Privacy Overview

Learn about your responsibilities under privacy laws and how Vivox collects and processes personal data.

読み終わるまでの所要時間 1 分

最終更新 8ヶ月前

Unity Voice Chat and Text (also known as Vivox).

This documentation is intended to assist products to display their privacy compliance to Developers. It is not intended to be used as legal guidance or as a replacement to reading Unity’s Privacy Policy. If you have questions about a term used, please see the Glossary below.

If you have further questions about the privacy implications of your product, please email DPO@unity3d.com with your question. For expediency, please list the product about which you are inquiring.

Personal Data Collected about App Users / Game Players

Default Personal Data Collected (always collected in order for product to work)

Truncated IP address
Developer defined User ID
Device ID

Optional Data Collected (data which may be collected at the action of the end user)

Voice data
Text data

Developer Defined

While this product allows for the collection of developer defined data, we require that you not collect personal data through this mechanism. Our systems will not understand that it is personal data and so such would not be treated as such in retention processes or data subject requests.

Relationship under Privacy Laws

Under GDPR, Unity is the Processor. You, the developer, are the Controller.

Under CCPA (as modified by CPRA), Unity is the Service Provider. You, the developer, are the Business.

Legal Basis for Processing

As we are a Processor, we do not determine your legal basis for processing. Instead, it is your responsibility as the Controller to determine such a legal basis.

Privacy and wiretapping laws may require consent depending on the region in which your end-users.

To provide the user a method to opt-in, it must be implemented client-side in a way determined by the developer.

To provide the user a method to opt-out, it must be implemented client-side in a way determined by the developer.

Data Subject Requests

Two of the most common data subject requests based in law are the request for access to personal data and the request for deletion of personal data.

Access

This service has no native functionality to support data access requests. You, the developer, are responsible for actioning them. You can action them by reaching out to the Vivox support team with the Player ID of the end user that requested access.

Deletion

This service has no native functionality to support data deletion requests. You, the developer, are responsible for actioning them. You can action them by reaching out to the Vivox support team with the Player ID of the end user that requested data deletion.

Dependencies

This product has no dependencies on other Unity products.

Data Retention

By default, the below personal data is retained for up to 30 days:

Developer defined User ID
Device ID
Truncated IP address

The following is ephemeral:

Voice data

By default, the following is available for 7 days and can be configured to be available for up to 30 days at the Developer’s choice:

Text data

Child Privacy

If required to do so under applicable laws, you (the developer) must obtain Verified Parental Consent prior to submitting child-user data, as outlined in the Unity Terms of Service.

Privacy Policy Requirements

It is never appropriate to use Unity’s privacy policy for your application. You will need to ensure that the personal data practices are reflected in your Privacy Policy, as required in the Unity Terms of Service.

Data Processing Agreement (DPA)

The Unity DPA applies to the transfer of data for this product.

Glossary & Notable Laws

GDPR - The General Data Protection Regulation (GDPR) took effect in the European Economic Area (EEA). References to GDPR also encompass UK GDPR which is the UK’s version of GDPR which applies post-Brexit.
CCPA - The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (“CPRA”).
PIPL - In November of 2021, Personal Information Protection Law (PIPL) took effect in China.
LGPD - The Brazilian General Data Protection Law
VCDPA - The Virginia Consumer Data Protection Act
CPA - The Colorado Privacy Act
CTDPA - The Connecticut Data Protection Act
UCPA - The Utah Consumer Privacy Act
PIPEDA - The Canadian Personal Information Protection and Electronic Documents Act
COPPA - The Children’s Online Privacy Protection Act (COPPA) imposes restrictions on how data can be collected and used from children under the age of 13.
CARU - A self-regulatory organization for the promotion of responsible privacy practices to children under the age of 13
DPA - A Data Processing Addendum (or Data Processing Agreement) forms part of a contract and governs the rights and obligations of each party concerning the processing of personal data.
ATT - iOS 14 and later requires publishers to obtain permission to track the user's device across applications. This device setting is called App Tracking Transparency, or ATT.