California Resident Privacy Notice

Effective Date: November 22, 2023

This California Resident Privacy Notice supplements the information and disclosures contained in our Privacy Policy. It applies to individuals residing in California from whom we collect Personal Information as a business under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 and its implementing regulations, as amended or superseded from time to time (“CCPA”).  

For the purposes of this California Resident Privacy Notice, Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, or as otherwise defined by the CCPA. Personal Information does not include information that is: 

  • Lawfully made available from government records. 

  • Deidentified or aggregated. 

  • Otherwise excluded from the scope of the CCPA. 

The chart below provides​: (a)​ the categories of Personal Information (as defined by the CCPA) we have collected, ​(b) the sources from which we have obtained such Personal Information, (c) the Business or Commercial purposes for which we have disclosed such Personal Information; and (d) the categories of third parties to which we have disclosed such Personal Information ​in the preceding twelve months​. The examples of Personal Information provided for each category reflect each category’s statutory definition and may not reflect all of the specific types of Personal Information associated with each category. 

Category of Personal Information (set forth in Cal. Civ. Code § 1798.140)

Examples of Personal Information We Collect

Source of Personal Information

Business or Commercial Purpose

Third-party Recipients

Identifiers

Name, unique personal identifier, online identifier, internet protocol address, email address, postal address

  • Directly from you

  • Your browser or device when you interact with the Platform

  • Other Users

  • Gaming platforms and infrastructure providers

  • Analytics services

  • Technology service providers

  • Provide you access to the Platform

  • Secure and protect the Platform

  • Communicate with you

  • Maintain, fix, and improve the Platform

  • Understand Platform usage and personalize your experience

  • Facilitate purchases

  • Facilitate VRChat Credit transactions and payout

  • Facilitate promotions

  • Advertise or market to you

  • Meet our legal obligations

  • Security and anti-fraud service providers

  • Hosting and data storage service providers

  • Billing and payment providers

  • Gaming platforms and infrastructure providers

  • Analytics services

  • VRC Creator Economy partners

  • Other Users

  • Government entities (if required by law)

Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))

Name, telephone number

  • Directly from you

  • Provide you access to the Platform

  • Secure and protect the Platform

  • Maintain, fix, and improve the Platform

  • Understand Platform usage and personalize your experience

  • Facilitate purchases

  • Facilitate VRChat Credit transactions and payout

  • Facilitate promotions

  • Advertise or market to you

  • Security and anti-fraud service providers

  • Hosting and data storage service providers

  • Billing and payment providers

  • Gaming platforms and infrastructure providers

  • Analytics services

  • Other users

  • Government entities (if required by law)

Characteristics of Protected Classifications under California or Federal Law

Not collected

N/A

N/A

N/A

Commercial Information

Records of services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

  • Directly from you

  • Your browser or device when you interact with the Platform

  • Other users

  • Gaming platforms and infrastructure providers

  • Analytics services

  • Technology service providers

  • Provide you access to the Platform

  • Secure and Protect the Platform

  • Maintain, fix, and improve the Platform

  • Understand Platform usage and personalize your experience

  • Facilitate purchases

  • Facilitate VRChat Credit transactions and payout

  • Facilitate promotions

  • Advertise or market to you

  • Meet our legal obligations

  • Billing and payment providers

  • Gaming platforms and infrastructure providers

  • Analytics services

  • VRC Creator Economy partners

  • Government entities (if required by law)

Biometric Information

Not collected

N/A

N/A

N/A

Internet or Other Electronic Network Activity Information

Browsing history, search history, and information regarding your interaction with an internet website, application or advertisement.

  • Your browser or device when you interact with the Platform

  • Gaming platforms and infrastructure providers

  • Analytics services

  • Technology service providers

  • Secure and protect the Platform

  • Maintain, fix, and improve the Platform

  • Understand Platform usage and personalize your experience

  • Security and anti-fraud service providers

  • Hosting and data storage providers

  • Gaming platforms and infrastructure providers

  • Analytics services

  • Government entities (if required by law)

Geolocation Data

Approximate location derived from IP address

  • Directly from you

  • Your browser or device when you interact with the Platform

  • Provide you access to the Platform

  • Secure and Protect the Platform

  • Maintain, fix, and improve the Platform

  • Understand Platform usage and personalize your experience

  • Meet our legal obligations

  • Security and anti-fraud service providers

  • Hosting and data storage service providers

  • Gaming platforms and infrastructure providers

  • Analytics services

Sensory data including audio, electronic, visual, or similar information

Voice, head movement, eye movement

  • Directly from you

  • Provide you access to the Platform

  • Understand Platform usage and personalize your experience

  • Hosting and data storage providers

  • Gaming platforms and infrastructure providers

Professional or employment-related information

Details about your profession and place of work

(Applicants and Employees only)

  • Directly from you

  • Recruiters and recruiting platforms

(Applicants and Employees only)

  • Evaluate your application

  • Human Resource management

  • Payroll and benefits administration

  • Meet our legal obligations

  • Security and anti-fraud service providers

  • Hosting and data storage providers

  • Recruiters and recruiting platforms

  • Government entities (if required by law)

Non-Public Education Information (as defined in 20 U.S.C. 1232g; 34 C.F.R. Part 99)

Not collected

N/A

N/A

N/A

Inferences Drawn from Personal Information

Consumer profiles reflecting a consumer’s preferences.

  • Your browser or device when you interact with the Platform

  • Gaming platforms and infrastructure providers

  • Analytics services

  • Technology service providers

  • Maintain, fix, and improve the Platform

  • Understand Platform usage and personalize your experience

  • Advertise or market to you

  • Security and anti-fraud service providers

  • Hosting and data storage service providers

  • Analytics services

  • Government entities (if required by law)

“Sale” and “Sharing” of Personal Information  

In the preceding twelve months, we have not “sold” or “shared” any California resident’s Personal Information, as those terms are defined in the CCPA. 

Your California Privacy Rights  

If you are a California resident, you may exercise the following rights.  

Right to Know and Access. You may submit a verifiable request for information regarding the: (1) categories of Personal Information collected, sold, or disclosed by us; (2) purposes for which categories of Personal Information are collected or sold by us; (3) categories of sources from which we collect Personal Information; (4) categories of third parties with whom we disclosed or sold Personal Information (if applicable); and (5) specific pieces of Personal Information we have collected about you during the past twelve months. 

Right to Delete. Subject to certain exceptions, you may submit a verifiable request that we delete Personal Information about you. Please note that you can delete your own account once you are logged in to the Platform by following these instructions.

Right to Correct Inaccurate Information. Subject to certain exceptions, you may submit a verifiable request that we correct inaccurate Personal Information about you. Please note that you have the ability to edit some account and profile information once you are logged in to the Platform.  

Right to Limit Use and Disclosure of Sensitive Information. You have the right to restrict our use of your “Sensitive Personal Information”, as that term is defined in the CCPA. We do not use or disclose Sensitive Personal Information for purposes other than those specified in Section 7027(m) of the CCPA and therefore do not facilitate this opt out.  

Right to Opt Out of “Sale”. You have the right to opt out of VRChat “selling” your Personal Information, as that term is defined under the CCPA. We do not sell your Personal Information and therefore do not facilitate this opt out. 

Right to Opt Out of “Sharing”. You have the right to opt out of VRChat "sharing” your Personal Information for cross-context behavioral advertising. We do not share Personal Information for this purpose and therefore do not facilitate this opt out. 

Verification. Requests for access to or deletion of Personal Information are subject to our ability to reasonably verify your identity in light of the information requested and pursuant to relevant CCPA requirements, limitations, and regulations. We may seek to verify your identity by asking you to log in to your password-protected account. If we are unable to verify your identity in this way, we may ask for additional information. 

Right to Equal Service and Price. You have the right not to receive discriminatory treatment for the exercise of your CCPA privacy rights, subject to certain limitations. 

Shine the Light. We do not rent, sell, or share Personal Information with nonaffiliated companies for their direct marketing uses as contemplated by California’s “Shine the Light '' law (Civil Code § 1798.83), unless we have your permission. 

Submit Requests. To exercise your rights under the CCPA, please submit a ticket at https://vrch.at/support or write to us at 548 Market St, PMB 93053, San Francisco, CA 94104-5401. 

Authorizing an Agent. To authorize an agent to make a request on your behalf, please send a written authorization signed by you and the authorized agent to us via the contact information listed in the “How to Contact Us” section below. If permitted by law, we may take additional steps to verify your identity and relationship to the authorized agent. 

Do Not Track

There is no accepted standard on how to respond to Do Not Track signals, and we do not respond to such signals.

How to Contact Us

If you have any questions, comments, or concerns about this notice or our processing activities, or you would like to exercise your privacy rights, please submit a ticket at https://vrch.at/support or write to us at 548 Market St, PMB 93053, San Francisco, CA 94104-5401.