Privacy policy

Tower Defense VR and td.yikkie.com · Last updated 16 October 2026

Who we are

Tower Defense VR is made by Yikkie, the trading name of Daniel Brummitt, a sole trader based in the United Kingdom. In this policy, "Yikkie", "we" and "us" means Daniel Brummitt trading as Yikkie. We are the "controller" of the personal information described here, which means we're responsible for it.

Contact us about anything in this policy at [email protected].

This policy covers the Tower Defense VR game on Meta Quest headsets, and this website (td.yikkie.com).

What data the game collects, and how it's used

Tower Defense VR uses these Meta platform features. This is the complete list of information about you that the game collects, processes or stores through them, and exactly what each is used for. Online Versus matches also use our own match server, and Meta's Invitations feature lets you invite friends: see Online play (Versus) for exactly what that involves.

1. Your Meta user ID (Meta's "User ID" feature)

What it is: the number Meta gives your Meta account.
Collected: only if you're 13 or older. The game reads it from Meta when it starts.
Used for: attaching your score to your account on the game's online leaderboards, so each player has one entry and the game can highlight your own row. It is not used for anything else.
Stored: with your leaderboard entry on Meta's leaderboard service, which Meta runs for us. The game doesn't save it on your headset or send it anywhere else. Kept until you ask us to delete it (see How to delete your data).
Who can see it: Meta and us (on Meta's developer dashboard). Other players can't.

2. Your Meta username (Meta's "User profile" feature)

What it is: your public Meta username. The game does not collect your profile photo, real name or any other profile details.
Collected: only if you're 13 or older. The game reads it from Meta when it starts.
Used for: showing your name next to your score on the online leaderboards, and on your headset's own scoreboard.
Stored: with your leaderboard entry on Meta's leaderboard service, and on your headset's scoreboard (only if the online leaderboard couldn't be reached). Kept until you ask us to delete it, or until you uninstall the game for the copy on your headset.
Who can see it: other players, on the leaderboards in the game; Meta; us.

3. Your score (sent with your user ID and username)

What it is: your score, the wave you reached, waves cleared, the game mode and the map (for the Daily Challenge: which day it was).
Used for: the online leaderboards: one for each game mode and map, plus the Daily Challenge board. Sent to Meta at the end of each game; Meta keeps your best on each board.
Stored: on Meta's leaderboard service until you ask us to delete it.

4. Your age group (Meta's "User age group" feature)

What it is: child (10–12), teen (13–17), adult (18+) or unknown. Never your date of birth.
Used for: deciding whether the online leaderboards are switched on. For children and unknown ages, the game doesn't read your user ID or username, and scores stay on the headset.
Stored: not stored. It's read each time the game starts and kept only in memory while it runs.

5. Your friends' scores (Meta's "Friends" feature)

What it is: the usernames and scores of your Meta friends who also play.
Used for: the friends leaderboard in the game.
Stored: not stored. The game asks Meta each time it shows the board; we never keep a copy of your friends list.

6. Your achievements (Meta's "Achievements" feature)

What it is: which of the game's achievements you've unlocked, and your progress towards the counted ones (for example, enemies destroyed so far).
Collected: only if you're 13 or older. The game sends it to Meta when you unlock an achievement or make progress.
Used for: showing your achievements in the game and on your Meta profile.
Stored: on Meta's achievements service, linked to your Meta account, until you ask us to reset them (see How to delete your data). A copy of your progress is also kept on your headset so the game can show it offline.
Who can see it: you, and other people as your Meta privacy settings allow; Meta; us (as totals on Meta's developer dashboard).

We don't sell, rent or share this information with anyone for advertising or any other purpose. Meta's own handling of your account is covered by the Meta Privacy Policy.

Details and legal basis

The game runs on Meta's Horizon platform and uses these Meta platform features: User ID, User profile (only your Meta username), User age group, Friends (for the friends leaderboard), Achievements and Invitations (to invite friends to online matches). The table lists exactly what the game collects through them and what it's used for.

The game uses Meta's platform services to check you own the game and to run the leaderboards. The information in the table below is handled through Meta's services, and we can see leaderboard entries on Meta's developer dashboard. Online Versus matches also use our own match server: see Online play (Versus) below.

Everyone can see the online leaderboards in the game, so your Meta username and scores will be visible to other players.

Stored only on your headset

The game saves these on your headset and never sends them anywhere: your settings (language, sound, graphics, turning, which hand holds the blaster and so on), the board size, whether you've seen the How to Play screen, the headset scoreboard, your achievement progress, the looks you've picked (blaster skin, tower colours), your Daily Challenge bests and streak, and replays. The headset scoreboard keeps your scores with the wave details and date. A replay is a recording of one of your games, so you can watch it back: your board, the enemies, your score and your head, hand and controller movements during that game; for Versus games, the other boards in the match, with computer players' names (other people show only as "Player 2" and so on). The game keeps your last 10 games, your best ones and any you choose to keep; delete them from the Replays list. If you're a teen or adult and the online leaderboard can't be reached, your score is kept there instead, with your Meta username. Uninstalling the game deletes all of this.

How to delete your data

Everyone can delete their data, wherever they live, at no cost. You don't need to give a reason.

In the game (instant)

1. Open Settings (from the start screen or the pause menu) and choose Delete my online data.
2. Confirm. The game deletes your entries from every Tower Defense VR leaderboard straight away (your score, the wave details, your Meta user ID and username), resets your Tower Defense VR achievements on Meta, and tells you when it's done.

To do this, the game sends your Meta user ID and a one-time code from Meta to our server (td.yikkie.com). Our server asks Meta to confirm the code belongs to you, so nobody else can delete your scores, then deletes your entries and resets your achievements through Meta. It doesn't store your user ID or write it to its logs; like any web server, it keeps a short-term access log (IP address, date and time), deleted after 14 days.

By email

1. Email [email protected] with the subject "Delete my data".
2. Tell us your Meta username, so we can find your entries. We may ask you to confirm that the account is yours.
3. Within 30 days we delete your entries from every Tower Defense VR leaderboard and reset your achievements, and we email you to confirm.

Once your entries are deleted, we and Meta keep nothing else about you for this game (online matches are never kept, and server logs are deleted after 14 days). If you play again later, new scores go on the leaderboard as normal. We delete your email to us within two years.

Data on your headset (settings and the headset scoreboard) never reaches us. To clear the headset scoreboard, choose Settings → Clear this headset's scoreboard. To delete everything on the headset, uninstall the game: on your headset open Library, find Tower Defense VR, open its … menu and choose Uninstall.

Players under 13, or whose age group Meta can't tell us, have nothing stored outside their headset. A parent or guardian can still email us and we'll check.

What the game doesn't do

• No adverts, analytics or tracking, and no advertising IDs.
• No crash reports or usage statistics sent to us or to anyone else. Error messages only go to your headset's own system log.
• No accounts, chat, voice, photos or camera access. (Passthrough mode shows your room through the headset's cameras, but that is handled by the headset itself. The game never sees or saves the camera images.)
• Your head and hand movements never leave your headset. In online play, other players see your board, not you.
• No in-app purchases.
• We never sell or share your information for marketing.

Online play (Versus)

In online Versus, two to four players each defend their own board against the same waves. You can create a lobby and get a 6-character code to share, join a lobby by typing its code, or join through a Meta invite. While you're in a lobby, the game tells Meta (through Meta's "group presence" feature) so your friends can see it and join you. The lobby code is passed along with Meta's invites.

Online matches run on our own match server, operated by Yikkie and reached at td.yikkie.com. During a lobby or match, your headset sends it:

• Only the players in your match see your name and board. The server passes them on to those players and no one else.
• Nothing is kept after the match. Lobbies and matches exist only in the server's memory. When a match ends and everyone has left, it's deleted. Empty lobbies close after two minutes, and no match can run longer than three hours. We don't keep match results, ratings or a history of who played whom.
• Server logs. Like any internet server, the match server keeps short-term logs: our web server's access log (IP address, date and time, the address requested) and the server's system log (connections opened and closed, and errors). We use them only to keep the service running and secure, for example to deal with attacks or abuse. They're deleted automatically after 14 days.
• Not sent to our server: your Meta user ID, date of birth, friends list, voice, or head and hand movements. There's no chat or voice in online matches, and no account to make.
• Reporting a player. If someone behaves badly in an online match, you can report them with Meta's reporting tools: press the Meta button on your right controller and choose Report. You can also email us at [email protected].

Children

Tower Defense VR is suitable for players aged 10 and over. We follow the UK Information Commissioner's Children's Code and the US Children's Online Privacy Protection Act (COPPA).

• When the game starts, it asks Meta for the player's age group. If Meta says the player is a child (10–12), or can't tell us, the game switches off the online leaderboards. We don't ask for, read or send the player's Meta username, user ID or scores, and scores stay on the headset.
• Online Versus for children: a child can only join an online match through a Meta invite, which on a child's account only comes from contacts their parent has approved in Meta's parental tools. Children can't join a match by typing a lobby code. In the match they appear under a made-up name (like "Neon Falcon 42"), never their Meta name. Our match server receives only that made-up name, the age group and the child's board during the match (plus the connection details every internet server sees, kept in logs for 14 days), and forgets the match when it ends.
• We don't ask children for any other personal information. If you're a parent or guardian and think we have your child's information, email [email protected] and we'll delete it.
• Meta accounts for children under 13 are managed by a parent through Meta's own tools. See Meta's help pages for parents.

Meta's role

Meta Platforms provides the store, your account, the ownership check, age groups, friends, the leaderboard service, and the invites and group presence used to join online matches. It stores leaderboard entries on its servers. Meta also collects information about how you use your headset and apps under its own policies, which we don't control. See the Meta Privacy Policy.

Meta may store and process this information outside the UK, including in the USA. Meta uses legal safeguards for these transfers, as its privacy policy explains.

Companies that help us

These companies handle some information for us, only on our instructions and under their data processing terms:

• Amazon Web Services (AWS) hosts our match server in its Ireland (EU) data centre, so online match traffic and the server logs pass through and are stored on AWS's computers (AWS privacy notice).
• Cloudflare runs the domain name service (DNS) for yikkie.com: it tells devices which server td.yikkie.com is on. The game's connection to the match server then goes straight to our server at AWS, not through Cloudflare (Cloudflare's privacy policy).
• Postale hosts our email.

Some of these companies may process information outside the UK. Their data processing terms include legal safeguards for those transfers.

This website (td.yikkie.com)

• No cookies, analytics or trackers. Fonts and images are served from our own server.
• Server logs. Like every website, our web server records each visit: IP address, date and time, the page requested, and your browser type. We use these only to keep the site running and secure. They're deleted automatically after 14 days.
• Cloudflare. The site is delivered through Cloudflare, which protects it from attacks. Cloudflare processes visitors' IP addresses for this on our behalf (Cloudflare's privacy policy).
• The earlier free browser prototype of the game has been taken offline, along with its initials leaderboard.

When you email us

If you email us for support, to ask for creator access or about your data, we use your email address and what you tell us to reply. For a creator request, we also look at the channel or site you send us. We keep emails for as long as we need to deal with your request, then delete them within two years. Our email is hosted by our email provider, Postale.

How long we keep things

• Leaderboard entries: while the game is available, unless you ask us to delete them sooner. Meta keeps them on our behalf.
• Online lobbies and matches (display names, age groups, boards): only in the match server's memory while the lobby or match is open. Deleted when it ends.
• Achievements: on Meta's service until you ask us to reset them.
• Data on your headset (settings, scoreboard, replays, achievement progress): until you delete it in the game or uninstall the game.
• Website and match server logs: 14 days.
• Emails: up to two years.

Your rights

Under UK data protection law you can ask us to:

• give you a copy of the information we hold about you;
• correct it if it's wrong;
• delete it, including removing your scores from the online leaderboard;
• limit how we use it, or object to how we use it;
• send it to you in a format another service can use.

Email [email protected] and tell us your Meta username. We may ask you to confirm you own that account. We'll reply within one month. For deletion, follow the steps in How to delete your data. Online matches aren't kept once they end, so there's usually nothing from them for us to send or delete.

If you're unhappy with how we've handled your information, please tell us first. You can also complain to the UK Information Commissioner's Office: ico.org.uk, phone 0303 123 1113. If you live in the EU, you can contact your local data protection authority.

Players in the USA

We don't sell or "share" personal information as California law defines it, and we don't use it for targeted advertising. The rights above apply to you too. Email us to use them.

Changes to this policy

If the game starts using information in a new way, we'll update this page and change the date at the top before the update goes live. If the change is significant, we'll also say so in the game's release notes.