Policy Privacy - NFT_Caveau

Privacy Policy for NFT_Caveau on Meta Quest

Introduction This Privacy Policy outlines how Metagate collects, uses, and protects user data specific to the NFT_Caveau app on the Meta Quest platform. It is intended to complement Metagate’s general Privacy Policy and provides further details relevant to NFT_Caveau users.

1. Data Collection NFT_Caveau accesses minimal personal data necessary to provide a personalized and immersive experience for managing and displaying NFTs. Specifically, the following data are accessed:

  • UserID: A unique alphanumeric identifier associated with the user’s Meta Quest profile.

  • User Profile: Access to the Oculus username and profile photo to personalize the experience.

  • Microphone: Used for voice interactions and commands within the app.

  • Hand Tracking and Spatial Data: Used for interacting with NFTs and navigating the mixed reality environment.

Important Note: These data types are processed locally during usage and are not saved or stored by Metagate.

2. Data Saved in Unity Cloud Save (UCS) To enhance the user experience and allow for the retrieval of NFT configurations upon reaccessing NFT_Caveau, the following data are saved:

  • Audio and Sound Settings: Personalized music and sound preferences.

  • NFT Positions: The spatial placement of saved NFTs within the virtual environment.

  • NFT Titles: Titles associated with saved NFTs.

  • NFT Identifiers: Unique identifiers for saved NFTs.

  • NFT Descriptions: Descriptions provided for saved NFTs.

  • NFT Media: Images, videos, or GLB files linked to saved NFTs, depending on availability.

  • Number of Saved NFTs: The count of NFTs managed within the app.

  • Frame Materials: The materials used for the frames of displayed NFTs.

  • Scene Filter Index: The index of the active filter applied within the virtual scene.

3. Consent User consent is obtained via a clear, mandatory checkbox upon first login to NFT_Caveau. By checking this box, users confirm that they have read, understood, and agreed to this Privacy Policy.

4. Access and Modification Users have the right to access and modify their saved data. Tools are provided within the app settings to:

  • View and edit saved NFT configurations.

  • Update preferences for audio, visuals, and scene filters.

For additional assistance, users can contact Metagate’s Data Protection Officer (DPO) at dpo@themetagate.it.

5. Data Deletion Users may request the deletion of their saved data by:

  • Sending an email request to dpo@themetagate.it. Upon verification, the user’s saved data will be permanently removed within 30 days.

6. Data Security Metagate implements robust security measures, including:

  • Limited access to databases.

  • Offline backups.

  • Data encryption during storage and transfer.

All data collection processes occur within the secure Meta Quest environment. No browser-based access is utilized, reducing potential attack vectors.

7. Communications Policy updates and changes will be communicated to users:

  • Via the official Metagate website.

  • Through in-app notifications upon new updates.

8. Data Retention Saved user data (preferences and NFT configurations) is retained for a maximum of 2 years from the last access to the app. This retention period ensures operational continuity while adhering to the principles of data minimization.

9. Minors NFT_Caveau is not intended for users under the age of 18. Metagate does not knowingly collect personal information from minors. If a parent or guardian believes their child has provided personal information, they can request its deletion by contacting dpo@themetagate.it.

10. Cookies and Tracking NFT_Caveau does not collect cookies or tracking data, except during closed Alpha Testing phases, where minimal usage data may be gathered for debugging purposes.

11. Data Protection Officer (DPO) The appointed DPO for Metagate is Marco Pizzini, responsible for ensuring compliance with data protection regulations. For any privacy concerns or inquiries, please contact: Email: dpo@themetagate.it

12. Legal Basis for Data Processing In compliance with the GDPR, NFT_Caveau processes personal information based on:

  • User Consent: As provided during the onboarding process.

  • Contractual Necessity: To fulfill the service provided by NFT_Caveau.

  • Legal Obligations: To comply with applicable laws and regulations.

  • Legitimate Interests: When necessary to improve service quality and security, without overriding user rights.

13. Selling Personal Information Metagate does not sell personal information, as defined under the California Consumer Privacy Act (CCPA).

14. User Rights GDPR: If you are a resident of the EEA, you have the right to:

  • Access your personal data.

  • Request correction, updates, or deletion of your data.

  • Port your data to another service.

CCPA: If you are a California resident, you have the right to:

  • Access personal information held by Metagate.

  • Request deletion or correction of your data.

  • Transfer data to another provider.

15. Policy Updates This Privacy Policy may be updated to reflect changes in legal requirements or service improvements. The latest update will always be available in the NFT_Caveau app and on the Metagate website.

Effective Date: 16/12/2024.

Contact Information: For questions or concerns, please contact the DPO at dpo@themetagate.it.

By using NFT_Caveau, users acknowledge that they have read and understood this Privacy Policy and agree to its terms.