Hubs Privacy Notice by Mozilla

[platform name] Privacy Notice

Version [version number], effective [effective date]

Information We Collect and Share for [platform name]

Information Shared With Us and Other Participants

Account information: You will need a [company name] account to purchase a [platform name] Subscription. However, a user does not need an account to use [platform name]. Certain features (like storing your avatar), require an account. You can create an account through [platform name] or through [another platform]. If you create an account with your email address, we store a hashed version of your email address. If you create an account through [another platform], we receive the email address associated with your [another platform] account and your [another platform] avatar.

Room names and URLs: Rooms and room names are publicly accessible to anyone with the URL. [company name] stores the name and the URL for the link you share so you and others with the link to the Room can use it again.

Avatar data: Your selected avatar and name will be shared with other participants in your rooms and the host of your [platform name] instance. If you’re logged in to your account, we will store your avatar. If you’re not logged into your account, we will not store your avatar.

Voice data: If your microphone is on, [platform name] sends the audio to other users in the room. [company name] does not store the audio; we only receive it temporarily to transmit it to others in the room.

Chat: If you send messages in [platform name], [platform name] shares it with the other users in the room. [company name] does not store chats; we only receive it temporarily to transmit it to others in the room.

Photos and Videos You Take, and Photos, Videos, and Objects You Upload: If you take photos and video in a [platform name] room or upload photos, videos, or objects to a room, [company name] stores them so you can share them within the room. They are deleted within 72 hours unless you pin them. If you pin them they will be stored until you remove them from the room and they will be viewable by anyone who can access the room.

You can learn more by looking at the code itself: [platform name] (the front-end) Dialog (the webRTC server), Reticulum (the backend web server), [platform name]-Ops (the infrastructure code), Discord Bot (enables users to connect their Discord community to [platform name]).

Other Information We Receive

We use technical, interaction, error, and website analytics data to help us improve the [platform name] experiences:

Technical data: We receive data about the type of devices used to interact with [platform name], as well as their operating systems, languages, the names and versions of browsers, and other data needed to load and operate a room.

Interaction data: We receive data about interactions with [platform name], such as the number of rooms created, messages sent through or to third-party services like [another platform] (including aggregated counts such as the number of messages and users who have joined relevant channels), the number of users in a particular room, the start and end time of users’ interactions with [platform name], the amount of time users interact with [platform name] through virtual reality, the first time in a particular month or day that a user begins to use [platform name].

Error Data: When [platform name] crashes or fails, [company name] receives error messages which may include the room URL, response time for requests, the page a user was on when the error happened, the user’s operating system, browser information, and IP address.

Website Analytics Data: We use [analytics tracking tool] to better understand how people interact with [platform name]. For example, we collect de-identified information about the number of [platform name] rooms created or entered, interactions with buttons and menus, session length, user location (country, state/province, and city), language settings, browser type and version, viewport size, and screen resolution. You can opt-out of [analytics tracking tool] data collection by installing the [analytics tracking tool] Opt-out Browser Add-on.

Information We Collect for Published Scenes and Custom Avatars

Scenes and avatars you create: [company name] stores scenes and avatars that users create so we can display them.

Attribution information: When someone publishes a scene or avatar to [platform name], they have the option to “Allow Remixing with Creative Commons CC-BY 3.0” or “allow [company name] to promote your scene or avatar”. If the user chooses one or both of these options, [company name] will share the scene or avatar and attribution information publicly.

Account information: To publish a scene or avatar to [platform name], a user must have a [platform name] account. [company name] will receive and store a hashed version of their email address to allow them to log in and view their 3D Room models and Avatars.

Information We Collect about Your Subscription

[company name] account information. A [platform name] subscription requires a [company name] account, which sends [company name] your email address, locale, and IP address. Learn more about [company name] account data practices.

Location information. [company name] receives your IP address from your [company name] account when you sign up for and use the service. We use the IP address in order to approximate your location because [company name] VPN is currently only available in certain countries.

Payment information. When you subscribe to the Services, you will send payment through one of our third-party payment providers: Stripe, Apple, PayPal, or Google Pay. [company name] receives a record of your account (including your billing address and the last four digits of your payment method) and the status of your account’s subscription, but does not store your full payment details. The payment providers may also collect personal transactional data or device information via cookies and similar technologies to operate and improve their service. You can learn more about how these companies use and process your data by reviewing their Privacy Notices, which are available on each of their respective websites.

Usage information. We receive information about the rooms and users in your [platform name] instance. For instance, we learn when you create and delete rooms, how many rooms are in your [platform name] instance, and how many users are in each room. We also receive information about how much storage space your [platform name] instance is using.

Who [platform name] May Disclose Information To

The [platform name] Host: When you use a [platform name] instance, [company name] shares information with the [platform name] subscriber who created the [platform name] instance. This includes your username, information about your account and when you created it, as well as scenes, avatars, and other content you add to a [platform name] room.

Amazon Web Services (AWS): [platform name] use Amazon’s cloud storage service to store the information collected through [platform name]. You can read AWS’s Privacy Notice for more information.

Google Cloud Platform (GCP): [platform name] use Google’s cloud storage service to store the information collected through [platform name]. You can read GCP’s Privacy Notice for more information.

Search providers: You can search for images, GIFs, and 3D Models to share in [platform name]. When you search, we will send your searches to supported third parties to fulfill the search. [company name] does not store your search queries or the search results. We support the following providers:

Tenor

Sketchfab

YouTube

Twitch

X (formerly Twitter): If you connect X to [platform name], you can tweet and share 2D images from [platform name] rooms. Any content you tweet will be shared with X and published on the X platform. You can see X’s Privacy Policy for more information.

Discord: If you connect Discord to [platform name], we store access tokens and the server and channel IDs that have been connected. We will synchronize chat messages, room changes, 2D and 3D objects you create, and whether you join or leave with the connected Discord channel. [platform name] does not log any synchronized messages. You can see Discord’s Privacy Policy for more information.

Other Information You Should Know

You can learn more about managing your [company name] account data. Also, much of the information that we store about our [company name] account users is easily accessible by signing in to your account, where you can also update your data sharing settings. To make requests regarding your personal data, please contact us through our Data Subject Access Request Portal.

If you have any other questions regarding personal data or our privacy practices, please contact us at [compliance email address].

We respond to all requests we receive from individuals wishing to exercise their data protection rights regardless of where the individual lives. We will honor your request unless a legal requirement prevents us from doing so or a legal exception applies.

Please visit our forums for general support help.