Privacy Policy

1. Information We Collect

• Account information: your email address and a hashed version of your password (we never store passwords in plain text)

• Google Sign-In. If you sign in with Google, we receive your name, email address, and profile picture from your Google account to create and identify your account.

• Project data: the experiences, assets, and content you create and upload to the Platform

• Payment details: processed and stored by Stripe, our payment processor. We do not store your full card information on our servers

• Wallet addresses: if you participate in our token-gated beta access, we collect the public wallet address (e.g. via Phantom or Solflare) used to verify NFT ownership. We do not collect or have access to your private keys or wallet funds

• Usage metrics: anonymized data about how the Platform is used, to help us improve performance and features

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve the Service, process payments, verify beta access eligibility, communicate with you about your account, and respond to support requests. We do not sell, rent, or trade your personal information to third parties.

3. Storage & Security

Your data is stored on secure servers with encrypted connections (HTTPS/TLS) for all data in transit, and passwords are hashed using bcrypt. While we take security seriously, no method of electronic storage is completely secure, and we cannot guarantee absolute security.

4. Third-Party Partners

We work with a small number of trusted partners to operate the Platform:

• Stripe — payment processing

• Cloudflare — asset hosting and content delivery

• 8th Wall — augmented reality rendering engine

• OpenAI — powers our in-builder AI assistant, Quakey Duck

Each of these partners has its own privacy practices governing the data they process on our behalf.

5. Cookies & Tracking

Quakey XR uses browser localStorage, not cookies, to keep you signed in and remember your preferences. We do not run advertising scripts or sell data to advertisers.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your data is removed within 30 days, except where we're required to retain it by law.

7. Children's Privacy

Quakey XR is not intended for children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn that we've collected information from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, contact us at info@quakeyxr.com.

8. Your Rights

You can access, update, or delete your assets, export your projects, and request full account deletion at any time by emailing info@quakeyxr.com. If you're located in the EEA or California, you may have additional rights under GDPR or CCPA, including the right to request a copy of your data or object to certain processing. Contact us and we'll help.

9. Changes to This Policy

We may update this Privacy Policy as the Platform grows. If we make a significant change, we'll notify you through the Platform. Continued use after changes take effect means you accept the updated policy.

10. Contact

Questions about this Privacy Policy or how your data is handled? Email us at info@quakeyxr.com.