Policy Privacy - OpenGate XR

Privacy Policy – Metagate App on Meta Quest

This Privacy Policy outlines how Metagate collects, uses, and protects user data specific to the Metagate experience on the Meta Quest platform. It supplements the general Metagate Privacy Policy and applies exclusively to the app and features used on the headset.

This app is connected to the Metagate WebApp (https://app.themetagate.it), and is subject to its Privacy Policy HERE in addition to this document.

1. Data Collection

The Metagate app collects only the data necessary to provide an immersive, personalized, and secure mixed reality experience.

Collected and processed data include:

  • User ID: Unique identifier linked to the user's account (via Supabase).
  • User Profile: Oculus username and profile photo, accessed only for personalization.
  • Microphone Access: Used for voice interactions and spatial audio effects.
  • Hand Tracking: Enables interaction with 2D and 3D content; data processed locally.
  • Spatial Tracking Data: Used to position and scale objects in the real environment; not retained by Metagate.
  • In-App Purchase Data: Purchase confirmations for subscriptions or unlockable content.

Data saved on Google DB to detect anomalies and improve the app:

  • Number of Images spawned,
  • Number of Videos spawned,
  • Number of 3D models spawned,
  • Time spent in the app per session

2. Data Saved in Unity Cloud Save (UCS)

To enable persistent gameplay and restore user sessions across devices, the app saves the following data to UCS:

  • Audio and Sound Settings
  • SupabaseUserID – Required for secure login and asset linking
  • Box Position & Rotation – Placement of the 2D/3D object creation area
  • Avatar Position & Rotation – Avatar tracking (available with a valid subscription)
  • CurrentItemIndex – ID of the currently active item
  • QuadriMaterialIndex – Material/texture selected for digital frames
  • FilterIndex – Index of the active visual filter in the scene
  • List of Items Created:
    • ItemIndex
    • ItemURL
    • ItemName
    • ItemFileType
    • IsItemActive
    • IsItem3D
    • ItemScaleX
    • ItemPosition
    • ItemRotation

No biometric or sensitive personal data is collected or saved.

3. Purpose

All data is used solely to:

  • Maintain user preferences and scene continuity
  • Enable immersive interactions with content
  • Support subscription-based features
  • Improve user experience through local tracking

Dati salvati su Google Sheets:

- Number of Images spawned,
- Number of Videos spawned,
- Number of 3D models spawned,
- Time spent in the app per session

Data is never used for profiling or advertising purposes.

4. Consent

User consent is collected at first login through a mandatory checkbox. Users confirm that they have read, understood, and agreed to this Privacy Policy.

5. Access and Modification

Users can:

  • Access saved data (via in-app request or support email)
  • Update preferences at any time
  • Request changes to items, settings, or interactions

Contact the DPO at dpo@themetagate.it for support.

6. Data Deletion

Users may request complete data deletion by:

  • Sending a request to dpo@themetagate.it
  • Upon verification, all user data will be permanently deleted within 30 days

7. Data Security

Metagate applies strong technical and organizational safeguards, including:

  • Limited database access (internal only)

  • Encrypted data transfer and storage
  • Offline backups
  • Thread and object-level access control
  • All processing occurs within the secure Meta Quest environment (no browser access)

8. Communications

Changes to this Privacy Policy will be shared:

  • On the Metagate website
  • Through in-app notifications at login

9. Data Retention

Data is retained for a maximum of 2 years from the user’s last access. This period ensures proper session management and complies with data minimization principles.

10. Minors

The Metagate app on Meta Quest is intended for users aged 18 and above.
We do not knowingly collect or store information from minors. Parents may request deletion by contacting dpo@themetagate.it.

11. Cookies and Tracking

This app does not use cookies or persistent trackers.
Exception: during internal alpha testing, minimal usage logs may be temporarily collected for debugging.

12. Data Protection Officer (DPO)

📧 Marco Pizzini
Email: dpo@themetagate.it
Responsible for GDPR/LPD/CCPA compliance and user requests.

13. Legal Basis for Processing

In compliance with the GDPR and CCPA, Metagate processes data based on:

  • User Consent (checkbox at onboarding)
  • Contractual Necessity (to deliver in-app services)
  • Legal Obligations
  • Legitimate Interest, balanced with user rights

14. Sale of Personal Information

Metagate does not sell personal information as defined under the CCPA.

15. User Rights

Under the GDPR:

  • Access, rectify, or delete personal data
  • Request portability
  • Withdraw consent

Under the CCPA:

  • Know what personal data is collected
  • Request data deletion or correction
  • Transfer to another provider

All requests should be sent to: dpo@themetagate.it

16. Policy Updates

This policy may be updated due to legal or operational changes. The latest version will always be available:

  • Inside the app (Meta Quest)
  • On the Metagate website

Effective Date: 23/05/2025