Touch to Match-3 — Privacy Policy

Effective date: September 22, 2026
Last updated: October 16, 2026

This Privacy Policy explains what information the Touch to Match-3 game for Meta Quest (the “App”) handles, why, and what choices you have. We collect as little as possible — only what tells us how the game is played, so we can make it better.

1. Summary (plain language)

• We collect anonymous gameplay statistics tied to a random installation ID — never to your name, email or Meta account.
• Leaderboards, achievements, the free trial (“Try before you buy”) and purchases such as the Gold Mountain gold pack work through Meta’s platform. The App reads your Meta user ID and display name only to show the leaderboard and highlight your own row.
• We never use your data for advertising or marketing, never sell it, and never share it with advertising networks.
• Your game saves (progress, farm, achievements) are also kept in our cloud, so your game survives a reinstall or a new headset. They are filed under a one-way code made from your Meta user ID — the ID itself is not stored — and you can delete them from the game at any time.
• Your music and audiobook files, listening positions and hand movements stay on your headset.

2. Who is responsible (data controller)

The App is developed and published by an individual developer, who is the controller of the data described in this Policy:

Vladimir Matsel (individual developer)
Contact: vnmtsl@gmail.com

3. Information we do NOT collect

• Your name, email address, postal address or phone number.
• Your location.
• Your voice, camera or passthrough images, or your likeness.
• Hand-tracking data: the App uses hand positions in real time to let you play, and does not store or send them anywhere.
• The content of your files, or the names of your music or audiobook files.
• What you watch, type or search for in the in-game YouTube window.
• Payment details — purchases are processed entirely by Meta.

4. Information we do collect, and why

4.1 Gameplay analytics (anonymous usage data)

To see where players get stuck and what needs fixing, the App sends gameplay statistics to our analytics provider, Amplitude. Each event carries:

• a random installation ID, created the first time you launch the App and stored in the App’s own folder. It is not derived from your device hardware and is not linked to your Meta account, name or email;
• the App version, the headset model (for example “Quest 3”), the language the App runs in, whether you play with hands or controllers, whether passthrough is on, and session timing (a session number, when a session starts and how long it lasts);
• gameplay events, such as app start, level start and end, level number, attempt number, moves, score, stars, hints and boosters used, farm actions, in-game gold earned and spent, shop and wardrobe choices, tutorial steps, achievements, trial completion, the steps of an in-game offer or purchase (shown, checkout started, bought, refused or dismissed — for a purchase also the product and its price, as reported by Meta), opening the game’s store page, downloading the built-in audiobook chapters, and use of the music player and the browser window. For these we record only technical facts — for example how long music or an audiobook was played, how long the browser window was open, or search-query length — never titles, addresses you visit or what you type;
• technical health data: loading time, frame rate, and short error messages produced by the App itself, so we can fix crashes and slowdowns.

Your Meta user ID and display name are never sent to analytics.

Legal bases (EEA/UK users): our legitimate interests (Art. 6(1)(f) GDPR) in maintaining and improving the game, assessed as low-risk because the data is pseudonymous, minimal, and never used for marketing.

4.2 Meta Horizon platform features

The App uses the Meta Horizon Platform SDK for:

• Entitlement check — confirming that you own the game;
• Achievements — including the achievement that marks the end of the free trial;
• Free trial (“Try before you buy”) — the trial is run by Meta. When you reach the end of the trial part of the game, the App unlocks an achievement that Meta uses to end the trial. During the trial Meta does not allow in-game purchases, so instead the App offers to open the game’s page in the Meta Horizon Store, where you can buy the full game;
• Leaderboards — your score is submitted to the game’s leaderboard. To display the leaderboard, the App reads your Meta user ID and display name: the name is shown next to your score, and the ID is used only to highlight your own row. The App does not store these anywhere else and does not send them to us or to any third party.

Meta processes this data under its own terms and privacy policy. We use it only to provide these features inside the game — never for advertising or marketing.

4.3 Purchases

The game and its in-game purchases are sold through the Meta Horizon Store, and Meta processes every payment. We never see your payment details.

• Gold Mountain is a pack of in-game gold sold through Meta’s own checkout. When you buy it, Meta tells the App that the purchase was made; the App adds the gold to your save on the headset and then tells Meta that the purchase was delivered. If a paid purchase was never delivered (for example, the App closed in between), the App asks Meta for it at the next start and delivers it then.
• Items in the in-game shop — such as rings, hand skins and cube sets — are paid for with in-game gold, not with real money.

4.4 Cloud saves

So that your progress is not lost when you reinstall the App or play on another headset, the App keeps a copy of your game saves on our server:

• What is stored: your game saves — level progress, stars and score, your farm (including the record of which Gold Mountain purchases were delivered, so paid gold is never lost or given twice) and achievements.
• How it is tied to you: the App asks Meta for a proof of your Meta user ID; our server checks that proof with Meta and files your saves under a one-way keyed code (HMAC) made from that ID. The ID itself is not stored, and cloud saves are never linked to analytics.
• Where: on Cloudflare’s servers (Cloudflare Workers and D1), in Western Europe.
• Deleting it: in the App, open the hand menu and choose the cloud-and-bin icon, then confirm twice. The cloud copy is deleted at once and cloud saving stops on that headset; your game on the headset stays. You can turn cloud saving back on from the same place.
• Legal basis (EEA/UK): performance of the service you asked for — keeping your game (Art. 6(1)(b) GDPR).

4.5 Data that stays on your headset

• Game saves — progress, farm, achievements and settings, stored in the App’s folder.
• Your music and audiobooks — with your permission, the built-in player reads audio files from your headset’s Music, Download, Audiobooks, Podcasts and Movies folders and plays them locally. Neither the files nor their names leave the device.
• Built-in audiobooks — the App includes audiobook chapters that play from within the App. Where you stopped in each book is saved on your headset, so it resumes where you left off.
• Browser data — cookies of the in-game YouTube window are stored inside the App on your headset.
• Analytics queue — events waiting to be sent while the headset is offline.

5. What we never do with data

• We do not sell or rent data.
• We do not use any data — including Meta platform data — for advertising, marketing or profiling.
• We do not share data with advertising networks or data brokers.
• We do not show ads in the App.

6. Service providers and other parties

7. International data transfers

Amplitude may process analytics data in the United States; Cloudflare, as a global network, may route requests through other countries. Where required, such transfers rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

8. Retention

Analytics data is kept for no longer than 24 months. Cloud saves are deleted automatically 24 months after the last time they were updated, or at once when you delete them in the App. Data on your headset stays there until you delete the App.

9. Security

Analytics data and cloud saves are sent over encrypted connections (HTTPS); the secret used to check your Meta proof and to make the code your saves are filed under is held only on our server. We keep the data we hold to the minimum described above.

10. Your rights

Wherever you live, you have the right to access, correct, delete, restrict or object to processing of, and port your personal data. These rights are available to every player, regardless of country or region. Laws such as the EU/UK GDPR or US state privacy laws may give you further rights, such as lodging a complaint with a supervisory authority (in the EEA/UK: your local data protection authority).

Deleting your data. Cloud saves: delete them in the App (hand menu → cloud-and-bin icon, confirmed twice). Because we do not store your Meta user ID, we cannot find your cloud save from an e-mail — the in-App option is how it is deleted. Uninstalling the App erases the saves on your headset and the installation ID, after which past analytics events can no longer be linked to you. If you want statistics we already collected deleted, write to us, mention Touch to Match-3, and we will delete them within 30 days. You may also ask for a copy of what we hold.

Important practical note (GDPR Art. 11): because analytics data is pseudonymous and we hold nothing that links it to your identity, we may be unable to identify which events are yours unless you can tell us your installation ID.

11. Children

The App is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

12. Third-party links and services

The in-game browser window opens YouTube. What happens there is between you and Google, under Google’s terms and privacy policy.

13. Changes to this Policy

If this Policy changes, we will update this page and the “Last updated” date above.

14. Contact

Vladimir Matsel
Email: vnmtsl@gmail.com
Subject line suggestion: “Touch to Match-3 — Privacy”

If you are in the EEA or UK and believe we have not resolved your concern, you may lodge a complaint with your local supervisory authority.

Touch to Match-3 · 80085games