Legal

Privacy Policy

This policy covers Seventh Head Games’ website and the games and applications published by Seventh Head Games that link to this policy. The summaries below identify the reviewed practices of each listed game.

Last updated: November 6, 2026

1. Controller

Controller
Vasas József, Individual entrepreneur
Studio name
Seventh Head Games
Registered office
9735 Csepreg, Kossuth utca 17., Hungary

2. Website, email and embedded video data

The studio website has no user accounts, forms, first-party analytics, advertising integration, newsletter or marketing database. We do not set our own marketing cookies or operate a proprietary website backend.

When you visit, Cloudflare may process your IP address, requested URL, date/time, browser or user-agent and security-related request metadata to deliver the site, maintain availability and prevent abuse. We do not use that information for profiling or marketing.

If you contact us by email, we process your email address, message, metadata and information or attachments you voluntarily send. Please send only what is needed to answer your request.

YouTube players and external links

Some game pages contain YouTube videos using the privacy-enhanced youtube-nocookie.com player. Players are lazy-loaded: when the browser loads a frame, including as you scroll near it, it connects to YouTube/Google even before you press Play. This exposes technical request data such as your IP address, browser/device information and the referring site origin. Playback can involve additional requests, player storage and data processed by YouTube under its own terms.

Privacy-enhanced mode does not mean that no data is sent to a third party. We do not autoplay videos. Links labelled “Watch on YouTube”, creator links and Store links open the relevant external service when selected. Those services handle their own data and account state. See Google’s Privacy Policy and YouTube’s embedded-player information.

3. Game data and reviewed differences

The descriptions in this section apply only to the games and reviewed versions identified below. They are not permission for future, undisclosed data collection. A new account, SDK, network service or device-data feature needs its own review and an updated description before release.

Local game progress and preferences

The reviewed games assigned to this profile store progress, results, unlocks, tutorial state and gameplay, audio or comfort preferences in the app’s private storage on your device. The examples and storage differences for each game are listed below.

They have no studio account or proprietary gameplay backend. The reviewed versions do not automatically send saves or local diagnostics to Seventh Head Games. Data you voluntarily send for support is handled separately.

Unity Analytics, Ads and Cloud Diagnostics are disabled in the reviewed configurations; no active third-party analytics, advertising or remote crash uploader was found. Platform services and device features are described separately for each game. This profile does not assert that all platform or system services are offline.

Data handling and device features

The links in each game summary show which of the following descriptions apply.

Local save files and recovery copies

Progress and preferences are stored in private local JSON saves, with temporary, backup or recovery copies where applicable. Clearing only active progress need not remove those copies.

Meta entitlement check

The game asks Meta’s platform service whether the current user is entitled to the application. The reviewed code requests no Meta user ID or profile and does not call cloud-save, platform leaderboard, achievement or in-app purchase APIs. The entitlement result is used in memory, not stored or sent to a studio server. Meta handles its platform service under its own terms.

System-composited mixed reality

Mixed reality uses OpenXR passthrough composition supplied by Meta Quest. The system composes the environment view. The reviewed app does not request camera/headset-camera permission, read raw camera images, encode pixels, or save or transmit camera imagery.

Local startup and XR diagnostic files

Local startup and passthrough diagnostics include timestamps, app version, platform, graphics/XR state, device name, status flags, errors and stack traces. A one-time technical HMD/camera transform is recorded; this is not a movement history or camera image. These files are not automatically sent to the studio.

Development-only playtest logs

Editor or Development builds can write a local playtest log with a random session ID, mode/stage, seed, result, performance and gameplay measurements. This is disabled in non-development Store builds. The random session ID is not a Meta account ID.

No application-level Meta Platform integration

The reviewed runtime does not call Meta Platform account, entitlement, user profile, achievement, leaderboard, purchase or cloud-save APIs. Horizon OS, the Store, system browser and any system-managed backup are separate services under Meta’s terms.

No raw camera or microphone access

The reviewed APK requests neither Android camera nor microphone permission, and the reviewed game code does not access raw headset-camera images, microphone audio or passthrough images.

XR input used during play

Headset/controller poses and controller input are processed in memory to run VR interaction. The reviewed game does not save movement histories or send these inputs to the studio.

Local Unity and Android diagnostics

Technical events such as startup, game version, tracking/focus state, menu actions, alignment, performance, memory warnings or exceptions can appear in the device’s Unity/Android log. These follow device log handling; the reviewed game has no automatic studio log uploader.

Private application preferences

Progress, checkpoint and preference values are saved in Unity PlayerPrefs, backed by the app’s private Android preferences.

Orbital Divide

Uses the Local game progress and preferences profile. Data examples include:

  • Campaign progress and completion, scores, times, stars, coverage and wall-attempt information.
  • Endless records: difficulty, waves, score, seed, ruleset version, duration, completion reason and time.
  • Unlocked/selected themes and tutorial or studio-intro indicators.
  • Dominant hand, play-area settings, haptics, audio, high contrast, VR/MR mode and difficulty.

Headset and controller poses and buttons/joystick input are handled in memory for VR interaction. Apart from the one-time technical transform described under local diagnostics, the game does not store or transmit them to the studio.

The reviewed Android configuration includes INTERNET permission. Meta handles entitlement through its platform service; user-initiated external links open the system browser.

Review scope: 0.3.9-prod-sim.1 (19), plus October 2026 entitlement source review · October 4, 2026. Local-storage and MR audit of the August 14 build; August 23 audit and October 4 source review cover entitlement. Not a new audit of the current Store binary.

Reset and deletion instructions

HOPROUTE VR

Uses the Local game progress and preferences profile. Data examples include:

  • Campaign unlocks, completion, stars and best results; narrative/tutorial state and the last played level.
  • Collected orb identifiers and totals, Endless distances and badges, unlocked/equipped ability gloves.
  • Music and effects volumes, movement mode, snap turn and comfort vignette.

The reviewed APK declares INTERNET permission. No runtime HTTP, socket, WebSocket or proprietary server requests were found. External menu links open the system browser, including studio pages and another game’s Store listing.

The shared project includes the Meta Platform SDK package and advertises passthrough capability, but the reviewed game runtime does not initialize the platform SDK or access passthrough images. Raw camera-image support is disabled.

Review scope: 0.13.1 (46) · October 4, 2026. Source, project settings and build 46 APK reviewed on October 4, 2026.

Reset and deletion instructions

Save XMAS! Build & Defend

Uses the Local game progress and preferences profile. Data examples include:

  • Unlocked towns, the town to resume, campaign completion, current-run scores, personal/per-town records and earned badges.
  • Defence checkpoints: positions of built tree sections, build score and rescue or placement-assistance flags. These positions describe the tree, not your movements.
  • Tutorial and guide-viewed state, sound/music, landing guide, cabin lift style, seated mode, body visibility and northern lights.

OpenXR supplies headset and controller positions/orientations, aim, buttons, grips, triggers and thumbsticks to operate the view, menus, crane and blaster. The game does not request tracked hand skeletons.

The APK declares INTERNET permission. Studio and other game Store links open only after a button press; the fixed URLs include no saved scores, player identifiers or tracking data.

Review scope: 0.11.0 (13) · November 5, 2026. Existing November 5 source, dependencies, settings and APK audit. No network traffic measurement or Meta-account data inspection was performed.

Reset and deletion instructions

4. Purposes and legal bases

  • Website delivery and security: serving pages, maintaining availability and preventing abuse, based on our legitimate interest in a secure and reliable site (GDPR Article 6(1)(f)).
  • Email support: responding to requests and retaining necessary correspondence, based on steps at your request or performance of a contract (Article 6(1)(b)), legitimate interests in support and business communication (Article 6(1)(f)), or a legal obligation where applicable (Article 6(1)(c)).
  • Reviewed local game functions: saving progress/preferences, providing XR interaction and diagnosing issues locally. Where the GDPR applies, performance of the requested game service and legitimate interests in stable software (Articles 6(1)(b) and 6(1)(f)) are the relevant bases.
  • Entitlement checks in the games identified above: verifying access through Meta, based on performance of the game service and legitimate interests in preventing unauthorized access (Articles 6(1)(b) and 6(1)(f), where applicable).

Third-party video and platform services process data under their own applicable terms and legal bases. The use of a privacy-enhanced player does not remove any applicable consent requirement.

5. Storage and retention

This static website has no application database. Cloudflare retains technical request/security information according to the service configuration and its applicable policies. YouTube/Google and Meta handle their service data according to their own policies.

Support messages stay in the relevant email systems only as long as needed to handle the request, meet legal obligations, protect legal claims or maintain necessary business records, after which they are deleted or archived under applicable retention requirements. The studio cannot remotely erase a save that has never been sent to it.

Orbital Divide: Local saves, preferences, backups and diagnostics remain until changed or removed. The startup log is overwritten at launch and may be extended during that session.

HOPROUTE VR: The local save and temporary/backup recovery copies remain until replaced or application data is removed. Unity/Android messages follow device log handling.

Save XMAS! Build & Defend: Progress and settings remain in private application preferences until replaced or cleared. Diagnostic messages follow device log handling.

6. Recipients and international transfers

Cloudflare provides hosting, content delivery and security. Email delivery and storage are handled by the sender’s and recipient’s email providers. Google/YouTube receives requests for embedded videos. We do not sell personal data or provide it to advertising partners for our own marketing.

Meta Quest, Horizon OS, the Meta Store and system browser are separate Meta services; the game summaries identify any app-level platform calls. System backups, if enabled and supported, are distinct from an in-game cloud-save integration.

Providers may operate in the European Economic Area and other countries. Applicable transfer safeguards and processing arrangements depend on the provider, service and configuration. See Cloudflare’s privacy information, Google’s privacy information and Meta’s privacy information.

7. Deletion and reset

Data sent to the studio: email [email protected] with enough information to identify the correspondence. Limited information may need to be retained for legal obligations or claims.

Local game data: an in-game restart or reset is not necessarily a complete deletion. Use the game-specific instructions below. Clearing the app’s data or uninstalling it removes its local app storage; platform-managed backups and device/system logs have separate controls and retention. A backup may restore progress after reinstallation. For data held by Meta or Google, use that provider’s account and privacy controls.

Orbital Divide

RESET PROGRESS resets active progress and keeps gameplay and accessibility settings. Clearing application data or uninstalling the app removes local saves, backups and diagnostic files.

HOPROUTE VR

To remove the local save and recovery copies, clear the application data in Meta Quest settings or uninstall the app.

Save XMAS! Build & Defend

Starting a new campaign resets the current run’s town scores and defence checkpoints and returns you to town one. It keeps records, unlocks, badges, earlier campaign completion, tutorial flags and preferences. Retry Defence only restarts the raid from the completed tree; Reset Consoles only repositions controls. Clear this app’s data in Quest settings or uninstall it to remove local preferences. Meta-managed system backups, if enabled, may restore progress on reinstall and must be managed separately.

8. Your rights and complaints

Subject to the GDPR and its conditions, you may request access to, correction or deletion of your personal data, restriction of processing, data portability, and you may object to processing based on legitimate interests. Where processing relies on consent, consent may be withdrawn at any time without affecting earlier lawful processing.

Send requests to [email protected]. We may ask for information necessary to verify your identity and locate the relevant data.

You also have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9-11, Hungary; postal address: 1363 Budapest, Pf. 9.; email: [email protected]; website and complaint submission information: NAIH contact page. The email address is for enquiries; consult NAIH’s current procedure for lodging a complaint. You may also contact the supervisory authority in the country of your habitual residence, workplace, or the place of the alleged infringement.

9. Children

The studio website does not provide accounts or forms to collect children’s data. Games’ data practices are described above, including any platform-service differences. Embedded videos and external services have their own policies. If a parent or guardian believes that a child sent personal data to the studio by email, contact us to request deletion.

10. Contact

For privacy questions or data requests, contact Vasas József / Seventh Head Games at [email protected].