Privacy Policy

Effective 12 October 2026 · Last updated 4 November 2026

This policy explains what information RealBat Cricket VR ("the game", "we", "us") handles when you play on a Meta Quest headset, play the browser demo (play.realbatvr.com) or visit realbatvr.com, why we handle it, where it is kept, who helps us run it, and how you can see, correct or delete it.

1. Who is responsible

The operator of RealBat Cricket VR decides why and how the information described here is used (the "data controller").

Contact for anything in this policy: [email protected].

2. What we collect

From your Meta account, when you sign in

The game signs you in with the Meta account on your headset. Meta gives us, and we store:

• An account identifier for this game. It is not your email address or phone number, and we never receive your password.
• Your age group as reported by Meta (child, teen or adult). We do not receive your date of birth.
• A link to your Meta profile photo, only if you are an adult and choose to show it as your picture in the game (Settings → Account → Picture). We store the link, not a copy of the picture, and it is removed when you choose a different picture.
• Proof that the sign-in is genuine: a one-time code that our server checks with Meta, and whether the check passed. We then issue a session token so the headset stays signed in.

We do not store your real name. The game does not send your Meta display name to our servers. Names kept by earlier versions of the game are deleted from your profile the next time you sign in. Our server reads your Meta username (your public Meta handle, not your real name) from Meta when you sign in, and keeps it as your default in-game username.

What you choose in the game

• A username. Every account starts with its Meta username, or a made-up one (for example "SwiftCover42") if that name is already taken in the game or cannot be shown. You can change it under Settings → Account, up to three times in thirty days, and change back to your Meta username at any time. It must be unique and must not be offensive. It is the only name other players see, so please do not use your real name if you do not want it shown.
• A picture. One of the built-in pictures that come with the game or, for adults who choose it, your Meta profile photo.

From playing

• Scores and results: runs, wickets, match and practice-session results, the game mode, how long a session lasted and when it was played.
• Results of individual balls, such as the type and speed of the delivery and what happened to it.
• Your game profile: your username and picture, your Meta username, when you last changed your username, whether you appear on leaderboards, and preferences that follow your account between sessions.
• First-launch progress: which introduction steps were reached, how long they took, whether a button was pressed with the bat or the pointer, and the game version. We use this only to find where new players get stuck.

Optional Voice machine (beta)

If you turn on Voice machine in solo practice, raising the bat handle near your head starts a short microphone capture, which ends when you lower it. Your voice is turned into text by the speech recogniser built into your Quest (Meta's), on the headset; if that is not available or fails, the audio is sent to Meta's Wit.ai service for transcription instead. Our server never receives or stores the audio. The text of what you said (for example “yorker at 150”) and short summaries of up to six recent balls are then sent through our server to OpenRouter, which passes them to the company that runs the AI language model we use to turn your words into a ball (currently Mistral AI's Mistral Nemo model), and the model's reply comes back as the ball to bowl. Our server does not store the words you said. For each command it keeps only your account identifier, the time, whether it became a ball, how long it took, and which model answered, so that we can count how many players use this beta feature and decide whether to keep it. It also keeps request counters to limit abuse; they expire within a day. The recent-ball summaries stay in headset memory and clear when you leave practice. You can turn Voice machine off at any time in Settings → Voice Ball Machine. Meta, Wit.ai, OpenRouter and the model provider process the data under their own policies.

In multiplayer

When you play with another player at the nets, our server connects the two of you and passes between you, live:

• Your voice, only while your microphone is on in the game (it is on by default and you can turn it off at any time on the multiplayer page), and only while someone is on the next net. The game asks for permission to use the microphone the first time. Your voice goes only to that player. To keep players safe, our server holds the last two minutes of what the two of you said to each other in its memory, for up to ten minutes after you last spoke, and then forgets it. It is saved only if one of you reports the other: then those last two minutes of both voices are kept with the report, listened to only by us to review it, and deleted after 60 days (our backups of it after up to 60 days more). Otherwise nobody records or listens to it.
• Your movement: the positions of your head, bat and body, so the other player can see you bat. Forwarded only, never stored.
• Your username, picture and the balls you play, so the other player sees who you are and where your ball goes.

We keep:

• Chase results: who played whom, the target, each player's runs, balls and wickets, the winner and when.
• Blocks: if you block a player, a record that you did, so the two of you are never paired again. Your game also tells our server who you have blocked on Meta, so you are never paired with them either; that list is held only while you are connected.
• Friends in the game: the last 20 players you batted beside, friend requests you send and receive, and who you are friends with. You can only ask someone you batted with, and a friendship needs both of you to agree. Your friends can see whether you are in the game and whether you are batting with someone.
• Reports you make about another player's behaviour, as with other reports.

Who is online and looking for a game is held only in the server's memory while you are connected. Inviting your Meta friends, Meta friend requests and Meta blocks go through Meta's own panels; we do not receive your Meta friends list.

Purchases and add-ons

The game may offer optional purchases (“add-ons”) through the Meta Horizon Store: a one-time Full Game Unlock and, in future, cosmetic items such as custom bat and player skins. When you buy one, the purchase is made entirely in Meta's own checkout and Meta handles the payment under its own terms and privacy policy. The game then asks Meta which add-ons your account owns, and our server stores that list against your player profile (your Meta account ID, the add-on identifier and whether you own it) so the content is unlocked on every headset you sign in on and restored if you reinstall. We do not receive your card or other payment details.

If you bought the paid version of the game before it became free to download, we recognise your account as an existing owner by recording that it owned the game, and unlock the full game for you without a new purchase.

Technical information

• Your IP address and basic request details (time, address requested, response) reach our servers and our network provider whenever the game or your browser connects, and may appear in short-lived server logs used for security and troubleshooting.

In the browser demo, if you unlock unlimited balls

The demo at play.realbatvr.com asks for an email address after its free balls. If you give one, we store:

• Your email address, whether you confirmed it with the code we sent, and when.
• Where you came from: the link or campaign that brought you to the demo (for example a "?ch=" or "utm_" tag in the address, or the website you came from) and the page you first opened.
• Technical details of the request: your IP address, the country our network provider reports for it, your browser's user-agent and headset model, and a random identifier for that browser.
• Your consent: the wording you were shown and when you agreed, and when you unsubscribe.

The codes themselves are stored only in scrambled (hashed) form and expire after ten minutes.

In the browser demo: how it is played

To see where players get stuck and whether the demo is too hard, the demo sends our server a record of what happens while you play. This happens whether or not you allow Google Analytics, and it never includes your email address or your name:

• Events: opening the page, how long the game took to load (or that you left while it loaded), entering and leaving VR, the introduction's steps, the difficulty you chose, the email panel being shown or closed, a code being sent, the store link being opened, and locked features pressed.
• Each ball you face: its number (your 1st, 2nd …), what happened (for example missed, four, bowled), the runs, whether the bat met it, how it came off the bat, its speed and, for a miss, how far from the bat it passed.
• Problems: error messages from the page, and the frame rate in the headset, sampled every 30 seconds.
• Who, roughly: a random identifier kept in your browser's storage (or, if you choose "No thanks", one that lasts only until you close the page), your headset model, the link or campaign that brought you, the country our network provider reports for your IP address, and the IP address itself (kept to stop abuse).

Kept only on your headset

Bat calibration, graphics, sound and comfort settings, and scores waiting to be sent while you are offline are saved on the headset itself. Uninstalling the game removes them.

The website

With your consent where the law asks for it, realbatvr.com uses Google Analytics and Google Ads cookies (see Analytics) to measure our ads and to show our ads to people who visited. Its only form is the creator referral program's (below). Our network provider may set a strictly necessary security cookie.

Like the demo, the site also sends our server a short record of the visit, whether or not you allow Google Analytics: that the page was opened, the site or campaign that brought you, which "Play" button you pressed, the trailer being opened and how much of it was watched, how far down the page you scrolled, and the store link being opened. It comes with the same random identifier, headset model, country and IP address as the demo's record (above); the Play link passes the identifier on to the demo so a visit to both counts once. It never includes your email address or your name.

3. Analytics

realbatvr.com and the browser demo use Google Analytics 4, run by Google, to count visits and see how people use them: which pages and sections are viewed, which buttons are pressed (for example "Play free now", the trailer and how much of it is watched, the store link), and in the demo the events and balls described above. Google receives your browser and device type, screen size, the page and the site you came from, and an approximate location derived from your IP address (Google Analytics 4 does not store IP addresses). It sets first-party cookies named _ga and _ga_<id> that expire after 13 months, and Google keeps the data for up to 14 months.

• Your choice. A banner asks you. In the European Economic Area, the United Kingdom and Switzerland, Google Analytics stays off until you choose "Allow". Elsewhere it is on unless you choose "No thanks". Your choice is kept in your browser.
• Advertising. The same choice covers Google Ads. Where it is on, Google's advertising cookies measure which of our ads lead to a visit or a demo play, and let Google show our ads again to people who visited realbatvr.com (remarketing). "No thanks" turns all of this off. We do not combine analytics with your email address.
• Changing your mind. Change my choice for realbatvr.com (current: …). For the demo, open play.realbatvr.com/?analytics=reset. You can also clear this site's data in your browser, or use Google's opt-out add-on.

The site's and the demo's own statistics (above) are kept on our server for up to two years, then deleted; we look at them in totals (for example, the share of first balls hit), not visitor by visitor.

4. What we do not collect

• Recorded movement and tracking data. The positions of your headset and controllers are used on the headset, moment to moment, to play the game, and are not recorded. Only the results of play are kept (for example, the runs a shot scored). In multiplayer they are passed live to the other player and not kept (see above).
• Camera images. We never receive images of you or your surroundings.
• Recordings of your voice, except for a report. The microphone is used for enabled multiplayer voice chat and optional Voice machine commands (described above). Your voice is passed live to the other player; the only recording we keep is the last two minutes of a conversation when one player reports the other (see "Your voice" above).
• Your email address, except in the browser demo if you choose to give it (see above). Your phone number, contacts, friends list, precise location or payment details. Purchases are handled entirely by Meta; we only keep which add-ons your account owns (see above).
• Health or biometric information.

5. How we use it

Apart from a demo email address you chose to give us, and the Google Ads cookies the banner controls on realbatvr.com, we do not use your information for advertising. We do not make automated decisions that have legal or similarly significant effects on you, and do not use your information to train artificial-intelligence models. Information received from Meta is used only to run this game, never for marketing.

6. Leaderboards

Leaderboards are visible to other players in the game and may be shown publicly, including on our website. An entry shows:

• Everyone: your in-game username (your Meta username unless you chose another; never your Meta display name), your score and rank, and the built-in picture you picked.
• Adults only, and only if you choose it: your Meta profile photo in place of a built-in picture.
• Teens (13 to 17): a teen's profile photo is never shown or stored.

You can remove yourself from leaderboards at any time in the game under Settings → Account → On the board. Your scores are still kept for your own personal bests.

7. Who we share it with

We do not sell or rent personal information. It is handled only by:

We may also disclose information where the law requires it (see section 14), or to a successor if the game is transferred to a new operator, who would remain bound by this policy.

8. Where it is processed

Player profiles and scores are stored on servers in Germany, in the European Union. The operator may access the data from outside the European Union to run and maintain the service. Data in transit passes through Cloudflare's network, which may route it through other countries, including the United States. Where the law requires safeguards for transfers between countries, we rely on our providers' data-processing agreements and the standard contractual clauses they include.

The creator referral program

If you apply to the creator referral program, we keep what you enter (your name, email address, the link name you chose, your channel, where you post, your audience size, your country and your note), when you applied and the IP address and browser you applied from (to stop abuse). We use it to review your application, run your link, email you about the program and pay you.

When someone opens a creator's link (rbcvr.com/name), we record the time, the link, the country our network provider reports, the site they came from, whether the browser is a headset's, and their IP address only as a one-way hash, so that visits can be counted without keeping the address. They are then sent to the Meta Horizon Store through a Meta short link, and Meta's own privacy policy applies there.

9. How long we keep it

• Player profile and scores: for as long as you play the game, until you ask us to delete them, or until the game is retired.
• Purchase records: the list of add-ons your account owns is kept with your profile, until you ask us to delete it. Meta keeps its own payment records under its own policy.
• Session tokens: they expire automatically and expired tokens are removed.
• Demo email address: until you unsubscribe and ask us to delete it, or the demo is retired. After you unsubscribe we keep only the record that you did, so that you are never emailed again.
• Multiplayer: movement is not kept at all. Voice is held in memory for at most ten minutes after you last spoke; the two minutes saved with a report are deleted after 60 days, and from our backups within 60 days after that. Chase results, friends and friend requests: with your profile, until you remove them or ask us to delete them. Recently played: your last 20 only. Blocks: until you ask us to delete your profile.
• Voice machine: the words you say are not kept by us. The per-command record (account identifier, time, outcome, duration, model) is kept with your profile for as long as the feature is in beta, and deleted with your profile on request. Abuse counters expire within a day.
• First-launch progress: deleted with your profile on request; otherwise kept only as long as it is useful for improving the introduction.
• The demo's play statistics: up to two years, then deleted.
• Creator applications: while you are in the program and for up to two years after it ends (for payments and tax), or until you ask us to delete them. A declined application: up to one year.
• Visits to a creator's link: up to two years, then deleted.
• Google Analytics: cookies expire after 13 months; Google keeps the data for up to 14 months.
• Server logs: only as long as needed for security and troubleshooting.

10. Deleting your data

Write to [email protected] from any address and include your Meta username so we can find your account. We will delete your player profile, your leaderboard entries, your scores, your Chase results, friends, friend requests and blocks, your Voice machine records, and your first-launch records from our servers within 30 days and confirm when it is done. We may ask for a simple confirmation that the account is yours before deleting.

For the browser demo, write from the email address you gave, and we will delete it with everything stored with it. The demo's play statistics are not linked to your email; to have them deleted, tell us the identifier your browser keeps (on the demo's page, it is cricket.visitor in the site's storage), or clear the site's data in your browser so a new one is used.

To remove what is kept on the headset, uninstall the game. To manage what Meta itself holds about you, use your Meta account's privacy settings.

11. Your rights

Wherever you live, you may ask us to:

• tell you what we hold about you and give you a copy;
• correct anything that is wrong;
• delete your data;
• stop or limit a use you object to, including appearing on leaderboards;
• provide your data in a commonly used format so you can take it elsewhere.

Write to [email protected]. We answer within 30 days and never charge for or penalise a request.

• European Economic Area, United Kingdom and Switzerland: these rights come from the GDPR and equivalent laws. You may also complain to your local data protection authority.
• India: you have the rights given by the Digital Personal Data Protection Act, 2023, including access, correction, erasure, grievance redressal and nominating another person to exercise your rights. Grievances go to the contact address above.
• California and other US states: we do not sell personal information. Where you have not opted out, Google's advertising cookies on realbatvr.com can count as "sharing" for cross-context behavioural advertising: choose "No thanks" on the banner (or use "Change my choice" above) to opt out. We do not discriminate against anyone for using their privacy rights.

12. Children and teens

RealBat Cricket VR is for players aged 13 and over. It is not directed to children under 13, and accounts that Meta identifies as belonging to a child under 13 are not supported: they are never shown on leaderboards and no profile photo is kept for them.

For players aged 13 to 17, as for everyone, leaderboards show a username (the Meta username by default) rather than a real name. No profile photo is stored or shown for a teen: a teen can only use one of the built-in pictures.

Accounts Meta identifies as a child's are never paired with a stranger in multiplayer. Every player can turn their own microphone off, mute the other player, block them (we never pair the two again) and report them, from the multiplayer page. When a teen is paired at random with someone who is not their friend, their microphone starts off until they turn it on.

If you are a parent or guardian and believe we hold information about your child, write to [email protected] and we will delete it.

13. Security

Connections between the headset and our servers are encrypted. Each sign-in is verified with Meta before an account is trusted. Access to the database and the administration tools is restricted to the operator and protected by authentication. No system is perfectly secure; if a breach affecting your information occurs, we will notify you and the relevant authorities as the law requires.

14. Requests from authorities

If a public authority asks for player data, we check that the request is lawful and made by an authority with the power to ask, challenge it if it is not, disclose only the minimum the law requires, and keep a record of the request and our response.

15. Changes to this policy

If we change how we handle your information we will update this page and the date at the top. If a change is significant, we will also say so in the game or on the store page before it takes effect.

16. Contact

RealBat Cricket VR
[email protected]