VRMonkey

Terms of Service

These Terms govern access to and use of VRMonkey games, applications, websites, and related services, except where a separate agreement or platform-specific terms apply.

1. Scope and acceptance

These Terms of Service (“Terms”) apply to games, applications, websites, and related services developed, operated, or published under the VRMonkey brand (“Services”). By accessing or using a Service, you agree to these Terms to the extent permitted by applicable law. If you do not agree, do not use the relevant Service.

Additional terms may apply to a particular game, promotion, online feature, or platform. If those terms conflict with these Terms, the specific terms govern the relevant subject matter. Platform terms also apply to your use of the applicable store, device, account, and platform services.

“VRMonkey,” “we,” “us,” and “our” refer to the entity responsible for the relevant Service. This is generally Naked Monkey Ltda., a company incorporated in Brazil (CNPJ 18.283.611/0001-50). For a title published or commercially operated by Virtual Monkey Corp. or another entity, the responsible entity will be identified in the applicable store listing, supplemental terms, or other relevant documentation.

2. Eligibility and third-party platforms

You must meet the minimum age and eligibility requirements imposed by applicable law, the game’s age rating, and the platform on which you access it. If you are a minor, your use may require permission or supervision from a parent or legal guardian, as required by applicable law.

Some Services require a third-party account, platform profile, or online service. You are responsible for complying with the relevant platform’s terms and maintaining the security of your account. We do not operate or control third-party platforms and cannot guarantee their continued availability.

3. License and intellectual property

Unless a separate license states otherwise, and subject to your compliance with these Terms, we grant you a limited, personal, non-exclusive, non-transferable, non-sublicensable license to access and use the relevant game or Service for personal, non-commercial entertainment, in accordance with the applicable store and platform rules.

The game and its content—including software, code, art, music, characters, dialogue, trademarks, audiovisual material, and other assets—are owned by or licensed to the applicable rights holders and are protected by intellectual property laws. No ownership rights are transferred to you.

Except where expressly permitted by law, the applicable platform terms, or our written permission, you must not copy, distribute, publicly perform, modify, translate, reverse engineer, decompile, disassemble, circumvent technical protection measures, commercially exploit, or create derivative works from a Service or its content. Nothing in these Terms excludes rights that cannot lawfully be excluded, including applicable statutory exceptions and consumer rights.

4. Online features and user conduct

Online, multiplayer, social, matchmaking, voice, or other connected features may depend on third-party services, platform APIs, network connectivity, and compatible hardware. We may not operate servers or store player data ourselves for a given title. Platform operators or service providers may nevertheless process information to deliver these features; see the Privacy Policy.

When using online features, you must not:

• Cheat, exploit bugs, manipulate matchmaking, or interfere with fair gameplay or service integrity.
• Harass, threaten, impersonate, exploit, or abuse other players.
• Upload or transmit unlawful content, malware, or content that infringes another person’s rights.
• Attempt unauthorized access, disrupt networks or services, or interfere with security measures.
• Use a Service in violation of applicable law or the rules of the relevant platform.

We may investigate credible reports of abuse and take proportionate measures where reasonably necessary, including restricting online functionality or access to a Service, subject to applicable law and any required notice or appeal rights. Platform operators may independently take action under their own rules.

5. Purchases, pricing, and refunds

Games and in-game content may be sold, licensed, or made available through third-party digital stores. The applicable store generally handles payment processing, billing, taxes collected at checkout, delivery, and refund requests according to its policies and applicable law. We do not receive or store your full payment card details merely because you purchase a game through a third-party store.

Prices, availability, included content, and regional offerings may vary by store and territory. Nothing in these Terms limits mandatory consumer rights, statutory warranties, or refund rights available under applicable law. For a purchase made through a store, please contact that store for transaction-specific billing or refund assistance.

6. Updates, changes, and availability

We may release patches, updates, downloadable content, or compatibility changes, and may change or discontinue particular features where reasonably necessary for maintenance, security, legal compliance, platform requirements, or business reasons. Where required by applicable law, we will provide notice, continued support, remedies, or other protections.

We do not guarantee that every Service or online feature will be available at all times, on every device, or indefinitely. Any discontinuation will be handled subject to applicable law, platform commitments, and any specific promises made for the relevant product.

7. Disclaimers and limitation of liability

To the maximum extent permitted by applicable law, Services are provided “as is” and “as available,” without warranties beyond those expressly provided or required by law. We do not guarantee uninterrupted, error-free, secure, or universally compatible operation.

To the maximum extent permitted by applicable law, we will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of profits, revenue, data, goodwill, or business opportunity arising from use of a Service. To the maximum extent permitted by law, our aggregate liability for claims relating to a Service will be limited to the amount you paid for that Service during the twelve months before the event giving rise to the claim, or USD 100 if you paid nothing, whichever limitation is permitted by applicable law.

These limitations do not apply where prohibited by law and do not exclude or limit liability that cannot legally be excluded or limited, including applicable consumer rights, liability for fraud or willful misconduct where such limitation is prohibited, or liability for death or personal injury where applicable law does not permit exclusion.

8. Suspension, termination, and applicable law

You may stop using a Service at any time. We may suspend or terminate access where reasonably necessary for a material breach of these Terms, security concerns, legal obligations, platform requirements, or discontinuation of a Service, subject to applicable law and any required notice or remedies.

These Terms are governed by the laws applicable to the entity responsible for the relevant Service, without depriving consumers of mandatory protections available under the law of their country or place of residence. Any dispute will be handled by a competent court or dispute-resolution body as required by applicable law. Nothing in these Terms restricts a consumer’s right to bring a claim in a forum where such right is mandatory.

If any provision is found unenforceable, the remaining provisions remain in effect to the extent permitted by law. Failure to enforce a provision is not a waiver. We may update these Terms from time to time; material changes will be notified where required by law. Continued use after an effective update constitutes acceptance only to the extent permitted by applicable law.

Privacy Policy

This Policy describes personal data processing associated with VRMonkey games, applications, websites, and related Services. Actual practices may differ by title, platform, feature, and service integration; additional disclosures may be provided where necessary.

1. Who we are and how to contact us

VRMonkey is a game development and publishing brand operated primarily by Naked Monkey Ltda., a company incorporated in Brazil.

• Legal entity: Naked Monkey Ltda.
• CNPJ (Brazilian company registration number): 18.283.611/0001-50
• Privacy and data protection contact: [email protected]

Some titles may be published or commercially operated by Virtual Monkey Corp. Where that entity or another entity determines the purposes and means of processing personal data for a particular Service, the responsible entity will be identified in the relevant store listing, supplemental privacy notice, or other applicable documentation. A publisher is not necessarily the controller of every data-processing activity associated with a game.

Use the email above for all privacy inquiries. Please identify the game, platform, and nature of your request so it can be directed to the appropriate entity.

2. Our approach to personal data

VRMonkey generally does not operate its own player-account systems, multiplayer servers, or centralized databases of player information. Depending on the game and platform, our games may access information made available by a platform or use third-party services to provide multiplayer and other functionality.

• Accessing information: A game may retrieve a display name or platform identifier and use it during gameplay without VRMonkey retaining it in its own systems.
• Third-party processing: Platform operators and service providers may process information to deliver authentication, matchmaking, multiplayer, analytics, crash reporting, or other features.
• Direct storage: If a particular game stores personal data in systems operated by VRMonkey, that processing should be described in a game-specific disclosure or update to this Policy.

The absence of VRMonkey-operated servers does not necessarily mean that no personal data is processed by a game or its service providers. This Policy describes categories that may apply; it does not mean every game uses every category or provider.

3. Information that may be processed and why

The information involved depends on the game, platform, features enabled, permissions, and services integrated into that game.

Platform-provided information

Where supported and authorized by the relevant platform, a game may access platform display names, usernames, account or application-specific identifiers, age-related information used to apply platform age restrictions, basic profile information, friends or party information, invitations, matchmaking or session information, and deep-linking information used to join matches or events. The information actually available varies by platform, permissions, and the game’s implementation.

Multiplayer and session information

When a game uses multiplayer services, relevant information may be processed to establish connections, organize matches, manage sessions, identify players, and support gameplay. Depending on the implementation, this may include player or session identifiers, matchmaking details, connection information, and technical data.

Technical information, analytics, and crash reports

Some games may integrate analytics, diagnostic, or crash-reporting tools. Depending on the integration, those tools may process device and operating-system information, game version, application events, session duration, usage statistics, diagnostic logs, crash reports, performance information, technical identifiers, or network information. These categories apply only where the relevant game actually collects or transmits such information. The specific providers and practices should be disclosed for the relevant title where appropriate.

Game-specific practices currently described by VRMonkey

The following title-specific details reflect the disclosures currently published on the VRMonkey website. They should be updated if a title’s implementation, providers, or data flows change.

• Galaxy Kart: the current game-specific disclosure states that VRMonkey does not store player personal data for this title. Gameplay and platform data are processed by Epic Online Services (EOS) and Meta Platforms, depending on the platform and features used.
• Honey Pot: the current game-specific disclosure states that VRMonkey does not store player personal data for this title. Gameplay and platform data may be processed by Epic Online Services (EOS), Meta Platforms, and Aptabase, depending on the platform and features used.

Platform-provided information may include User ID for account linking and gameplay services; age-related information for platform age restrictions; basic profile data; friends lists, parties, invitations, and matchmaking data for multiplayer; and deep-linking data to join matches or events. The precise data available depends on the platform, permissions, and features implemented in each game.

Analytics and telemetry

Depending on the title and its current implementation, usage and diagnostic information may include installs, sessions, playtime, usage statistics such as daily/monthly active users (DAU/MAU), crash reports, device information, and session data. The providers identified in the current VRMonkey disclosure include Epic Online Services (EOS), Firebase, Aptabase, and Meta Platforms. Aptabase is described in that disclosure as providing privacy-focused analytics with anonymous, aggregated usage metrics and no personally identifiable data; the configuration in each shipped build should be checked to ensure this description remains accurate.

Who processes the information

• VRMonkey / Naked Monkey Ltda.: stores minimal progression data only for Sky Climb (player level and User ID), according to the currently published title-specific disclosure.
• Meta Platforms, Inc.: provides authentication, matchmaking, friends, invitations, parties, deep linking, and other platform features. Meta often acts as an independent controller for its platform processing.
• Epic Games, Inc. / Epic Online Services (EOS): provides multiplayer, matchmaking, authentication, friends-list, and related services. Depending on the activity, Epic may act as a controller or as a processor for certain telemetry contexts.
• Google LLC / Firebase: may provide crash reporting, analytics, messaging, remote configuration, and performance monitoring where integrated into a game.
• Aptabase: is described in the current disclosure as providing privacy-focused analytics based on anonymous, aggregated usage metrics.

Each third-party provider processes information according to its own privacy policy and applicable agreements. The provider list above describes current published disclosures and should be adjusted if a game’s actual integrations differ.

Messages sent to us

If you email us, we process the information you provide, such as your email address, message, and information reasonably necessary to respond, handle a request, or maintain records of our communications.

Purposes

Depending on the game, information may be processed to provide gameplay and multiplayer features; display platform-provided player names or identifiers; enable matchmaking, sessions, and invitations; diagnose crashes and improve stability; understand performance where analytics are enabled; respond to support and privacy requests; protect security and legal rights; and comply with legal obligations.

4. Legal bases, third parties, and disclosures

Legal bases where GDPR or UK GDPR applies

Where the GDPR or UK GDPR applies, the relevant legal basis depends on the actual processing activity. It may include performance of a contract or steps requested before entering a contract; legitimate interests such as security, troubleshooting, fraud prevention, and service improvement where those interests are not overridden by individual rights; consent where required, including for certain optional analytics or technologies; or compliance with a legal obligation. Where consent is required, it may be withdrawn as provided by law without affecting prior lawful processing.

Platforms and service providers

Depending on the title, our games may integrate services provided by Meta Platforms and Meta Horizon OS; Epic Games and Epic Online Services (EOS); Valve and Steam; Sony Interactive Entertainment and PlayStation Network; Microsoft and Xbox services; Google and Google Play; or other multiplayer, analytics, diagnostic, or technical providers disclosed for a particular game.

These providers may process information under their own privacy policies and contractual arrangements. Depending on the activity and arrangement, a provider may act as an independent controller or as a processor/service provider on behalf of another entity. Their roles must be assessed according to the actual processing and contracts. We do not control the independent privacy practices of third-party platform operators. You may need to exercise certain rights directly with the relevant provider.

Sale, sharing, advertising, and other disclosures

VRMonkey does not sell players’ personal information for monetary consideration and does not share personal information for cross-context behavioral advertising, as those terms are defined under applicable US privacy laws. We do not use player information for external advertising as a general practice. Information may nevertheless be processed or disclosed to platforms and service providers when necessary to provide gameplay, multiplayer, diagnostics, support, or comply with law. If a future game introduces advertising, analytics, or other data-sharing practices that trigger additional legal requirements, the relevant disclosures and choices will be provided before or when required.

5. Retention and security

VRMonkey generally does not retain player information in its own systems. The currently published exception is Sky Climb, for which VRMonkey stores the player’s level/progression linked to the player’s User ID. This data is retained for as long as the player’s account is active or until the player requests deletion. The current game-specific disclosures state that VRMonkey does not store player personal data for Galaxy Kart or Honey Pot.

Third-party platforms and service providers determine their own retention practices for information they process under their policies and contracts. For information held independently by a platform or provider, you may need to contact that provider directly.

We take reasonable technical and organizational measures appropriate to the personal data we process and the systems under our control. Third-party platforms and providers apply their own security practices. No method of transmission or storage can be guaranteed completely secure.

6. Your rights and privacy requests

Depending on your location and applicable law, you may have rights to access personal information; receive information about its processing, sources, purposes, and recipients; correct inaccurate information; request deletion; request portability where applicable; withdraw consent; object to or restrict certain processing; and lodge a complaint with a competent data protection authority. Certain US state laws may also provide rights to opt out of the sale or sharing of personal information or targeted advertising, and rights to appeal certain decisions. Rights are subject to applicable conditions and exceptions.

Because VRMonkey generally does not retain player information in its own systems, our ability to retrieve, correct, or delete information processed independently by a platform or provider may be limited. Where appropriate, we will explain this and direct you to the relevant provider. We will not claim to have deleted information from systems that we do not control.

To submit a request: email [email protected] with the subject “Privacy Request.” For a request to delete Sky Climb progression data held by VRMonkey, you may use the subject “Delete My Data” and include the platform (for example, Meta Quest, PlayStation, or Steam) and your username or User ID if available. Please do not send passwords or unnecessary sensitive information.

For Sky Climb progression data held by VRMonkey, we will respond within 30 days and confirm when the data has been deleted. If we cannot locate the data or the request concerns information controlled independently by a platform or provider, we will explain the limitation and, where appropriate, direct you to the relevant provider. We will not claim to have deleted data from systems we do not control. Where applicable law imposes a different deadline or additional requirements, we will comply with those legal requirements.

7. Regional privacy notices

Brazil — LGPD

Where Brazil’s General Data Protection Law (Law No. 13,709/2018, “LGPD”) applies, individuals may exercise the rights provided by that law, subject to its terms and exceptions. Requests may be sent to [email protected]. We will route requests to the entity responsible for the relevant processing and provide information or responses as required by law. The applicable controller will make available the required information about its data protection contact or officer, taking into account any legally available exemption.

European Economic Area and United Kingdom — GDPR / UK GDPR

Where the GDPR or UK GDPR applies, individuals may exercise their applicable rights through the contact above and may lodge a complaint with their competent supervisory authority. Where legally required, the responsible entity will identify its designated representative in the European Union or United Kingdom and provide the representative’s contact details in the applicable privacy notice. Whether a representative or Data Protection Officer must be appointed depends on the relevant legal criteria and actual processing; this Policy does not imply that such an appointment has been made where it has not.

Where international transfers are subject to legal safeguards, the responsible entity and relevant service providers will use an appropriate transfer mechanism or other lawful basis. The applicable arrangements depend on the service and processing involved.

United States — state privacy laws

Some US state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), provide additional rights to eligible residents where the relevant law applies to the business and processing. These may include rights to know, access, correct, or delete personal information; receive information about categories and purposes of collection; and opt out of sale, sharing, or targeted advertising where applicable. VRMonkey does not sell personal information for monetary consideration or share it for cross-context behavioral advertising as described above. Requests can be submitted to [email protected] and will be handled under the applicable law, including verification rules and exceptions. We will not discriminate against individuals for exercising privacy rights protected by applicable law.

This Policy does not represent that every US state privacy statute applies to every VRMonkey game or that every statutory right is available in every circumstance. Applicability depends on statutory thresholds, exemptions, residence, and the actual processing.

8. Children, international transfers, and changes

Children’s privacy

Games may be available to different age groups depending on the title and platform. We do not knowingly collect personal information directly from children in a manner that violates applicable law. Platform age restrictions, parental controls, and consent mechanisms may apply. Where a game is directed to children or additional legal obligations apply to children’s information, game-specific notices and consent mechanisms will be used as required. Parents or legal guardians may contact [email protected] with questions.

International transfers

Platforms and service providers may process information in countries other than the player’s country of residence. Where applicable law requires safeguards for international transfers, the responsible entity and relevant providers will use an appropriate transfer mechanism or other lawful basis.

Changes to this Policy

We may update this Policy to reflect changes to our games, platform integrations, processing practices, or legal requirements. We will update the date at the beginning of the document and provide additional notice or obtain consent where required by law.

9. Contact

For all privacy and data protection inquiries, please contact:

Naked Monkey Ltda. — VRMonkey
CNPJ: 18.283.611/0001-50
Email: [email protected]

For a game published or operated by another entity, please identify the game and platform in your message so we can direct the request to the appropriate responsible entity.