect your username and Internet Protocol Address (IP Address)
- When you play the Game, we may collect your movement data (Tracking your hands and head) and voice data.
- When you contact us through the “Contact Us” form on our Websites, we may collect your first and last name, email address, and records and copies of your correspondence.
- When you submit a support ticket, we may collect your email address, and records and copies of your correspondence.
- When you respond to a survey or questionnaire, we may collect the information provided.
Automatically From You
We may collect your Personal Information automatically as you use our Services. For example, we may collect your Personal Information as you interact with our Websites or as you play the Game. For more information about our and third parties’ use of cookies and other automatic data collection technologies and certain choices we offer you with respect to them, please see Section 5 below.
From Third Parties
We may receive your Personal Information from or through third parties that help us provide or facilitate your access to the Services. For example, we may receive your Personal Information from the below third parties.
- Game publishers such as Meta® and Epic Games®: When you purchase in-Game items or DLCs, we may receive your purchase history. By way of another example, when you submit a support ticket, we may receive your Oculus ID.
- Backend providers such as Amazaon Web Services® (AWS), GameLift®, Epic Online Services®, or Unreal®: When you play the Game, we may receive your Epic Online ID (and associated Oculus ID). When you are banned from the Game, we may receive your hardware ID.
- Social Media platforms such as Discord®: When you join the Game Discord channel, we may receive your Discord username, user ID, and the information that you share publicly on our Discord channel. When you appeal against being banned from the Game Discord channel, we may receive your email address.
We abide by this Notice when we use Personal Information provided to us by third parties. However, we may not control the Personal Information that third parties collect or how they use that Personal Information. You should review the third parties’ privacy policies for more information about how they collect, use, and share the Personal Information they obtain and use.
- How do we and third parties use cookies and other automatic data collection technologies?
Cookies are small pieces of text sent to your web browser by a website you visit. They help that website remember information about your visit, which can both make it easier to visit the site again and make the site more useful to you.
Our cookies and Other Automatics Data Collection Technologies
We may use cookies and other automatic data collection technologies on the Services to collect Personal Information, for example, regarding your interaction with the Websites. By way of another example, when you play the Game, we may automatically collect your Internet Protocol address, gameplay information, and user preferences.
Third Party Cookies and Other Automatic Data Collection Technologies
Cookes and other automatic data collection technologies on the Services may come from third parties. These cookies and other automatic data collection technologies improve your experience by helping us better tailor our Services to you.
- Google Analytics and YouTube: Google Analytics is a web analysis service and YouTube is a video sharing and social media platform of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 934043, United States. The Personal Information collected by Google in connection with your use of our Websites is transmitted to a server of Google in the United States, where it is stored and Analyzed. Google’s collection and use of Personal Information is subject to Google’s privacy policy: www.google.com/policies/privacy/partners/
Choices about Cookies
You may set your browser to refuse all or some browser cookies or to alert you when cookies are being sent (for Google: https://tools.google.com/dlpage/gaoptout). Please note that, if you disable or refuse cookies or other automatic data collection technologies, some aspects of the Services may be inaccessible or not function properly.
- For what purposes do we collect your Personal Information?
We may collect your Personal Information for the below purposes.
- To provide or improve the Services: We may use your Personal Information to process your requests to access the Services and certain of their features and to generally present and improve the Services. For example, we may use your Personal Information to create your account the Game, to grant you access to the Game, to fulfill in-Game purchases, and to improve the Game or Websites.
- To administer the Services: We may use your personal information for nay lawful business or operational purposes in connection with administering the Services. For example, we may use your Personal Information to respond to support tickets or business or media inquiries sent by you.
- To market the Services: We may use your Personal Information to market the Services to you. For example, with your prior consent, we may share news and updates about the Services through the game Discord channel.
- In furtherance of legal, health, and safety objectives: We may access, use, and share with others your Personal Information for purposes of health, safety, and other matters in the public interest. We may also provide access to your Personal Information to cooperate with official investigations or legal proceedings (e.g., in response to subpoenas, search warrants, court orders, or other legal processes). We may also provide access to your Personal Information to protect our rights and property and those of our agents, users, and others, including to enfore our agreements, policies, and our Terms of Service. For example, we may use your Personal Information to respond to inappropriate or reported conduct in Game, to enforce user bans for the Game and the Game Discord channel, and for moderation and enforcement of Discord channel policies.
- In connection with a sale or other transfer of our business: In the even all or some of our assets are sold, assigned, or transferred to or acquired by another company due to a sale, merger, divestiture, restructuring, reorganization, dissolution, financing, bankruptcy, or otherwise, your Personal Information may be among the transferred assets.
- As we may describe to you when collecting your personal information and simultaneously describe the purpose for that collection.
Lawful Basis
We only collect, use, or store your Personal Information for a lawful basic such as:
- You voluntarily provide it to us with your specific informed, and unambiguous consent (for example, through the game Discord channel);
- It is necessary to provide you with a Service that you have requested (for example, providing you access to the Game);
- We have legitimate business interest that is not outweighed by your privacy rights (for example, to ban users); or
- It is necessary to protect your vital interests or the vital interests of others (for example, we may collect or share Personal Information where necessary to resolve an urgent medical situation or protect the health or safety of one of our users or someone else).
- In what situations do we disclose your Personal Information?
We may disclose your Personal Information to a third party, such as a service provider or contractor for a business or operational purpose, or with your consent.
When we disclose Personal information for a business or operational purpose, we enter into a contract with the service provider or contractor that describes the purpose and requires the service provider or contractor to both keep that Personal Information confidential and not use it for any purpose except for performing the contract. These Service providers and contractors include our:
- Backend platform service providers such as for error and crash reporting;
- Email service providers;
- Game analytics providers; and
- Customer support representatives and providers.
We may also disclose your Personal Information:
- To our subsidiaries and affiliates:
- To our lawyers, consultants, accountants, business advisors, and similar third parties who owe us duties of confidentiality;
- To a buyer or other successor in the event of a sale, merger, divestiture, restructuring, reorganization, dissolution, or other transfer of some or all of our assets, whether as a going concern or as part of a bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us pertaining to the users of the Services is among the assets transferred;
- To comply with any court order, law, or legal process, such as responding to a government or regulatory request;
- To enforce any contract we may have in effect with you;
- If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of us, our users, or others; and
- if you have consented to such a disclosure.
We do not sell, rent, or share your Personal Information for cross contextual behavioral or targeted advertising, automated decision-making, or profiling purposes.
- How is my Personal Information protected?
Our retention, Purpose Limitation, and Security Policies
We protect your personal information through a combination of collection, security, and retention policies.
- Limited retention: We retain each category of Personal Information only for as long as necessary to fulfill the purposes for which the Personal Information was provided to us or, if longer, to comply with any legal obligations, to resolve disputes, and to enforce contracts. For example, we may retain Personal Information collected about you to prevent repeated violations or suspected violations of our Terms of Service if your account has been banned or your access to the Services has been disabled for any reason. To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the purposes for which we process the Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements. For example, subject to the foregoing considerations, it is our policy to delete your Personal Information if we stop operating the Game or feature through which the Personal Information was acquired.
- Purpose limitation: We will use your Personal Information only for the Services you choose to access and for the purposes notified to you, unless we otherwise obtain your consent. We limit the collection of Personal Information to what is adequate, relevant, and reasonably necessary for those purposes.
- Security measures: We use appropriate security measures to ensure a level of security appropriate to the volume and nature of Personal Information processed and risk involved, considering the size, scope, and type of our business, and have implemented contractual, technical, administrative, and physical security measures designed to protect Personal Information from unauthorized access, disclose, use, and modification. As part of our privacy compliance processes, we review these security procedures on an ongoing basis to consider new technology and methods as necessary. However, please understand that our implementation of security measures as described in this Notice does not guarantee the security of your Personal Information. In the event of a security breach, we will notify the proper regulatory authorities and any affected users of the breach within 72 hours after we become away of the breach.
Your Practices and Activities
Your practices and activities are likewise very important for the protection of your Personal Information. You can take certain steps to help protect your Personal Information, such as being mindful of what you share publicly in the Game or on the Game Discord channel, including the below.
- Do not use your real name when selecting a username.
- Do not share your real name or anything private about yourself or anyone else with other users of the Game or Game Discord channel.
- Do not pick a password that is easy to guess, and do not share your password.
Please remember that we have no control over what third parties do with the content of your communications and no responsibility or obligation regarding third parties.
- How do we treat Personal Information transferred to the United States
Place of Business
We may store or process your Personal Information outside of the country where we collect the information or the country in which you reside. Our primary place of business is in the United States. You should understand that we may transfer some or all of your Personal Information to the United States to carry out certain operational and processing needs as described in this Notice.
Transfer Mechanisms
When transferring Personal Information out of foreign territories, we implement technical, organizational, and physical safeguards to protect your Personal Information. We use European Commission approved standard contractual clauses and implement related measures where required by applicable law. Please contact us if you have questions related to the relevant transfer mechanism for your Personal Information
- What rights do you have to your Personal Information?
Right to Access, Correct, Delete, or Restrict Processing
Subject to any limitations and exceptions under applicable law, you have the right to request access to your Personal Information and exercise the below rights.
- You have the right to correct or update certain types of Personal information. In many cases, you can review or update your account information by access your account online.
- You have the right to request deletion of your Personal Information. If you choose to have your Personal Information removed from the Services, we will carry our your request within 30 days of account verification, subject to extension, and we will only retain minimal Personal Information to document your request and the actions we took to carry out your request.
- Your have the right to restrict certain processing of your Personal information and the right to object to some types of processing of your personal Information.
- You have the right to withdraw your consent at any time.
- You have the right to lodge a complaint regarding our collection, storage, or processing of your Personal Information with a data protection supervisory authority in the country where you live or work.
We will comply with your requests in accordance with, and subject to applicable lay. For example, we are not required to delete your Personal Information if we have an overriding legitimate ground for retaining that information, such as to prevent fraud. Please note that we are legally prohibited from carrying out requested actions in some instances, including (1) when we are unable to confirm your identity or (2) where doing so would adversely affect the rights or freedoms of other individuals. Further, we are not require to carry our a request action in some instances, including where the request is considered excessive.
If you need help please email us as:
Support@fractalblueent.com
Please include in the subject line “Privacy Request” if you would like to exercise any of the rights described above or if you have questions regarding your rights.
- Additional notice for California, Colorado, Connecticut, Utah, and Virginia Residents
California Online Privacy Protection Act
The following applies to California residents:
- We do not track users of our Services over time and across third party websites or online services and therefore do not respond to Do Not Track signals. We are not aware of any third party that tracks users of our Services over time and across third party websites or online Services.
California Shine the Light Law
The following applies to California residents:
- California residents may request information from us concerning any disclosures of Personal Information we may have made in the prior calendar year to third parties for direct marketing purposes. If you are a California resident and you with the request information about our compliance with this law or our privacy practices, please contact us by email at: support@fractalblueent.com
State Privacy Laws
The following applies to California, Colorado, Connecticut, Utah and Virginia residents:
- Right to Know and Access: You have the right to request that we disclose certain information to you about our collection and use of your Personal Information. Once we receive and confirm your verifiable consumer request, we will disclose to you the following, to the extent retained by us:
- The categories of Personal Information we collected about you;
- The categories of sources for the Personal Information we collected about you;
- Our business or commercial purpose for collecting, selling, or sharing that Personal Information;
- The categories of third parties with whom we disclose that Personal information;
- The specific pieces of Personal information we collected about you (also known as a data portability request); and
- If we sold or shared your Personal Information, two separate lists disclosing (1) sales, identifying the Personal Information categories that each category of recipient purchased, and (2) disclosures for a business or operational purpose, identifying the Personal Information categories that each category of recipient obtained.
- Right to Deletion: You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers and contractors to delete) your Personal Information from our records, unless an exception under applicable law applies. We may deny your deletion request if retaining the information is necessary for us or our service providers or contractors to:
- Complete the transaction for which we collected the Personal Information, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide the Services that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
- Help to ensure the security and integrity of the Services to the extent the use of your Personal information is reasonably necessary and proportionate to those purposes;
- Debug the Services to identify and repair errors that impair existing intended functionality;
- Exercise free speech, ensure the right of another user to exercise their free speech rights, or exercise another right provided for by law;
- Comply with the California Electronic Communications Privacy Act;
- Engage in public or peer-reviewed scientific, historical or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided consent;
- Enable solely internal uses that are reasonably aligned with user expectations based on your relationship with us and compatible with the context in which you provided the Personal Information; or
- Comply with a legal obligation
- Right to Correction: You have the right to request that we correct inaccurate Personal information. Once we receive and confirm your verifiable consumer request, we will use commercially reasonable efforts to correct the inaccurate Personal Information, taking into account the nature of the Personal Information and the purposes of the processing of the Personal Information.
No Discrimination
We will not discriminate against you for exercising any of your privacy rights under applicable law. Unless permitted by applicable law, we will not:
- Deny you the Services;
- Charge you different prices or rates for the Services including granting discounts or other benefits or imposing penalties;
- Provide you a different level or quality of Services; or
- Suggest that you may receive a different price or rate for the Services or a different level or quality of Services.
Verifiable Consumer Requests
To exercise your rights described above, please email us at: support@fractalblueent.com
Please include in the subject line “State Privacy Rights”. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request to your Personal Information. The verifiable consumer request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative; and
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm that the use of Personal Information relates to you. We will only use Personal Information provided in a verifiable consumer request to verify your identity or authority to make the request.
We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time, we will inform you of the reason and extension period in writing. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your opinion.
Any disclosure we provide will only cover the 12-month period preceding the receipt of verifiable consumer request, unless you request a longer period of time for Personal Information we collected about you after January 1st, 2023. The response we provide will also explain the reasons we cannot comply with a request, if applicable.
To appeal a decision regarding your verifiable consumer request, please submit your appeal using one of the two methods above. Your appear should include an explanation of reason you disagree with our decision. Within 60 days of receipt of an appeal, we will inform you in writing of any action taken or not taken in response to the appear, including a written explanation of the reasons for the decisions.
For data portability requests, we will select a format to provide your Personal Information that is readily useable, easy-to-understand, and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
- How will we notify you of changes to this notice?
We reserve the right to change this Notice from time to time consistent with applicable law. If we make changes to this Notice we will notify you by revising the date at the top of this Notice and providing you with an additional notice (such as adding a statement in the Game or the homepages of our Websites).
- How can you contact us?
If you have questions, please email us at support@fractalblueent.com
If you are a law enforcement agency, please email us at support@fractalblueent.com
Please include in the subject line “Law Enforcement Request.”
