PuckLab Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you create an account or use our Service, we may collect:

• Account Information: Username, email address, password (encrypted), date of birth
• Profile Information: Display name, profile picture, preferences
• Payment Information: Payment method details (processed securely through Stripe)
• Communications: Messages you send to customer support, feedback, or surveys
• User-Generated Content: Videos, photos, gameplay recordings, and other content you create or upload

1.2 Information Collected Automatically

When you use PuckLab, we automatically collect certain information:

• Device Information: Device type, operating system, device identifiers (IDFA, advertising ID), mobile network information
• Usage Data: Gameplay statistics, session duration, features used, achievements unlocked, progression data
• Location Data: Approximate location based on IP address; precise location when you use AR features (with your permission)
• Camera and Sensor Data: Camera feed when using AR features, accelerometer and gyroscope data for gameplay mechanics
• Log Data: IP address, browser type, access times, pages viewed, crashes, and performance data
• Analytics Data: Interactions with the app, button clicks, screen views, and user flow

1.3 Information from Third Parties

We may receive information about you from:

• Social Media: If you connect your social media accounts, we may receive profile information
• Payment Processors: Transaction confirmations and payment status from Stripe
• Analytics Providers: Aggregated usage data from Unity Analytics and Google Analytics

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 To Provide and Maintain the Service

• Create and manage your account
• Process payments and subscriptions
• Deliver game features, including AR experiences
• Save your progress and preferences
• Provide customer support

2.2 To Improve and Personalize

• Analyze usage patterns to improve gameplay
• Develop new features and content
• Personalize your experience based on preferences
• Test and optimize game performance
• Fix bugs and technical issues

2.3 To Communicate with You

• Send service-related notifications
• Respond to your inquiries and support requests
• Send updates about new features or content
• Notify you about changes to our policies
• Send promotional communications (with your consent)

2.4 For Safety and Security

• Detect and prevent fraud, abuse, and violations of our Terms
• Protect the security of our systems and users
• Enforce our policies and legal rights
• Comply with legal obligations

2.5 For Analytics and Research

• Understand how users interact with PuckLab
• Conduct research and analysis to improve the Service
• Create aggregated, anonymized data for internal use

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

3.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Government requests
• Protection of our rights, property, or safety
• Protection of users or the public

3.3 Business Transfers

If PuckLab is involved in a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

3.4 With Your Consent

We may share information with third parties when you give us explicit permission to do so.

3.5 Aggregated Data

We may share aggregated, anonymized data that cannot identify you personally for research, marketing, or other purposes.

4. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained while your account is active, plus 90 days after deletion
• Payment Records: Retained for 7 years for tax and legal compliance
• User-Generated Content: Retained until you delete it, or your account is closed
• Analytics Data: Aggregated data may be retained indefinitely
• Support Communications: Retained for 3 years

5. Your Privacy Rights

5.1 Rights Under GDPR (EEA/UK Users)

If you are located in the European Economic Area or UK, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where we rely on it
• Right to Lodge a Complaint: File a complaint with your local data protection authority

5.2 Rights Under CCPA (California Users)

If you are a California resident, you have the following rights:

• Right to Know: Request information about data we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell data)
• Right to Non-Discrimination: Equal service regardless of privacy choices

5.3 Rights Under Canadian Privacy Law (PIPEDA)

If you are a Canadian resident, you have the right to:

• Access your personal information
• Request correction of inaccurate information
• Withdraw consent for certain uses
• File a complaint with the Privacy Commissioner of Canada

5.4 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days (or as required by applicable law). You may need to verify your identity before we process your request.

6. Children's Privacy

PuckLab is designed for users aged 13 and older. We do not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction) without parental consent.

If we discover that we have collected information from a child under the required age without proper consent, we will delete that information immediately. If you believe a child has provided us with personal information, please contact us at [email protected].

7. Security of Your Information

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication and password protection
• Regular security audits and monitoring
• Access controls limiting who can access your data
• Secure payment processing through PCI-compliant providers

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws than your jurisdiction.

When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for certain countries
• Compliance with applicable data protection frameworks

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information. Types of technologies we use include:

• Essential Cookies: Required for basic functionality
• Analytics Cookies: Help us understand how you use the Service
• Preference Cookies: Remember your settings and choices
• Advertising Cookies: May be used for targeted advertising (with consent)

You can control cookies through your browser settings or device preferences. However, disabling cookies may limit your ability to use certain features.

10. Third-Party Links and Services

PuckLab may contain links to third-party websites, apps, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

11. Augmented Reality and Camera Data

When you use AR features, we access your device's camera and sensors. This data is processed locally on your device and only stored or transmitted if you choose to save or share content.

• Camera feed is used in real-time for AR overlay and is not stored unless you record or capture content
• Location data may be used to enhance AR experiences
• Sensor data (accelerometer, gyroscope) is used for motion tracking
• You can revoke camera and location permissions at any time through device settings

12. Marketing Communications

We may send you promotional emails, push notifications, or in-app messages about new features, content, or offers. You can opt-out at any time by:

• Clicking "unsubscribe" in any email
• Adjusting notification settings in the app
• Disabling push notifications in your device settings
• Contacting us at [email protected]

Please note that you cannot opt-out of essential service-related communications.

13. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. We currently do not respond to DNT signals, as there is no industry standard for how to interpret them. We will update this policy if we adopt a DNT protocol in the future.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy in the app
• Sending an email notification
• Displaying a prominent notice on our website

The "Last Updated" date at the top of this policy indicates when it was most recently revised. Your continued use of PuckLab after changes constitutes acceptance of the updated policy.

15. Legal Basis for Processing (GDPR)

For users in the EEA/UK, our legal bases for processing your personal data include:

• Contract: Processing necessary to provide the Service and fulfill our agreement with you
• Consent: You have given explicit consent for specific purposes
• Legitimate Interests: Processing necessary for our legitimate business interests (improving the Service, fraud prevention)
• Legal Obligation: Processing required to comply with legal requirements

16. California "Shine the Light" Law

California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Protection Officer (GDPR)

For users in the EEA/UK, you can contact our Data Protection Officer at: [email protected]

Supervisory Authority

You have the right to lodge a complaint with your local data protection authority if you believe we have not handled your personal information appropriately.

18. Summary of Key Points

• We collect information you provide, usage data, and device information
• We share data with service providers like Stripe, Unity, and Google Analytics
• We do not sell your personal information
• You have rights to access, correct, and delete your data
• We implement strong security measures to protect your information
• AR features use camera and location data with your permission
• You can opt-out of marketing communications at any time
• We comply with GDPR, CCPA, and Canadian privacy laws