Datenschutzerklärung für QuizMe VRR
Privacy Policy for QuizMe VR
Last updated: October 14, 2026
1. Controller and Contact
The controller responsible for the processing of personal data in QuizMe VR is:
EAH VR – Andreas Hoffmann
Trollingerstr. 14
74374 Zaberfeld
Germany
Email for privacy-related inquiries: info@eah-vr.com
2. Overview
QuizMe VR is a virtual reality word game for Meta Quest. Both single-player and multiplayer modes may use spoken answers. An internet connection is required for automatic speech recognition.
Word lists are also stored locally within the app. If the online word service is unavailable, the app can fall back to these local word lists. Speech recognition itself, however, requires an internet connection.
Additional services provided by Meta and Unity are used for multiplayer functionality.
3. Meta Account and Platform Features
When QuizMe VR starts, the app may use the Meta platform to verify whether the Meta account being used is authorized to access the app.
Where required for the respective function, QuizMe VR may process Meta platform data including an app-specific user ID, the public Meta/Quest display name, profile image information, and data required for avatars, invitations, achievements, leaderboards, reporting, and blocking functions.
In multiplayer mode, other participants may be able to see your display name, profile image, and avatar where these features are available and enabled.
Results from completed matches may be submitted to Meta leaderboards. Achievements may also be unlocked through the Meta platform. Their visibility may depend on your Meta account settings.
Legal basis: Article 6(1)(b) GDPR, insofar as the processing is necessary to provide the game and platform functions requested by you.
Meta may also process certain platform and account data under its own responsibility and in accordance with Meta's own privacy policies and developer terms.
4. Microphone, Speech Recognition and Quiz Answers
When you submit a spoken quiz answer, QuizMe VR records audio through the Meta Quest headset microphone for the limited duration of the answer period.
The audio data is transmitted in encrypted form to a Cloudflare Worker operated on our behalf. The Worker is used in particular to secure access to the speech-to-text service and to limit the number of speech requests.
The recording is then transmitted to ElevenLabs Speech-to-Text for transcription. ElevenLabs converts the recording into text. QuizMe VR uses the returned transcript solely to evaluate the spoken quiz answer.
QuizMe VR does not store the audio recording or the resulting transcript in its own persistent database after processing has been completed.
The Worker used by us is not designed to permanently log the contents of audio recordings or transcripts.
For the purpose of limiting speech requests, the app-specific Meta user ID and time-based request counters may be processed. These counters are used solely for abuse prevention and cost control and are regularly deleted or reset.
Please do not provide personal, confidential, or particularly sensitive information when answering quiz questions.
Legal basis: The processing of the audio recording for recognition of your quiz answer is based on Article 6(1)(b) GDPR. Technical security, request limitation and prevention of misuse are based on Article 6(1)(f) GDPR. Our legitimate interest lies in ensuring the security and proper functioning of the service and protecting it against abusive or automated use.
Microphone permission can be managed in the Meta Quest system settings. Speech recognition cannot be used without microphone permission or an internet connection.
Cloudflare
Cloudflare may process technically necessary information, including IP addresses and connection data, when operating the Worker.
Cloudflare provides a Data Processing Addendum for its services. Where international data transfers are necessary, Cloudflare uses recognized transfer mechanisms such as the EU Standard Contractual Clauses and other applicable safeguards.
If Cloudflare Workers logging is enabled, log retention depends on the applicable Cloudflare plan and configuration.
ElevenLabs
ElevenLabs processes the audio file and the resulting transcript in order to provide speech recognition.
We currently do not use a confirmed Zero Retention configuration for this service. Depending on the applicable ElevenLabs service configuration and contractual terms, audio and transcription data may therefore be processed and retained by ElevenLabs.
According to ElevenLabs' current documentation, customer data may be stored in the United States unless a different data residency configuration has been agreed.
ElevenLabs provides contractual safeguards for international data transfers, including a Data Processing Addendum and Standard Contractual Clauses where applicable.
5. Multiplayer and Voice Transmission
QuizMe VR uses Unity Gaming Services, including Unity Authentication and multiplayer, lobby and relay services, for multiplayer sessions.
The data processed may include a technical Unity player ID, IP address, session or room assignment, and additional technical information required to establish and maintain multiplayer connections.
When speaking after pressing the buzzer, or while using the designated push-to-talk function, your voice may be transmitted to the other players in the current game room.
QuizMe VR does not create its own permanent recording of this voice communication.
Locally muting another player only prevents that player's voice from being played on your own device. It does not automatically stop that player's voice from being transmitted to other participants.
Legal basis: Article 6(1)(b) GDPR, insofar as the processing is necessary to provide the multiplayer functionality requested by you.
Unity may process personal data on our behalf in connection with the relevant Unity Gaming Services.
6. Online Word Lists
QuizMe VR contains local word lists stored within the app.
The app may additionally retrieve word lists or word packages from a service provided through Cloudflare. Technically necessary connection data, in particular the IP address, may be processed by Cloudflare in connection with these requests.
No Meta user ID is required to retrieve the word lists.
If the online service is unavailable, QuizMe VR can use the word lists stored locally within the game.
Legal basis: Article 6(1)(b) GDPR, as the processing is necessary to provide the game content.
7. Reporting and Blocking Players
The functions for reporting and blocking players use the corresponding features provided by the Meta platform.
For this purpose, the app-specific Meta user ID of the relevant player may be transmitted to Meta. The actual handling of the report or block takes place within the Meta system.
QuizMe VR does not store the text or contents of reports submitted through the Meta system in its own database.
8. Retention Periods
QuizMe VR does not permanently store submitted voice recordings or speech-to-text transcripts in its own database.
Temporary counters used to limit speech requests are regularly deleted or reset once they are no longer required for abuse prevention and request limitation.
Data processed by Meta, Unity, Cloudflare or ElevenLabs may additionally be subject to the respective retention periods and contractual provisions of those providers.
For Unity multiplayer services, technical data may be retained in service logs for a limited period in accordance with Unity's applicable documentation and service terms.
Cloudflare Workers logs, where enabled, are subject to the retention period applicable to the Cloudflare plan being used.
We currently do not use a confirmed Zero Retention configuration for ElevenLabs. The retention period for data processed by ElevenLabs therefore depends on the applicable service configuration, contractual terms, Data Processing Addendum and privacy policy.
9. Your Data Protection Rights
Where the GDPR applies, you may have the following rights in particular:
-
- the right to access your personal data, -
- the right to rectification of inaccurate data, -
- the right to erasure, -
- the right to restriction of processing, -
- the right to data portability where the statutory requirements are met, -
- the right to object to processing based on legitimate interests, and -
- the right to withdraw consent at any time with effect for the future where processing is based on consent.
To exercise your rights, please contact:
info@eah-vr.com
Where data is processed exclusively by a platform provider under its own responsibility, you may also exercise your rights directly with Meta, Unity or the relevant provider.
You also have the right to lodge a complaint with a data protection supervisory authority.
Our competent supervisory authority is:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
(Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg)
Heilbronner Straße 35
70191 Stuttgart
Germany
10. Age Group and Children
QuizMe VR is intended for teenagers and adults aged 13 and over and is not specifically directed at children under the age of 13.
The app is therefore intended for the Meta age group “Teens and Adults (13+)”.
If QuizMe VR is made available to younger users in the future, we will implement the necessary technical, organizational and data protection measures before making such a change and will update this Privacy Policy accordingly.
11. International Data Transfers
Some of the service providers mentioned in this Privacy Policy, or their subprocessors, may be located outside the European Economic Area or may process data outside the European Economic Area.
Where a legal transfer mechanism is required, such transfers may be based, depending on the provider and the circumstances, on an adequacy decision, the EU-U.S. Data Privacy Framework, the European Commission's Standard Contractual Clauses and/or other legally recognized safeguards.
Cloudflare and ElevenLabs provide contractual safeguards for international data transfers as part of their respective Data Processing Addenda.
Unity Gaming Services are subject to Unity's applicable privacy terms, Data Processing Addendum and international data transfer safeguards.
Where Meta processes data under its own responsibility, Meta's own privacy and international data transfer provisions apply.
12. Changes to this Privacy Policy
We may update this Privacy Policy if the functionality of QuizMe VR, the service providers used, or the nature of the data processing changes.
The current version of this Privacy Policy will be available on our website at:
https://eah-vr.com/