Privacy Policy

1. Who we are

Red Team Interactive Inc. develops and publishes Sea Monkeys and operates seamonkeysvr.com. We are the "controller" (or "business") responsible for the personal information described in this policy.

Red Team Interactive Inc.
Email: garett@redteam.games

You can also reach us through the support form on our website.

2. What this policy covers

This policy covers personal information, meaning information that identifies, relates to or could reasonably be linked to you, that we collect through the Services.

It does not cover how other companies handle your information, even when you use their services to reach ours. In particular:

• Meta runs your Meta account, your Meta Quest device, the Meta Horizon Store and payments. Meta's privacy policy explains how Meta handles your information.
• Discord runs the platform our community server is hosted on, under Discord's privacy policy.
• Video and social platforms such as YouTube, Twitch, TikTok and Instagram handle your information under their own policies when you post Creator Content there.

3. Information we collect

In short: we get some account details from Meta when you play, we generate gameplay data while you play, and we collect what you send us through support or the Creator Program.

3.1 Information we receive from Meta when you play

When you install and play the Game, Meta's platform shares certain information with us, as described on the Game's store page. Depending on your Meta settings, this may include:

• Your app-scoped user ID, which identifies your account within our Game only.
• Your display name and username.
• Your profile picture and avatar, so other players can see your character.
• Your age group (for example, whether your account is a parent-managed preteen account, a teen account or an adult account), so we can apply age-appropriate settings and protections.
• A list of followers and people you follow who also own the Game, so you can find and play with friends.
• Entitlement and purchase records, such as which in-game items you have bought and when, so we can deliver them. We do not receive your payment card or bank details.

3.2 Information created when you play

• Gameplay data: progress, inventory and Virtual Items, ship builds and designs, crew membership, settings, achievements, session start and end times, the servers and sessions you join, and in-game actions needed to run multiplayer.
• Voice chat: if you allow the Game to use your headset's microphone, your voice is transmitted in real time to the other players in your session so you can talk to your crew. We do not record or store voice chat.
• Movement data: the positions of your headset and controllers are used in real time to move your character and are sent to other players in your session so they can see you move. We do not use this data to identify you or build a profile about you.
• Safety and moderation records: reports you make or that are made about you, the evidence and notes connected to them, and any actions we take, such as warnings, mutes or bans.
• Device and technical data: headset model, operating system and app version, language, network information such as IP address (used to connect you to servers), performance data, and crash and error logs that help us fix bugs.

3.3 Information from our website and support form

• Support requests: when you send a support request, we collect the email address you give us, your in-game name (if you include it), the topic you choose, your headset model and game version (if you include them), your summary and your message, and anything else you choose to tell us. Please don't include sensitive information such as passwords or payment details.
• Browser information: we store your browser's "user agent" (a short description of your browser and operating system) with your support request to help us troubleshoot.
• IP address: to stop spam and abuse, we turn your IP address into a one-way scrambled code ("hash") and store only that code, not your IP address itself. We use it to limit how many requests can be sent in a short time, and we automatically remove it from support requests after 30 days.
• Security traps: if a device requests one of the hidden trap pages that only bots and hacking tools visit, we record a scrambled code of its IP address, the page it asked for, its browser information and its country, and block it from sending support requests for up to 24 hours. We delete these records after 7 days.
• Server logs: our hosting provider, Cloudflare, processes standard request information such as IP address, browser type, the page requested and the time of the request in order to deliver the website securely, and may keep it for a short period in logs.
• Web fonts: our pages load fonts from Google Fonts. When your browser requests them, Google receives your IP address and browser information.

The website does not use analytics, advertising or social media tracking tools, and it does not set cookies for visitors. See Section 13.

3.4 Information from the Creator Program

If you join the Creator Program, we may collect your Discord username and ID, links to your channels and social media accounts, links to the content you submit, view counts, analytics screenshots or other proof you share with us, your in-game user ID or name so we can deliver rewards, confirmation of your age, and, if you are under 18, confirmation of parental permission. We may also look at public information on your channels, such as follower counts and published videos, to check eligibility and verify submissions.

3.5 Information from our community spaces

When you take part in our Discord server, we can see the information Discord makes visible to server operators, such as your username, profile and the messages you post in our server. Moderators may keep notes about rule-breaking to keep the community safe.

3.6 Communications with us

If you email us or reply to a support message, we keep the content of those messages, your email address and any attachments you send.

3.7 What we don't collect

We do not collect your payment card or bank details, your Meta password, your precise location, your contacts, photos of you, or images of your surroundings from your headset's cameras. We do not use biometric data to identify you.

4. How we use information

In short: to run the Game, keep it safe, help you, fix bugs and run the Creator Program. Never to sell you out or target you with ads.

• Provide the Game and Services: sign you in, connect you to servers and other players, save your progress and ship builds, deliver Virtual Items and purchases, let you find friends, and run playtests and events.
• Keep players safe: apply age-appropriate settings, review reports, enforce our Terms of Service and Code of Conduct, detect and prevent cheating, fraud, spam and abuse, and protect children.
• Support you: respond to support requests, investigate bugs, restore missing items and handle appeals.
• Improve the Game: understand how features are used, find and fix crashes and performance problems, and balance gameplay. Where possible, we use data that is aggregated or not linked to you.
• Run the Creator Program: review applications, verify content and views, deliver rewards and prevent abuse of the Program.
• Communicate with you: send replies to your requests and service messages, such as notices about changes to the Game or our terms. We don't send marketing emails unless you've asked us to.
• Security: protect our systems, the Services and our users.
• Legal reasons: comply with laws, respond to lawful requests from authorities, establish or defend legal claims, and enforce our agreements.

We do not sell personal information, we do not use it for targeted or behavioral advertising, and we do not use it to make decisions that have legal or similarly significant effects on you based solely on automated processing.

5. Legal bases (EEA and UK)

If you are in the European Economic Area, the United Kingdom or Switzerland, data protection law requires us to have a legal basis for using your personal information. We rely on:

• Contract: to provide the Game and Services you've asked for under our Terms of Service, such as running multiplayer, saving progress and delivering purchases.
• Legitimate interests: to keep the Services safe and secure, prevent cheating and abuse, moderate content, fix bugs, improve the Game and run the Creator Program, where these interests are not overridden by your rights. You can object to this use (see Section 11).
• Consent: for microphone access, which you control through your headset, and for any other use where we ask for your permission. You can withdraw consent at any time.
• Legal obligation: where we need to keep or disclose information to comply with the law.

6. How we share information

In short: other players see your name, avatar and creations. Companies that help us run the Game process data on our behalf. We share with authorities only when we must or when someone may be in danger.

• Other players: your display name, avatar, profile picture, in-game actions, ship builds, crew and voice (if your microphone is on) are visible or audible to other players in your session. Players can record what they see and hear, so don't share private information in the Game.
• Service providers: companies that work on our behalf and may only use the information to provide services to us, under contracts that require them to protect it. These include website hosting and security (Cloudflare), multiplayer networking and voice chat services, cloud storage, crash reporting and support email tools.
• Meta: as needed to operate the Game on Meta's platform, such as checking purchases, and when we report safety concerns about a Meta account.
• Discord and other platforms: if you take part in our community or Creator Program, content you post there is shared under those platforms' rules.
• Safety and legal reasons: with law enforcement, regulators, courts or others when we believe in good faith it is required by law, or necessary to protect anyone's safety, prevent fraud or abuse, or protect our rights. We report apparent child sexual exploitation to the National Center for Missing & Exploited Children (NCMEC) or other appropriate authorities.
• Business transfers: if we are involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that deal. We will make sure it remains protected under this policy or a policy that is at least as protective.
• With your permission: in other cases when you ask us to or agree to it.

We may share aggregated or de-identified information that can't reasonably be used to identify you, for example "1,000 ships were built this week".

7. Children and teens

In short: kids 10 to 12 play through parent-managed Meta accounts. We collect only what's needed to run the Game for them, and parents can review or delete their child's information at any time.

7.1 Players aged 10 to 12

Sea Monkeys is rated for players 10 and older. Children aged 10 to 12 can only use Meta Quest through a parent-managed Meta account, which a parent or guardian sets up and controls. Meta obtains parental consent for these accounts and gives parents tools to approve apps, manage purchases, control voice chat and set other limits.

For players in this age group, we collect and use personal information only as needed to provide the Game and support its internal operations, such as running multiplayer, saving progress, delivering items, keeping players safe and fixing problems. We do not use it for advertising, we do not sell it, and we do not ask children to share more information than is reasonably needed to play.

7.2 Support form and Creator Program

Our support form, Creator Program and Discord server are not intended for children under 13. If your child needs help, please send the support request yourself as the parent or guardian. If we learn that we have collected personal information from a child under 13 outside of the Game without appropriate parental consent, we will delete it.

7.3 Parents' rights

If you are the parent or guardian of a player under 13, you can at any time:

• ask to review the personal information we hold about your child;
• ask us to delete it; and
• tell us to stop collecting or using your child's information, which may mean your child can no longer use the Game.

To make a request, contact us using the details in Section 16. We will need to verify that you are the child's parent or guardian before acting on the request. You can also manage your child's account and app access directly with Meta's parental supervision tools.

7.4 Teens

We apply the same protections to teens aged 13 to 17: we don't sell their information or use it for targeted advertising, and we use Meta's age group information to apply appropriate settings.

8. How long we keep it

We keep personal information only for as long as we need it for the purposes in this policy, unless the law requires or allows us to keep it longer. The table below explains our usual retention periods.

9. How we protect it

We use reasonable technical and organizational measures to protect personal information, including:

• encrypting information in transit between your device or browser and our servers using HTTPS and TLS;
• limiting access to support requests and player data to staff who need it, behind staff tools that only approved Red Team staff can sign in to, using their Discord accounts;
• storing only a scrambled code for IP addresses on support requests, instead of the address itself; and
• limiting how many requests each visitor can make, and automatically blocking bots and hacking tools that trip our security traps;
• choosing service providers with strong security practices.

No system is completely secure, and we can't guarantee the security of information sent over the internet. If we learn of a security incident that affects your personal information, we will notify you and the relevant authorities where the law requires it.

10. International transfers

Red Team is based in the United States, and our service providers may process information in the United States and other countries. These countries may have different data protection laws from the country where you live. When we transfer personal information from the European Economic Area, the United Kingdom or Switzerland, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and their UK and Swiss equivalents, or on the EU-US Data Privacy Framework where our provider participates in it.

11. Your rights and choices

In short: you can ask to see, fix, delete or download your information, and you can control voice chat and other settings on your headset.

11.1 Choices you can make right now

• Microphone: turn microphone access for the Game on or off in your headset's settings, or mute yourself in the Game.
• Other players: mute, block or report players using in-game tools, if available, or Meta's tools.
• Meta settings: control what Meta shares with apps, such as your followers list and profile visibility, in your Meta account's privacy settings.
• Parental controls: parents can use Meta's supervision tools to manage a child's app access, purchases and voice chat.
• Leaving: you can stop playing at any time by uninstalling the Game.

11.2 Your privacy rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and get information about how we use it;
• Correct information that is wrong or incomplete;
• Delete your personal information;
• Get a copy of your information in a portable format;
• Object to or ask us to restrict certain uses of your information, including uses based on legitimate interests;
• Withdraw consent where we rely on it, without affecting earlier use;
• Opt out of the sale or sharing of personal information or targeted advertising (we don't do either); and
• Not be discriminated against for using your privacy rights.

11.3 How to make a request

Send a request through our support form (choose "Account or purchase" and say it's a privacy request) or email garett@redteam.games. Tell us your in-game name and what you'd like us to do.

To protect your account, we need to confirm the request comes from you before acting on it. Because you sign in with Meta, we may ask you to confirm details only the account holder would know, or to perform a simple step in the Game. You can use an authorized agent to make a request for you, but we may ask for proof that they're authorized and still verify your identity with you.

We'll respond within the time the law requires, usually within 30 days (45 days under some US state laws), and we'll let you know if we need more time. If we can't fully meet your request, for example because we must keep certain records by law, we'll explain why. Deleting your data may permanently remove your progress and Virtual Items, including purchased items.

11.4 Appeals and complaints

If we decline your request, you can appeal by replying to our decision and asking us to reconsider. If you're not satisfied, you can contact the data protection or consumer protection authority where you live. In the EEA and UK, you have the right to lodge a complaint with your local supervisory authority, such as the Information Commissioner's Office in the UK.

12. US state privacy rights

Residents of California and other US states with comprehensive privacy laws (such as Colorado, Connecticut, Virginia, Utah, Texas and Oregon) have the rights described in Section 11. This section gives additional information required by those laws, including the California Consumer Privacy Act as amended ("CCPA").

12.1 Categories of personal information

In the past 12 months, we have collected the following categories of personal information, for the purposes described in Section 4:

We collect this information from you, from your use of the Services, from Meta and, for Creator Program members, from public channel information.

12.2 No sale or sharing

We do not sell personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the CCPA. We have no actual knowledge of selling or sharing the personal information of anyone under 16. We do not use or disclose sensitive personal information for purposes that require offering a right to limit under the CCPA.

12.3 Global Privacy Control and Do Not Track

Because we don't sell or share personal information or use tracking for advertising, there is nothing to opt out of. Your browser's Global Privacy Control or Do Not Track signal is honored by default.

12.4 California "Shine the Light"

We do not disclose personal information to third parties for their own direct marketing purposes.

13. Cookies and similar tools

Website: seamonkeysvr.com does not use advertising, analytics or social media cookies, and it does not set cookies for visitors. The only cookies we use are security cookies set when a Red Team staff member signs in to our private support dashboard with Discord. They're strictly necessary for that sign-in and expire after 12 hours. Because we don't use non-essential cookies, we don't show a cookie banner.

As noted in Section 3.3, our pages load fonts from Google Fonts, and our hosting provider Cloudflare may use strictly necessary security measures to protect the site from attacks.

Game: the Game uses identifiers provided by Meta's platform, such as your app-scoped user ID, to run your account. It does not use advertising identifiers.

14. Third-party services

The Services link to and work with services we don't control, including Meta, Discord, YouTube, Twitch, TikTok and Google. When you use those services, your information is handled under their privacy policies, not this one. We encourage you to read them.

15. Changes to this policy

We may update this policy as the Game and Services develop or as laws change. When we do, we'll update the effective date at the top of this page. If the changes are material, we'll let you know in advance through the Game, the Site or our Discord, and where the law requires it, we'll ask for your consent. If you're the parent of a child under 13 and a change would materially affect how we use your child's information, we will seek your consent where required.

16. Contact us

If you have questions about this policy or want to use your privacy rights, contact us:

• Support: through the support form on seamonkeysvr.com
• Email: garett@redteam.games

If you are in the EEA or UK and we are required to appoint a representative there, we will list their contact details here.