BungleVR Privacy Policy | Nullbin Games

1. Who we are

Nullbin Games operates BungleVR, its website, and its game backend. In this policy, “we” and “our” mean Nullbin Games, and “you” means someone visiting this website or using BungleVR.

BungleVR is in development. This policy describes the current game and services, including test builds. It does not state that the game has been approved for release by Meta.

For privacy questions or requests, contact [email protected].

2. Information we handle

Account and profile

We receive your Meta user identifier and platform display name when you sign in. We use a Meta organization-scoped identifier to connect your platform identity with a PlayFab game account. We handle your PlayFab player identifier, your chosen player name, avatar color, equipped cosmetics, and any staff permissions attached to your account.

Game progress and virtual items

PlayFab stores your Bungle Money balance, owned cosmetics, item grants, and purchase or claim records. The game sends requests to our backend to read or change this information. Bungle Money is an in-game currency used by the cosmetic shop. Where available, the ATM opens Meta checkout to buy currency packs. Meta processes the payment; we do not receive your payment-card number. Our backend handles your Meta purchase identifier, product code, entitlement status, amount of Bungle Money, and account-linked fulfillment record to verify purchases, restore pending credits, and prevent duplicate awards. Checkout availability depends on the published Meta products and app configuration.

Multiplayer and movement

Multiplayer services process your room membership, player identifier, display name, avatar appearance, gameplay actions, and headset and controller positions and rotations to show your character and interactions to other players. Our backend also receives headset and controller positions, player scale, and movement settings for automated cheating checks. The backend retains the latest sampled position and violation counters, rather than a continuous motion history. We do not use this movement information to identify you through biometric analysis.

Connection and security

Our backend processes your network IP address, device model, application version, request timestamps, authentication proofs, session tokens, and app-integrity results. We keep account or device bindings, suspected security violations, and moderation records to authenticate players, detect abuse, and enforce restrictions. App attestation checks whether a connecting build and device meet the configured security rules.

Policy acknowledgement

Before sign-in, the game asks you to agree to the Terms of Service and acknowledge this Privacy Policy. It stores the accepted versions on this installation. After a verified login, our backend records the versions and the server receipt time against your PlayFab player identifier. This record does not grant microphone permission or join Discord for you.

Reports and support

A player report includes the reporting and reported player identifiers, the room, the reason, any report details, and a timestamp. If you contact us by email, we receive your email address and what you send. Please do not send passwords, authentication tokens, payment details, or unnecessary personal information.

Discord processes staff-channel messages under Discord’s privacy policy. Discord messages can remain until removed by authorized staff. We also receive limited unauthenticated diagnostics when the client blocks an unsupported platform; those messages are marked as unverified and do not identify an authenticated player.

4. Voice and information visible to others

If you enable voice and grant microphone permission, the game captures microphone audio and relays it to players in range. BungleVR’s voice implementation does not save audio recordings to the backend or to an audio file. You can disable voice or revoke microphone permission in your headset settings. Other players may independently record what they hear or see.

Your player name, avatar, movement, equipped items, and applicable staff tag are visible in your lobby. The lobby board displays a shortened part of your player identifier for reporting. Avoid putting private information in your player name, room code, voice conversation, or reports.

5. Younger players

BungleVR is intended for teens and adults aged 13 and older (or the applicable minimum age in your region). The current build does not ask for a date of birth or use Meta’s User Age Group API. It does not currently provide an automatic age-category gate or a separate child-specific experience. A Meta account alone should not be taken as confirmation that these protections exist in BungleVR.

Parents or guardians with concerns about a child’s use of the game or information associated with their account can contact us using the address below. We will investigate and handle valid deletion requests, subject to applicable legal requirements. Platform age requirements and parental controls also apply through Meta.

6. Retention and security

Temporary authentication, heartbeat, and attestation records have expiry times. Movement-check session records are scheduled to expire ten minutes after their last update; movement violation events and queued authentication/room audit records are scheduled to expire after 30 days. Database expiry cleanup can take additional time. Account progress, inventory, account or device bindings, purchase fulfillment records, policy acknowledgement records, reports, and moderation records can persist beyond a session. The current service does not automatically delete all inactive accounts or historical reports on a fixed schedule.

We use account-bound authentication, access checks, and HTTPS for the game’s connection to our backend. No system can guarantee complete security. Service providers handle information under their own retention and security practices.

When we receive a verified deletion request, we remove associated data where applicable. We may retain limited information where needed to meet legal obligations, resolve disputes, or protect players against documented abuse. If an exception applies, we will explain it in our response.

7. Your choices and requests

You can change your player name, color, and equipped cosmetics in the game. You can disable voice and use your headset’s microphone permissions.

To request access, correction, or deletion of your BungleVR data, or to question a moderation decision, email [email protected] with the subject “BungleVR data request.” Include your game player identifier if available and describe your request. We may ask for information needed to confirm that the account is yours. Do not send account passwords or login tokens.

Requests are handled by a person; this website does not automatically delete accounts. Deletion of game data can remove progress and owned items. It does not delete your Meta account or data independently held by platform providers.

Depending on your location, you may also have rights to portability, objection, restriction, or to complain to a data protection authority. We will consider requests under the law that applies to you and respond within the required timeframe.

EMAIL A DATA REQUEST

8. This website

The BungleVR page code does not set advertising or analytics cookies, load marketing pixels, or include embedded third-party video players. Fonts and game images are served from our own site. Hosting infrastructure can process IP addresses, requested URLs, browser information, and access or error logs to deliver and protect the site.

The hosting layer adds Cloudflare Web Analytics for page-view and page-load performance measurements. Cloudflare describes this service as not using visitor personal data. Cloudflare also handles network and security diagnostics. See Cloudflare’s explanation of Web Analytics and its privacy policy for its practices.

The optional Join Discord button opens discord.gg/bunglevr in an external browser or app. Discord handles that visit under its own terms and privacy policy. The button does not automatically join a server or share your game login tokens. Links to provider policies and contact email open services with their own privacy practices. Sending email shares your address and message with our email provider.

9. Policy updates

We will update this page when the game’s data practices change and show a new effective date. Where required, we will provide additional notice or obtain consent before a material change takes effect.

Privacy contact
Nullbin Games, developer of BungleVR
[email protected]

PRIVACYPOLICY.