Baboon!
Privacy Policy

Effective Date: October 31, 2025

Last Updated: October 21, 2026

§ 01 · Introduction and Relationship Definitions

This Privacy Policy (hereinafter designated as the "Policy") governs the collection, storage, processing, disclosure, transfer, maintenance, retention, and disposal of personally identifiable information and technical telemetry by Bananabyte Games (hereinafter designated as the "Developer," "we," "us," or "our").

This Policy applies comprehensively to the Virtual Reality software application titled Baboon!, encompassing its compiled binaries, software assets, client-server communication layers, multiplayer matchmaking systems, backend cloud databases, and official customer support channels (collectively referred to as the "Game").

By accessing, downloading, installing, configuring, launching, or otherwise utilizing the Game, you (hereinafter designated as the "User," "player," or "your") acknowledge that you have been provided with this Policy and informed of the data processing practices described herein.

Where applicable law requires your consent for the collection, use, or disclosure of personal information, such consent shall be obtained in accordance with applicable privacy legislation. Continued utilization of the Game does not constitute consent to processing activities for which separate or express consent is legally required.

If you disagree with the processing activities necessary to provide the Game, you may discontinue its use and request deletion of applicable personal information as described in Section 11.

§ 02 · Scope and Legal Basis for Data Processing

We adhere to the principle of data minimization, ensuring that the collection and processing of information are limited to purposes reasonably necessary for establishing multiplayer connections, authenticating user sessions, preserving player progression, enforcing community safety protocols, protecting intellectual property, and complying with applicable legal obligations.

Our collection, use, and disclosure of personal information are governed by applicable privacy legislation, including British Columbia's Personal Information Protection Act (PIPA), where applicable.

The purposes and applicable legal authorizations governing our processing activities include:

§ 02.01 The execution and fulfillment of operational obligations established under our Terms of Service, including providing multiplayer services and maintaining player accounts.

§ 02.02 Our legitimate commercial and operational interests in maintaining the security, integrity, availability, and stability of our Game, to the extent permitted under applicable privacy legislation.

§ 02.03 Compliance with applicable statutory obligations, regulatory mandates, valid legal processes, and technical requirements imposed by third-party digital distribution platforms.

§ 02.04 The investigation, prevention, and remediation of suspected intellectual property infringement, unauthorized software modification, circumvention of Technological Protection Measures (TPMs), and other violations of our Terms of Service.

§ 02.05 The establishment, exercise, preservation, and defense of legal rights, including copyright enforcement, formal legal correspondence, cease-and-desist notices, and dispute resolution proceedings.

§ 02.06 The administration of binding arbitration proceedings where provided under our Terms of Service and enforceable under applicable law.

Personal information shall only be collected, used, and disclosed for reasonably appropriate purposes with the consent or other legal authorization required by applicable law.

§ 03 · Categories of Information We Process

The information processed during your interaction with and utilization of the Game is classified into three principal operational categories.

A. Information Provided Directly by the User

Support Communications: When you initiate direct communications with us through our designated support channel (privacy@baboon.quest) for technical troubleshooting, privacy inquiries, bug reporting, or feature feedback, we collect your electronic mail address, designated display name, and message contents, including any attached logs, diagnostic files, or screenshots.

User-Selected Identity Data: Any customized profile names, clan tags, or textual strings directly submitted through interactive text fields provided within the Game for player identification or multiplayer display.

B. Information Collected Automatically via Runtime Execution

Hardware and Device Metrics: To optimize graphical rendering performance and sustain appropriate frame-rate benchmarks, the Game may access technical information concerning your Virtual Reality headset model, operating system version, processor and graphics hardware, battery status, and active display refresh rate.

Technical Logs and Core Telemetry: When application exceptions, software crashes, or performance failures occur, diagnostic systems may generate runtime logs containing memory allocation details, stack traces, error messages, and device execution information.

Network and Routing Data: To establish, maintain, and secure multiplayer connections through Photon Engine (Exit Games), our networking infrastructure and authorized third-party service providers may automatically collect and process your Internet Protocol (IP) address, connection timestamps, network routing information, and associated technical identifiers.

IP addresses may be processed for the following purposes:

1. Establishing and maintaining multiplayer connections through Photon Engine.

2. Facilitating multiplayer matchmaking, network synchronization, and real-time voice communication.

3. Assigning players to appropriate regional server infrastructure and optimizing network performance.

4. Detecting malicious network activity, unauthorized connections, abuse, and suspected violations of our Terms of Service.

5. Investigating suspected copyright infringement, software piracy, unauthorized distribution, reverse engineering, or circumvention of Technological Protection Measures.

6. Preparing, submitting, receiving, or responding to copyright infringement notices, including requests under Canada's statutory Notice-and-Notice regime where applicable.

7. Complying with valid court orders, subpoenas, regulatory requirements, or other applicable legal obligations.

8. Preparing, issuing, or supporting cease-and-desist notices and other lawful intellectual property enforcement correspondence.

9. Establishing, exercising, preserving, or defending legal claims, including initiating or participating in binding arbitration proceedings as provided under our Terms of Service, where legally enforceable.

We may retain or preserve IP addresses and associated technical records where reasonably necessary and legally permitted for the purposes described above.

The processing of an IP address by Photon Engine or another third-party provider does not necessarily mean that the Developer independently receives, stores, or maintains a copy of that address. Our access to such information depends on the applicable technical integration, service configuration, and provider capabilities.

IP addresses and network identifiers may constitute personal information under applicable privacy legislation and shall be handled accordingly.

C. Information Inherited from Third-Party Integrations and SDKs

The Game utilizes third-party software development kits (SDKs), cloud services, and infrastructure providers to facilitate core gameplay functionality.

These third-party entities may independently process information pursuant to their respective privacy policies and contractual obligations.

Meta Store Ecosystem: Meta Platforms may provide a platform-linked user identifier, public Meta or Oculus profile name, language configuration, and applicable platform account or age-related information made available through authorized interfaces to authenticate users and verify platform access.

Unity Engine: The foundational runtime engine and any enabled diagnostic services may process software analytics, hardware installation identifiers, crash information, and performance telemetry necessary to operate or improve application functionality.

PlayFab (Microsoft): Operates as our cloud-based player profile and data persistence infrastructure. PlayFab may process platform-linked identifiers, player inventory, progression metrics, account records, and disciplinary enforcement information. Network identifiers, including IP addresses, may also be processed in connection with authentication, security, and backend operations.

Photon Engine (Exit Games): Powers real-time multiplayer connectivity, network synchronization, matchmaking, and Voice over IP (VoIP) communication. Photon may process IP addresses, session identifiers, connection metadata, and real-time voice transmission packets necessary to enable multiplayer interaction.

Moderation transcripts described herein, where applicable, are handled independently from Photon's real-time VoIP transmission streams.

Information processed independently by these providers remains subject to their respective privacy policies, retention practices, and applicable legal obligations.

§ 04 · The Explicit Prohibition of Data Selling and Renting

The Developer does not sell, rent, lease, trade, or otherwise commercialize personal information, electronic mail addresses, usernames, IP addresses, or device identifiers to advertising networks, data brokers, or commercial data harvesting organizations.

We do not disclose personal information for third-party behavioral advertising or unrelated commercial profiling.

Information may be shared with authorized service providers, legal representatives, competent authorities, or dispute resolution administrators where necessary to operate the Game, enforce our legal rights, or comply with applicable law, as described in Section 06.

Such disclosures do not constitute the sale or rental of personal information.

§ 05 · Purposes of Processing Data

Your information may be processed for the following defined operational and legally authorized purposes:

§ 05.01 To initialize, launch, update, patch, and maintain the operational functionality of the Game.

§ 05.02 To display usernames and other authorized player identifiers to participating users during multiplayer sessions.

§ 05.03 To facilitate real-time voice communication, network synchronization, spatial positioning, matchmaking, and multiplayer connectivity through Photon Engine.

§ 05.04 To analyze crash reports, diagnostic logs, and performance telemetry for software maintenance, security updates, and technical optimization.

§ 05.05 To investigate player reports, review suspected misconduct, enforce community standards, and administer appropriate disciplinary measures.

§ 05.06 To verify user identity when responding to formal requests for personal information access, correction, or deletion.

§ 05.07 To process IP addresses and network connection information for multiplayer operations, regional server allocation, network routing, connection stability, and security enforcement.

§ 05.08 To investigate suspected copyright infringement, unauthorized redistribution, software piracy, reverse engineering, circumvention of Technological Protection Measures, and other potential violations of our intellectual property rights or Terms of Service.

§ 05.09 To prepare, issue, receive, or respond to copyright infringement notices, including notices administered under Canada's statutory Notice-and-Notice regime, where applicable.

§ 05.10 To establish, exercise, preserve, or defend lawful rights and interests, including preparing and issuing cease-and-desist notices, pursuing lawful remedies, responding to regulatory inquiries, and complying with legal obligations.

§ 05.11 To identify relevant accounts, preserve applicable connection records, and participate in formal dispute resolution, including binding arbitration conducted pursuant to the applicable provisions of our Terms of Service, where legally enforceable.

§ 05.12 To detect and mitigate malicious network activity, denial-of-service attacks, unauthorized service access, fraudulent authentication attempts, and other threats affecting the security or integrity of the Game.

Processing shall remain limited to information reasonably necessary for the identified purpose and authorized under applicable law.

§ 06 · Third-Party Data Disclosure and Transfer Recognition

Personal information may be disclosed to authorized external entities under the following circumstances.

Operational Necessity: Information is transmitted to applicable cloud infrastructure and service providers, including Unity, PlayFab, Photon Engine, and Meta, where necessary to maintain the functionality, security, authentication, and multiplayer operations of the Game.

Statutory Legal Compliance: We may disclose available personal information, technical identifiers, IP addresses, and user records where required or permitted by applicable legislation, valid court orders, lawful subpoenas, regulatory processes, or other legally binding obligations.

Safety and Liability Defense: We may disclose information where reasonably necessary and legally permitted to investigate or mitigate software piracy, significant security incidents, malicious Distributed Denial of Service (DDoS) attacks, or threats to player safety.

Copyright Enforcement and Notice-and-Notice Requests: Where suspected copyright infringement occurs, we may use relevant IP addresses, connection timestamps, and associated technical identifiers to prepare, submit, receive, or respond to notices under Canada's statutory Notice-and-Notice regime.

The Notice-and-Notice regime does not automatically authorize the disclosure of an internet subscriber's identity to a copyright claimant. Subscriber-identifying information may be obtained or disclosed only through appropriate legal processes or other lawful authorization.

Cease-and-Desist Correspondence: Where reasonably necessary to investigate or address suspected violations of intellectual property rights or our Terms of Service, we may process available account identifiers, connection records, and IP addresses to prepare or support formal cease-and-desist correspondence.

Such information shall not be used to obtain or disclose an individual's private identifying information through unauthorized means.

Binding Arbitration and Legal Proceedings: Where a dispute becomes subject to binding arbitration under our Terms of Service, and the arbitration agreement is legally enforceable, we may preserve, process, or disclose relevant personal information to authorized legal representatives, arbitration administrators, arbitrators, or other legally authorized recipients.

This may include relevant IP addresses, account identifiers, connection timestamps, and technical records where reasonably necessary to establish, exercise, or defend legal claims.

Disclosure Limitations: All disclosures must be limited to information reasonably necessary for the identified lawful purpose and remain subject to applicable privacy legislation, confidentiality obligations, and procedural safeguards.

We do not publicly release personal IP addresses or other identifying information for the purposes of harassment, retaliation, or public identification.

§ 07 · International Data Transfers and Regional Recognition

Because the infrastructure of our third-party service providers operates across distributed data center networks, personal information, multiplayer connection metadata, diagnostic logs, and player profile records may be processed or transferred outside your province or country of residence.

Depending on the applicable service provider, information may be stored, transmitted, cached, or processed in jurisdictions including Canada, the United States, and member states of the European Union.

Information processed outside Canada may be subject to the laws of the jurisdiction in which it is held, including lawful access requests issued by competent courts, law enforcement agencies, or regulatory authorities.

Where required by applicable law, we implement reasonable contractual, organizational, or technical measures intended to protect personal information transferred internationally.

Third-party service providers remain responsible for complying with the privacy and security obligations applicable to their independent processing activities.

§ 08 · Comprehensive Data Retention and Purging Mechanisms

We retain player progression records, username information, inventory data, and disciplinary enforcement records for the period reasonably necessary to maintain active accounts, provide the Game, administer security measures, and satisfy applicable legal obligations.

Where a player account remains inactive for an extended period or the Game is permanently discontinued, applicable records may be deleted or irreversibly anonymized when no longer required for a legitimate and lawful purpose.

Moderation Records: Any retained moderation transcripts or associated records shall be maintained only for the period reasonably necessary to investigate incidents, complete enforcement proceedings, resolve disputes, or comply with applicable obligations.

IP Addresses and Network Connection Records: IP addresses, connection timestamps, network logs, and associated technical identifiers may be retained for the period reasonably necessary to facilitate multiplayer operations, maintain network security, investigate suspected violations, and comply with applicable legal requirements.

Copyright and Intellectual Property Enforcement: Where IP addresses or associated technical records become relevant to suspected copyright infringement, unauthorized software distribution, circumvention of Technological Protection Measures, or another intellectual property dispute, the relevant information may be preserved where reasonably necessary and legally permitted.

Notice-and-Notice Proceedings: Where applicable, records may be retained or preserved to comply with requirements arising under Canada's statutory Notice-and-Notice regime. Statutory record-preservation obligations applicable to internet intermediaries shall not automatically be treated as obligations imposed upon the Developer unless those requirements legally apply to the Developer.

Cease-and-Desist and Legal Proceedings: Records associated with an existing or reasonably anticipated legal dispute, cease-and-desist correspondence, regulatory investigation, or judicial proceeding may be retained for the period reasonably necessary to resolve the matter and fulfill applicable legal obligations.

Binding Arbitration: Where a dispute becomes subject to legally enforceable binding arbitration under our Terms of Service, relevant personal information and technical records may be preserved throughout the proceeding and for any additional period reasonably required by applicable law.

Deletion and Anonymization: Upon expiration of applicable retention periods, personal information held under our direct control shall be securely deleted or irreversibly anonymized unless continued retention is required or otherwise permitted by applicable law.

Retention practices maintained independently by Meta, Microsoft PlayFab, Photon Engine, Unity, or other third-party providers remain subject to their respective policies and legal requirements.

§ 09 · Mandatory Compliance with Children's Privacy Laws

Baboon! is developed, marketed, and distributed for users aged thirteen (13) years or older.

The Game incorporates multiplayer networking, spatial tracking, and real-time voice communication systems and is not intended for use by children under thirteen (13).

We do not knowingly solicit personal information from children under thirteen (13) years of age.

Users who do not meet the minimum permitted age must not access or utilize the Game.

If a parent or legal guardian believes that a child under thirteen (13) has accessed the Game or provided personal information, they should immediately contact privacy@baboon.quest with the subject line "Children's Privacy Alert."

Upon receiving and reasonably verifying such a report, we will take appropriate action to restrict unauthorized access and delete applicable personal information, subject to statutory obligations and lawful retention requirements.

Where additional parental consent, age-related safeguards, or other protections are required for users aged thirteen (13) through seventeen (17), we will comply with applicable legislation and platform requirements.

Age-related information shall not be collected beyond what is reasonably necessary and legally authorized for access control, safety, or compliance purposes.

§ 10 · Data Security Limitations and End User Acknowledgment

We implement commercially reasonable administrative, organizational, and technical safeguards intended to protect personal information against unauthorized access, disclosure, modification, loss, interception, and misuse.

These safeguards may include security features offered by our cloud providers, authenticated backend communications, restricted administrative access, account verification mechanisms, and applicable network security controls.

Access to personal information maintained under our direct control is limited to authorized individuals and systems where reasonably necessary for operational, security, or lawful purposes.

Notwithstanding these safeguards, no software application, internet communication system, cloud infrastructure, or electronic storage environment can be guaranteed completely secure.

While we take reasonable measures to protect information, we cannot guarantee absolute protection against sophisticated cyberattacks, unauthorized third-party access, or infrastructure failures.

Nothing in this Policy excludes or limits any data protection responsibility, statutory remedy, or legal obligation that cannot lawfully be excluded or limited.

§ 11 · Your Explicit Rights and Data Management Options

Users may exercise applicable rights to access, correct, or request deletion of personal information associated with their Baboon! accounts, subject to applicable legislation and lawful exceptions.

The Right of Access: You may request information concerning the personal data maintained about you under our direct control, subject to applicable verification requirements, statutory exceptions, and legally authorized restrictions.

The Right of Correction: You may request correction of inaccurate or incomplete personal information where technically feasible and legally required.

The Right of Deletion: You may request deletion or irreversible anonymization of personal information associated with your account, subject to applicable retention requirements, legal holds, security obligations, and records reasonably necessary for existing legal proceedings.

The Right to Withdraw Consent: Where processing relies upon consent, you may withdraw that consent subject to applicable legal or contractual restrictions and reasonable notice. Withdrawal may affect your ability to access features requiring the affected information.

Legal Record Preservation: A deletion request does not automatically require the destruction of information subject to a lawful preservation obligation, existing legal proceeding, reasonably anticipated legal claim, or enforceable arbitration process.

Such records shall remain protected and be retained only for as long as reasonably necessary and legally authorized.

To exercise applicable privacy rights, submit a written request to:

privacy@baboon.quest

Subject: Data Privacy Request

We may require reasonable identity verification to confirm that the request originates from the legitimate account holder or another legally authorized individual.

Verification shall be limited to information reasonably necessary for this purpose.

Valid requests shall be processed within the timeframes prescribed by applicable privacy legislation.

Where a request cannot be fulfilled in whole or in part, we will provide an explanation where legally required and permitted.

Users acknowledge that information independently retained by third-party platform operators, including Meta, PlayFab, Photon Engine, and Unity, may be subject to their separate privacy policies and deletion procedures.

Deletion of a Baboon! player account may result in permanent loss of associated progression, virtual inventory, account settings, and other stored gameplay information.

Where legally applicable, users may also raise privacy concerns with the Office of the Information and Privacy Commissioner for British Columbia or another competent privacy authority.

Requests concerning personal information shall not be conditioned upon continued participation in the Game.

§ 12 · Independent Updates to This Privacy Policy

The Developer reserves the right to revise, amend, modify, restate, or update this Policy to reflect changes in software functionality, multiplayer infrastructure, operational requirements, security practices, applicable legislation, or third-party platform obligations.

Material changes affecting the collection, use, disclosure, or retention of personal information shall be communicated and, where required, accompanied by an opportunity to provide or withdraw consent in accordance with applicable law.

Revisions shall be documented by updating the "Last Updated" date displayed at the beginning of this Policy.

Continued use of the Game following publication of an updated Policy does not eliminate any requirement to obtain additional consent where mandated by applicable privacy legislation.

The current version of this Policy shall govern the Developer's processing practices from its applicable effective date, subject to any overriding statutory requirements.

Privacy Contact: privacy@baboon.quest

Developer: Bananabyte Games

Application: Baboon!