Patches – Privacy Policy

Last updated: October 17, 2026

This policy explains what information Patches collects, why, how long we keep it and what choices you have. It covers the Patches app for Meta Quest and the main Patches server it connects to by default.

Patches is an unofficial, community-run fan project. It is not affiliated with, endorsed by or supported by Against Gravity or Meta.

1. Who we are

Patches is operated by EddyTheAnimator, Slovakia ("we", "us").
Contact: RecRoomPatches@outlook.com

We are the data controller for information processed by the main Patches server.

Community servers: Patches lets you type in the address of a different, community-run server. If you connect to one, that server's operator, not us, controls the data it receives, and its own privacy terms apply.

2. Who can use Patches

Patches is not intended for anyone under 13. During account creation we ask for your date of birth. If it shows you are under 13, the account cannot be completed and the date is not stored. If we learn that someone under 13 has an account, we will delete it.

If you are 13, 14 or 15, or below the age of digital consent in your country (16 in Slovakia), you need permission from a parent or guardian to use Patches, including voice chat. A parent or guardian can contact us at any time to ask what we hold about their child or to have the account deleted.

3. What we collect

Account information (when you create or use an account)

• Username and display name
• Your password, stored only as a salted, one-way hash (we cannot read it)
• Your date of birth
• Your profile settings, such as pronouns, bio, profile picture, privacy and status settings, and your choice to remember your password on a headset

Device login identifier

• When you install Patches, the app creates a random ID and secret on your headset. They let you stay logged in on that device. They do not contain your name, your Meta account or any hardware serial number.
• The server stores the ID together with a hash of the secret, never the secret itself.

Gameplay and content information (created as you play)

• Rooms you build and save, room settings, and images or photos you upload
• Chat messages you send and the people in each conversation
• Friends, clubs, events you create or respond to, and gifts
• Avatar, outfits, inventory, in-game currency balances, levels, experience and cheers
• Rooms you visited recently, and your online status and current room while you play

Voice

• If you allow microphone access, your voice is streamed in real time through our server to the other players in your room. We do not record, store or transcribe voice chat.
• If you talk to the in-game assistant "Roomie", your audio is processed only in the server's memory to detect when you stop talking. Roomie gives a pre-made answer. Your audio is not stored or sent to any AI company.

Technical information

• Server access logs: your IP address, the date and time, and which server feature was requested. We use them for security and troubleshooting.
• App settings profile: your app version, language and whether microphone permission was granted. These are saved with your account so the game can choose the right feature settings.
• Gameplay events the app sends, such as performance and session information. These are written only to the temporary server logs; we do not save them in our database.

Moderation and safety information

• If you report a player or a problem, we keep the report and any evidence attached to it.
• If an account is banned, we keep the related identifiers (such as username or account IDs) only as salted, one-way hashes, so they can be matched without being readable.

What we do not collect

We do not collect your real name, email address, phone number, postal address or precise location. We do not collect payment information (Patches has no real-money purchases). We do not receive your Meta account details. We do not use advertising IDs, advertising trackers or cookies.

4. Information stored only on your headset

The app keeps the following on your headset only: the device login ID and secret, the server address you chose and its connection key, downloaded game content, and a local diagnostic log file. This log is overwritten each time you start the app and is never uploaded. Uninstalling Patches deletes all of this.

5. How we use information

• To run the game: creating and signing in to accounts, multiplayer, voice chat, chat, rooms, events, clubs and saving your progress. The legal basis is performing our agreement with you.
• To keep the service safe and working: preventing abuse, handling reports, enforcing bans, and fixing errors. The legal basis is our legitimate interest in a safe, working service.
• Microphone: only with your permission, which you can withdraw at any time in your headset's settings.
• Date of birth: to make sure players are 13 or older. The legal basis is legal obligation and legitimate interest.

We do not sell your information, use it for advertising or build advertising profiles.

6. Who can see or receive your information

• Other players: they can see your username, display name, profile, avatar, rooms you publish, events you create, messages you send them and your online status, according to your privacy settings. Players in the same room hear your voice.
• Our hosting provider: the server and its database run on Railway (Railway Corporation), which stores and processes the data on our behalf. Railway's servers may be located outside the European Union, including in the United States. Where data leaves the EU, it is protected by safeguards required by law, such as the European Commission's Standard Contractual Clauses.
• When the law requires it: we may disclose information to authorities if we are legally required to, or to protect players' safety.

No other companies receive your information from us.

7. How long we keep information

• Account, gameplay and content data, including chat messages: while your account exists. Deleted within 30 days after you ask us to delete your account.
• Server access logs: kept in rolling log files with a fixed size limit (about 80 MB), where the oldest entries are overwritten automatically. Our hosting provider also keeps a copy of the server's console logs for a limited period under its own retention rules.
• Reports and ban records: for as long as needed to keep the community safe, and no longer than 2 years after the case is closed.

8. Your rights

Under the GDPR you can ask us to:

• Access the information we hold about you, or receive a copy of it
• Correct inaccurate information
• Delete your account and its data
• Restrict or object to certain processing
• Withdraw consent (for example, microphone access) at any time

To make a request, email RecRoomPatches@outlook.com from any address. Include your Patches username. We may ask you to confirm from inside the game that the account is yours. We will respond within one month.

You can also complain to the Slovak data protection authority, Úrad na ochranu osobných údajov Slovenskej republiky (dataprotection.gov.sk).

9. Security

Passwords and device secrets are stored only as hashes. Connections between the app and the server are encrypted (HTTPS/TLS). Access to the server is limited to the operator. No system is perfectly secure, but we take reasonable steps to protect your information.

10. Changes to this policy

If we change this policy, we will update the date at the top and post the new version at the same address. For significant changes we will also show a notice in the game.

11. Contact

RecRoomPatches@outlook.com