OverLoad

Privacy Policy

Effective date: October 25, 2026 · Last updated: October 26, 2026

This Privacy Policy explains what information OverLoad (the "Game"), a multiplayer virtual-reality shooter for Meta Quest, collects, how we use it, who we share it with, how long we keep it, and how you can access or delete it. "We", "us" and "our" mean Dean, the developer and publisher of the Game, together with the OverLoad team that operates the Game and its online services. If you have questions, contact us at [email protected].

1. Information we collect

We only collect what the Game needs to run its online features. We do not collect your real name, email address (unless you email us), phone number, contacts, photos, precise location, or payment card details.

Information you or your device give us when you sign in

  • Account identifiers: your Meta (Oculus) user ID when you sign in with your Meta account. We create a player ID and a short player number linked to it.
  • Profile: your Meta display name, shown as your in-game nickname, or a nickname you set in the Game.
  • Sign-in verification: each time you sign in or join our game servers, Meta's device-integrity (attestation) check confirms the Game is running unmodified on a real Quest device. We keep a record of each check: the result and, if it failed, why; the app and device integrity levels Meta reports; the Game's version and package; whether the app's signing certificate matches ours; a device identifier Meta provides for this check (which Meta rotates); how many days of security updates the device is behind; and whether Meta reports the device as banned. We never keep the token itself. We use these records to verify sign-ins, prevent cheating and enforce bans.

Information collected automatically

  • Device and connection information: the Game version, your IP address, and how quickly your device reaches our servers (latency), used to keep connections stable.
  • Diagnostics and crash logs: to find and fix bugs, the Game sends us technical logs while you play: errors, warnings and crashes (with the technical details of where in the Game they happened), the loading and sign-in steps it reached, and a short performance summary about once a minute (frame rate, memory use, battery level, server ping). Each log includes device information: headset model, operating system version, graphics chip, memory, battery level, network type, language and time zone, and whether the Game was installed from the Meta Store. These logs are linked to your player ID when you are signed in. They do not contain voice, movement, chat or anything you type.
  • Gameplay information:
    • your player ID and number;
    • in-game currency balances;
    • the weapons, skins, wraps, charms, cosmetics, loot crates and other items you own, and your loadout;
    • quest progress and rewards claimed;
    • in-game mail you receive and claim;
    • match statistics such as kills, wins, win streak and ranked results;
    • your leaderboard rank, your online status and when you were last online.
  • Friends and lobbies: your in-game friends list, friend requests and party lobbies, handled through Unity Gaming Services.
  • Security and moderation records: sign-in attempts (including rejected ones), bans, and reports made by or about you, a log of changes to your account's currency and items, and messages our staff send you in the Game.
  • Matchmaking: when you search for a match, we briefly hold your player ID, the mode and team size you chose, and the Game version so we can match you with other players. This is kept only in memory while you search and is not stored.
  • Movement in the Game: your headset and controller/hand positions are sent in real time to the other players in your match so they can see your avatar. We do not store this movement data. The Game does not collect eye-tracking, face-tracking, or room/passthrough camera data.

Purchases

In-app purchases are processed by Meta. We never see or store your payment details. Meta tells us the purchase, the item (SKU) and the time, so we can deliver and keep track of what you bought.

Voice chat

If you allow microphone access, your voice is transmitted live to other players in your match. See section 4.

2. How we use your information

  • To create and sign in to your account, keep your progress, inventory, currency and purchases, and deliver items you buy or earn.
  • To run multiplayer features: matchmaking, matches, party lobbies, voice chat, friends, quests, mail and leaderboards.
  • To keep connections stable and choose a nearby server.
  • To keep the Game fair and safe: verifying sign-ins, preventing cheating and fraud, handling reports, and enforcing bans.
  • To fix problems and improve the Game.
  • To answer you when you contact us, and to meet legal obligations.
We do not sell your personal information, we do not share it for targeted (cross-context behavioral) advertising, and the Game does not show third-party ads.

Where the EU/UK GDPR applies, we rely on:

  • performance of our contract with you (providing the Game and its online features);
  • our legitimate interests (security, anti-cheat, moderation, improving the Game);
  • your consent (microphone access, which you can withdraw at any time);
  • legal obligations.

3. How we share your information

We share information only with service providers that help us run the Game, under terms that limit their use of it to providing their services to us:

  • Meta Platforms Sign-in, device-integrity checks, entitlements and in-app purchases.
  • Unity Technologies Player authentication for Unity Gaming Services, friends lists, party lobbies and connection-quality checks.
  • Amazon Web Services Hosting of our game servers, backend and database (United States).
  • Cloudflare Domain name (DNS) services and protection of our website and backend against attacks. Traffic to them passes through Cloudflare's network.
  • Discord Our moderation team receives notices in a private, staff-only Discord server, for example new players, rejected sign-ins, purchases, bans and player reports. These notices can include nicknames, player IDs and Meta user IDs.

Our multiplayer and voice servers are run by us; we do not use a third-party multiplayer cloud.

Other players can see your nickname, avatar, cosmetics, leaderboard rank and online status, and can hear your voice when you use voice chat.

We may also disclose information:

  • if required by law;
  • to protect the safety of players or others;
  • to investigate fraud or abuse;
  • as part of a merger or sale of the Game, in which case this policy continues to apply to your information.

4. Voice chat, other players and the in-game camera

  • Voice chat uses your microphone only after you grant permission on your headset. Your voice is streamed in real time through our servers to players in your match. We do not record or store voice chat. You can mute yourself, or turn off microphone permission in your headset settings, at any time.
  • Reports: you can report other players. We keep the report (who reported whom, when, and what was said in it) to review it.
  • In-game camera: the Game includes an optional camera (LIV) that lets you capture photos or video on your own device. We do not receive those recordings unless you choose to share them with us.

5. How long we keep information

Account and gameplay dataFor as long as your account exists, and deleted within 30 days after you ask us to delete it.
Sign-in attempt recordsAutomatically deleted after 30 days.
Device-integrity (attestation) recordsAutomatically deleted after 90 days.
Diagnostics and crash logsAutomatically deleted after 30 days.
In-game staff messagesAutomatically deleted after 7 days.
Server backupsOverwritten on a rolling basis within 14 days.
Purchase recordsKept as long as needed for accounting, tax and fraud-prevention obligations, then deleted.
Ban recordsKept while the ban is in effect, so it can be enforced.

6. Deleting your data

You can ask us to delete your account and all personal information associated with it at any time:

  1. Email [email protected] with the subject "Delete my data".
  2. Include your in-game nickname and, if you know it, your player number, so we can find your account. You can include your Meta username instead.
  3. We may ask you to confirm the request from the Game or your Meta account, so nobody can delete someone else's account.

We delete the following within 30 days and confirm by email:

  • your account, progress, inventory and currency;
  • your statistics and leaderboard entries;
  • reports you made, and other records linked to your player ID.

Information we are legally required to keep, such as purchase records for tax purposes, is kept only as long as required and is not used for anything else. Deleting your data permanently removes your progress and purchased in-game items.

You can also stop all further collection at any time by uninstalling the Game.

7. Your rights and choices

Depending on where you live (for example under the EU/UK GDPR or US state laws such as the CCPA/CPRA), you may have the right to:

  • access the personal information we hold about you and get a copy of it;
  • correct inaccurate information;
  • delete your information (see section 6);
  • object to or restrict certain processing, and withdraw consent (for example microphone access);
  • receive your information in a portable format;
  • not be discriminated against for exercising your rights.

To use any of these rights, email [email protected]. We answer within 30 days. You may also complain to your local data-protection authority.

8. Children

OverLoad is made for a general audience and is only available to people who meet Meta's minimum age requirements for Meta Quest. For preteen accounts, Meta's parent-managed account rules and parental supervision tools apply.

We collect only the information needed to run the Game, as described above. We do not knowingly collect personal information from children beyond that, or in violation of applicable law (including COPPA).

If you are a parent or guardian and believe your child has given us personal information, contact [email protected]. We will review it and delete it on request.

9. Security

  • All connections between the Game and our backend for sign-in and account data use HTTPS encryption.
  • Sessions use random, expiring tokens.
  • Our database is not reachable from the internet.
  • Access to player data is limited to our team, through a staff dashboard protected by Discord sign-in and role checks.

No method of transmission or storage is completely secure, but we work to protect your information. We will notify you and the relevant authorities of a data breach as required by law.

10. Where your information is processed

Our servers are located in the United States. Our service providers may process information in other countries. When information is transferred from the EU, UK or other regions, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

11. Changes to this policy

We may update this policy as the Game changes. We will post the new version on this page with a new "Last updated" date. If the changes are significant, we will also tell you in the Game before they take effect.

12. Contact us

Dean, developer and publisher of OverLoad
Email: [email protected]
Website: overloadvr.xyz