ForestVR / ANWAR Studio Official

Privacy policy

How ForestVR uses information, what stays on your device, and how to exercise your privacy choices.

Last updated: 16 October 2026

Privacy at a glance. Your progress and preferences are saved on your device. Online play uses Unity services and shares movement and game state with your session. Voice chat is optional. ForestVR does not intentionally save recordings of your conversations or use advertising trackers.

1. Who is responsible

This policy covers the ForestVR game on Meta Quest and Windows, and this ForestVR website. The data controller is Pawel Sopala, operating as ANWAR Studio Official ("we", "us"). For privacy, access or deletion requests, contact psopala93@gmail.com.

Meta, Unity and the website hosting providers also process some information under their own responsibilities and policies. Their notices are linked below. This policy explains our own use of data; it does not replace those notices.

2. Data used by the game

Progress and preferences

ForestVR stores your saved game and settings locally. This includes collected mushrooms, baskets and items, cooking results, challenges, the world seed and time of day, your position and travelled route within the virtual forest, save timestamps, sound and microphone preferences, dominant hand, seated mode and height calibration. A virtual route is not your real-world GPS location. Device or platform backup features may separately retain copies under their own settings.

Online multiplayer

When you host or join an online game, Unity Authentication creates or reuses a pseudonymous player identifier and authentication credentials. You do not need to give ForestVR a name, email address or password to play. "Anonymous sign-in" does not mean that no personal data is processed: the services use a player identifier and connection information such as your IP address.

Unity Lobby and Relay connect players using room and session identifiers, join codes, technical connection information and the host's player identifier. Room-directory metadata can be discoverable by clients of the same game. Share your room code only with people you intend to invite. Service components are initialized during application startup; choosing solo does not guarantee that the engine or platform makes no service requests.

Movement and interactions

The game reads headset, controller and, when enabled, hand-tracking data to support movement and interaction. In multiplayer, the host and other participants receive virtual head and hand positions and rotations, avatar and posture state, held items, equipment and shared gameplay actions. This lets them see your character, find you on the map and interact with the same world. Full hand-joint arrays are used locally for controls; they are not included in the game's inspected multiplayer pose messages.

ForestVR does not use these inputs to identify you biometrically. The game does not request GPS location, eye tracking, contacts or a feed from the headset's room cameras. The headset's own tracking system processes sensor information separately.

Optional microphone and live voice

Voice chat requires microphone permission and an enabled microphone. In push-to-talk mode, capture occurs while you hold the talk button in a multiplayer session. If you select always-on, capture continues while the multiplayer session is active and the app is focused. You can switch the microphone off in the main menu or revoke its permission in device settings. Solo play does not transmit voice through this system.

Audio passes through the session host and Unity Relay in online play. The host forwards it to nearby participants for spatial playback within approximately 60 virtual metres. The host's software receives guest voice packets before applying that forwarding limit. Audio is held briefly in memory for capture and playback; the game does not intentionally write voice recordings to storage. Other people may independently record what they hear using their own devices or platform features.

Technical information and support

Connection services and the device platform may process IP addresses, device or software information, connection failures and operational diagnostics. The game also writes local diagnostic logs, which can contain room codes, connection addresses and performance counters. We do not automatically upload those local logs through a custom ForestVR reporting service. If you email us, we process your email address, message and any files you choose to send to answer your request.

ForestVR has no integrated advertising SDK or developer-operated behavioural analytics service. We do not sell personal data, use it for targeted advertising or make decisions with legal or similarly significant effects solely through automated profiling.

3. Why we process information

  • To provide the game and requested online features: local progress, controls, authentication and session synchronization. Where applicable, the legal basis is performance of our agreement with you (GDPR Article 6(1)(b)).
  • To provide optional voice chat: your permission and affirmative choice to use the microphone; where consent is required, Article 6(1)(a). You can withdraw it by turning off the microphone or revoking permission without losing solo gameplay.
  • To deliver and protect the website, diagnose faults and answer support: our legitimate interests in operating a functional, secure service (Article 6(1)(f)), subject to your rights.
  • To meet legal obligations and handle rights requests: Article 6(1)(c), where applicable.

Without online identifiers and connection data, multiplayer cannot operate. Microphone access is optional. Refusing it prevents voice transmission, not mushroom picking or other non-voice gameplay.

4. Who receives data

Unity provides Authentication, Lobby and Relay. Other session participants, including the host, receive the gameplay and voice data necessary for shared play. Meta provides the headset, store, permissions and platform services. GitHub Pages hosts this version of the website. GitHub logs visitors' IP addresses for security purposes. Our contact mailbox is provided by Google Gmail. These services may process necessary technical information even though this website has no advertising or analytics scripts.

Online Relay transport is configured to use DTLS encryption. This is not a promise of end-to-end encryption between players, because the session host processes shared data. Local-network play uses a separate direct connection and should be used on a network you trust.

Providers may process data in countries outside your country of residence, including outside the EEA or UK. Applicable transfer protections may include adequacy decisions and standard contractual clauses. Relevant provider terms and privacy information describe these arrangements; contact us if you need information about safeguards applying to your data.

5. How long data is kept

  • Local saves and preferences: until overwritten or removed from app storage. Starting a new game replaces current progress but does not remove an existing manual save. Clearing app storage does not by itself delete cloud-service records or platform backups.
  • Live movement and voice: transient session data and short playback buffers. Peers and voice streams are cleared when leaving a session; selected virtual-world state can remain in a local game save.
  • Room metadata: the game attempts to remove its directory entry when the host closes the room. Interrupted sessions may remain until the service's inactivity cleanup runs.
  • Unity service records: Unity currently documents a 30-day retention period for Relay personal data and up to 30 days for player identifiers in Lobby logs. Authentication is separate: leaving a room or clearing local credentials does not itself delete the Unity player account. See the service links below.
  • Support correspondence and website operational information: only for as long as needed to resolve the request, operate and protect the service, and meet any applicable legal obligations. Providers apply their own documented retention and security processes to data they control.

6. Access, deletion and your choices

To request access to or deletion of ForestVR data, email:

psopala93@gmail.com

Use the subject “ForestVR privacy request”. Tell us which platform you use and what you want us to do. This contact route is available regardless of where you live.

Because multiplayer does not link your email to its anonymous Unity identifier, an email address alone may not let us locate the relevant account. We may request limited additional information to identify the record and verify the request. Do not send passwords, authentication tokens or complete credential files. We will explain any verification needed and work with the relevant service provider to handle an identifiable request.

You can remove local saves and settings using your device's app-storage controls where available. Before doing so, contact us if you also want cloud-side deletion and might need help identifying your anonymous account. ForestVR currently has no in-game cloud-account deletion button. Uninstalling, starting a new game or leaving a room should not be treated as a cloud-deletion request. Platform backups are managed separately through the platform's controls.

Depending on applicable law, you may have rights of access, correction, erasure, restriction, portability and objection, and a right to withdraw consent without affecting earlier lawful processing. We respond within applicable legal time limits and explain any lawful exceptions. You may complain to your local data-protection authority; in Poland this is the President of the Personal Data Protection Office (UODO).

7. This website

The pages do not contain advertising trackers, analytics scripts, a newsletter form or third-party video embeds. Images, styles and the trailer are served from this site's hosting. The pages do not set optional cookies or store a visitor profile. Hosting providers may process IP addresses, browser/request information and necessary security or access-control cookies to deliver and protect the site.

Contact links open your own email application; no message is sent merely by visiting or clicking the link. External links lead to services with their own privacy policies.

8. Younger players and security

ForestVR is not specifically directed at young children. Players must meet the platform's age requirements, the game's store age rating and applicable local rules. Parents or guardians should supervise online interactions where appropriate. Contact us if you believe information from a child has been processed without a required authorization, so we can investigate and arrange deletion where appropriate.

We limit processing to the purposes described here and use platform permissions and service security controls. No internet service can guarantee complete security. Do not share sensitive personal information in voice chat or publish your room code when you want a private session.

9. Provider information and updates

We update this policy when our practices or services change. The date at the top identifies this version. Material changes will be communicated through the game or this website as appropriate. Previous published versions will be retained. Questions can always be sent to psopala93@gmail.com.