U.S. State Data Privacy Laws Disclosure

Effective Date: November 18, 2024

This U.S. State Data Privacy Laws Disclosure (“Disclosure”) supplements the information and disclosures contained in our Privacy Policy. It applies to individuals residing in U.S. states that have passed data privacy laws applicable to VRChat and is specifically intended to provide a Notice at Collection under the California Privacy Rights Act. It is also intended to provide supplementary disclosure to individuals located elsewhere. 

For the purposes of this Disclosure, Personal Information means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, or as otherwise defined by an applicable state privacy law. 

Additional Disclosures

The chart below provides: (a) the categories of Personal Information we have collected, (b) the sources from which we have obtained such Personal Information, (c) the Business or Commercial purposes for which we have disclosed such Personal Information; and (d) the categories of third parties to which we have disclosed such Personal Information in the preceding twelve months. The examples of Personal Information provided for each category reflect each category’s statutory definition and may not reflect all of the specific types of Personal Information associated with each category.

  1. Identifiers

    1. Examples of Personal Information We Collect

      1. Name; unique personal identifier; online identifier; internet protocol address; email address; postal address

    2. Source of Personal Information

      1. Directly from you; your browser or device when you interact with the Platform; other Users; gaming platforms and infrastructure providers; analytics services; technology service providers

    3. Business or Commercial Purpose

      1. Provide you access to the Platform; secure and protect the Platform; communicate with you; maintain, fix, and improve the Platform; understand Platform usage and personalize your experience; facilitate purchases; facilitate VRChat Credit transactions and payouts; facilitate promotions; advertise or market to you; meet our legal obligations

    4. Third-party Recipients

      1. Security and anti-fraud service providers; hosting and data storage service providers; billing and payment providers; gaming platforms and infrastructure providers; analytics services; VRC Creator Economy partners; other Users; government entities (if required by law)

  2. Commercial Information

    1. Examples of Personal Information We Collect:

      1. Records of services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies

    2. Source of Personal Information

      1. Directly from you; your browser or device when you interact with the Platform; other users; gaming platforms and infrastructure providers; analytics services; technology service providers

    3. Business or Commercial Purpose

      1. Provide you access to the Platform; secure and protect the Platform; maintain, fix, and improve the Platform; understand Platform usage and personalize your experience; facilitate purchases; facilitate VRChat Credit transactions and payout; facilitate promotions; advertise or market to you; meet our legal obligations

    4. Third-party Recipients

      1. Billing and payment providers; gaming platforms and infrastructure providers; analytics services; VRC Creator Economy partners; government entities (if required by law)

  3. Internet or Other Electronic Network Activity Information

    1. Examples of Personal Information We Collect:

      1. Browsing history, search history, and information regarding your interaction with an internet website, application, or advertisement

    2. Source of Personal Information

      1. Your browser or device when you interact with the Platform; gaming platforms and infrastructure providers; analytics services; technology service providers

    3. Business or Commercial Purpose

      1. Secure and protect the Platform; maintain, fix, and improve the Platform; understand Platform usage and personalize your experience

    4. Third-party Recipients

      1. Security and anti-fraud service providers; hosting and data storage providers; gaming platforms and infrastructure providers; analytics services; government entities (if required by law)

  4. Geolocation Data

    1. Examples of Personal Information We Collect:

      1. Approximate location derived from IP address

    2. Source of Personal Information

      1. Directly from you; your browser or device when you interact with the Platform

    3. Business or Commercial Purpose

      1. Provide you access to the Platform; secure and protect the Platform; maintain, fix, and improve the Platform; understand Platform usage and personalize your experience; meet our legal obligations

    4. Third-party Recipients

      1. Security and anti-fraud service providers; hosting and data storage service providers; gaming platforms and infrastructure providers; analytics services

  5. Sensory data including audio, electronic, visual, or similar information

    1. Examples of Personal Information We Collect:

      1. Voice, head movement, eye movement

    2. Source of Personal Information

      1. Directly from you

    3. Business or Commercial Purpose

      1. Provide you access to the Platform; understand Platform usage and personalize your experience

    4. Third-party Recipients

      1. Hosting and data storage providers; gaming platforms and infrastructure providers

  6. Professional or employment-related information

    1. Examples of Personal Information We Collect:

      1. Details about your profession and place of work (applicants and employees only)

    2. Source of Personal Information

      1. Directly from you; recruiters and recruiting platforms

    3. Business or Commercial Purpose

      1. Evaluate your application; human resource management; payroll and benefits administration; meet our legal obligations

    4. Third-party Recipients

      1. Security and anti-fraud service providers; hosting and data storage providers; recruiters and recruiting platforms; government entities (if required by law)

  7. Inferences Drawn from Personal Information

    1. Examples of Personal Information We Collect:

      1. Consumer profiles reflecting a consumer’s preferences

    2. Source of Personal Information

      1. Your browser or device when you interact with the Platform; gaming platforms and infrastructure providers; analytics services; technology service providers

    3. Business or Commercial Purpose

      1. Maintain, fix, and improve the Platform; understand Platform usage and personalize your experience; advertise or market to you

    4. Third-party Recipients

      1. Security and anti-fraud service providers; hosting and data storage service providers; analytics services; government entities (if required by law)

We Do Not “Sell” or “Share” of Personal Information

In the preceding twelve months, we have not “sold” or “shared” any Personal Information, as those terms are defined under applicable state privacy laws.

Your Privacy Rights

Residents of states with applicable privacy laws may exercise the following rights: 

Right to Know what specific Personal Information we have collected about you in the previous 12 months.

Right to Receive a copy of your Personal Information.

Right to Correct Inaccurate Information we have collected or stored about you. 

Right to Delete your Personal Information, subject to certain exceptions. Please note that you can delete your own account once you are logged in to the Platform by following these instructions. 

We do not accept requests to Opt Out of the “Sale” or “Sharing” of your Personal Information because we do not engage in these practices. We also do not accept requests to Limit Use and Disclosure of Sensitive Information because we do not collect such information.

Verification. Requests for access to or deletion of Personal Information are subject to our ability to reasonably verify your identity in light of the information requested and pursuant to relevant CCPA requirements, limitations, and regulations. We may seek to verify your identity by asking you to log in to your password-protected account. If we are unable to verify your identity in this way, we may ask for additional information.

Submit Requests. To exercise your rights under the CCPA, please submit a request at https://vrch.at/support and select the Support Category “I want to invoke my rights concerning my personal information.”

Authorizing an Agent. To authorize an agent to make a request on your behalf, please send a written authorization signed by you and the authorized agent to us via the contact information listed in the “How to Contact Us” section below. If permitted by law, we may take additional steps to verify your identity and relationship to the authorized agent.

Other Information

Profiling Disclosure. VRChat does not engage in profiling of consumers in furtherance of automated decisions that produce legal or similarly significant effects, as those terms are defined under the Colorado Privacy Act or the Oregon Consumer Privacy Act.

Controller Entity Disclosure. The controller entities that are subject to our Privacy Notice and this Disclosure VRChat Inc. and VRCHAT.CA DEVELOPMENT INC.

How to Contact Us

If you have any questions, comments, or concerns about this notice or our processing activities, or you would like to exercise your privacy rights, please submit a ticket at https://vrch.at/support or write to us at 548 Market St, PMB 93053, San Francisco, CA 94104-5401.