Privacy Policy and EULA for 2Sync Consumer Games
Information about 2Sync end user apps (House Defender, Mixed Snow Worlds, The Last Galaxy, Elven Arrows)
2Sync App Information
House Defender · Elven Arrows · Mixed Snow Worlds · The Last Galaxy
Privacy policy
Last updated: 14 August 2026 · House Defender · Elven Arrows · Mixed Snow Worlds · The Last Galaxy
1. Who is responsible
2Sync GmbH, August-Bebel-Straße 88, 14482 Potsdam, Germany · hello@2sync.io
Registergericht Potsdam, HRB 39154 · Managing Director: Moritz Loos
We are the controller and have not appointed a data protection officer. Our website privacy policy covers 2sync.io.
2. Scope
This policy covers our Meta Quest apps. Meta's processing of your account is governed by Meta's privacy policy. We do not use your data for advertising and do not sell it.
3. Data from your Meta account
We read your name, Meta user ID and profile picture during a session to show your avatar and player name. Meta also tells us your age band, because the platform requires apps to request it; we do not evaluate or store the value. High scores are stored and displayed by Meta, not by us.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR); age band: legitimate interest in meeting platform rules (Art. 6(1)(f)). Retention: session only; we store none of it.
4. Your room scan
Our apps use the layout of your room — walls, wall height, and the position, size and type of furniture. It stays on your device, except as described in sections 5 and 6.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR). Retention: until you delete the scan or uninstall.
5. Multiplayer
For matchmaking and gameplay we use Photon (Exit Games, Inc., Portland, USA), which processes your player name, a player ID and your IP address. When you play with others in the same room, your room layout is sent to them through Photon and held there for the session.
House Defender, Elven Arrows and Mixed Snow Worlds also use Meta's shared spatial anchors; Meta then processes a spatial map of your surroundings in its cloud, under Meta's privacy policy.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR). Where: Photon picks the server region closest to you; depending on where you play, this is in the EU, in Asia or in the USA — see section 8. Retention: session only; Photon's own retention is set out in its privacy policy.
6. Room sync
House Defender from version 3.0 and Elven Arrows from version 1.2 onwards. Only with your consent.
Room scans are stored on 2Sync’s servers in the EU so you can use them in other 2Sync apps on the same Meta account. When you open the cloud rooms screen, all room scans on your device are uploaded; which of them you download back is your choice, room by room. Stored are the room layout, the room name you chose and technical metadata. Camera images, passthrough video, photos, your Meta account details and location data are not stored.
Instead of your Meta account ID we store a one-way key derived from it, so your rooms are found in every app while the stored data cannot be traced back to your Meta account by anyone else. It remains personal data and your rights in section 9 apply.
Legal basis: your consent (Art. 6(1)(a) GDPR). Without consent nothing is uploaded; downloading your own rooms still works. Where: in the EU. Two steps run outside it: signing you in uses a global Google service, which holds one record per user — the key described above and nothing else — and our server asks Meta to confirm your account. Neither carries room data; see section 8. Access: your rooms stay private to your account, enforced on our server; encrypted in transit and at rest. Retention: 24 months after the last sync, deleted automatically within a day of expiry.
Withdrawal and deletion: one function in the app deletes all your rooms from our servers and withdraws your consent (Art. 7(3) GDPR). The withdrawal takes effect first and unconditionally — even if the deletion itself fails, for example without a connection. Copies you already downloaded to a device stay on that device until you delete them there.
Room sync keeps a copy of your scans, but it is not a guaranteed backup service: we do not guarantee that stored rooms remain available, and you may have to scan your room again.
7. Usage analytics
House Defender from version 3.0 and Elven Arrows from version 1.2 onwards. Only with your consent.
To see where players get stuck we record usage events: progress through the room scan and the first-time setup, whether room capture, matchmaking and alignment worked, which error panels were shown, and when a round started, ended, how far it got and how smoothly it ran. From a multiplayer round we also record each player’s result — score, hits, deaths, damage — identified only by a number that means nothing outside that round. No names, no account, no room data.
We also send a summary of the room you scanned: its floor area, the number of walls, three rounded room dimensions and two technical flags. Nothing else about the room leaves your headset — no floor outline, no wall positions, no 3D mesh, no anchors, no camera or passthrough images and no microphone audio.
If the app malfunctions we also send an error report with the error message and the innermost line of the technical call stack; such a report can contain text from the message itself.
We use PostHog Inc., 2261 Market St. #4008, San Francisco, CA 94114, USA, as our processor. Your events are processed on PostHog’s EU Cloud in Frankfurt, Germany, and are not sent to its US region. All four 2Sync titles report into one shared analytics project; which title an event came from is one of the recorded values.
Your installation is identified by a random identifier we generate on your device and keep there. It is not derived from and not linked to your Meta account, and reinstalling the app produces a new one. Also recorded are your headset model, operating system, app version and build. Your IP address is not processed — every event is sent with the IP field emptied, so it is discarded on arrival. No profile is built about you, and there is no screen or session recording, no advertising identifier, no tracking across apps and no use of this data for marketing. The data is pseudonymous, not anonymous.
Legal basis: your consent (Art. 6(1)(a) GDPR); for the identifier and the event queue kept on your device, § 25(1) TDDDG. Before you agree, nothing is written to your device and nothing is transmitted; events from earlier in the same session are held in memory only and are discarded outright if you decline. You can withdraw at any time under Settings ▸ Privacy; it takes effect immediately, and the events still waiting on your device are deleted with it. A withdrawal stops further collection — it does not reach data that was already sent.
Retention: up to seven years. That is how long our analytics provider keeps event data; we do not keep it longer. Your rights in section 9 include asking us to delete it earlier.
8. Recipients and transfers outside the EU
| Recipient | Role | For |
|---|---|---|
| Google Cloud EMEA Limited, Velasco, Clanwilliam Place, Dublin 2, Ireland | processor (Art. 28) | Room sync storage and sign-in (section 6) |
| PostHog Inc., USA — processing on its EU Cloud in Frankfurt, Germany | processor (Art. 28) | Analytics (section 7) |
| Exit Games, Inc., USA | processor (Art. 28) | Multiplayer (section 5) |
| Meta Platforms Technologies Ireland Limited, Merrion Road, Dublin 4, Ireland | independent controller | Account, profile, high scores, spatial anchors |
| Other players in your session | recipients | Your player name, the room name you chose and your room layout during multiplayer (section 5) |
We do not sell your data, and no personal data goes to any other recipient.
Processing outside the EU takes place with Photon (servers in Asia or the USA) and at the Google sign-in step. PostHog processes your events in Frankfurt; because PostHog Inc. is based in the USA, access from there cannot be ruled out entirely. These transfers are safeguarded under Chapter V GDPR through the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR), which form part of our agreements with the providers. PostHog is additionally self-certified under the EU-US Data Privacy Framework. When our server has Meta confirm your account, that is a disclosure to Meta as an independent controller and is governed by Meta’s own terms. A copy of the safeguards is available at hello@2sync.io. Access by authorities in those countries cannot be ruled out entirely.
9. Your rights
Access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21), and withdrawal of consent at any time (Art. 7(3)) — for room sync and analytics directly in the app; a withdrawal does not affect the lawfulness of what was processed before it. Write to hello@2sync.io.
You may lodge a complaint with a supervisory authority (Art. 77 GDPR). Ours is Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.
There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.
10. Do you have to provide this data?
The data in sections 3 and 5 is needed to play; without it the corresponding mode cannot be used. Room sync and analytics are voluntary — refusing has no effect on the game.
11. Children
Our apps are not directed at children, and using a Meta Quest headset is subject to Meta’s own age requirements. Under Art. 8 GDPR, consent by users under 16 requires the authorisation of a parent or guardian. If you are under 16, please only use room sync and usage analytics with their agreement.
12. Changes
The current version is always at 2sync.io/appinfo/. If our processing changes, we update this policy. If a change affects a consent you have given, we ask you again in the app.
Safety notice
Applies to all four games: House Defender, Elven Arrows, Mixed Snow Worlds, The Last Galaxy.Before you play
These games switch your Quest’s boundary (Guardian) off. It will no longer warn you about walls — instead, the game shows you your own room.- Clear the room — including the floor. Small items, cables and things on the floor are not picked up by the scan.
- Scan completely, and re-scan after moving furniture. In the game you only see what you scanned.
- If anything looks wrong: stop where you are. Only then take the headset off.
- Tell others in the household before you start. You will move and reach through the room, and the game cannot show you someone who walks in — including children and pets.
- Property damage is the most frequent real incident: move lamps, TVs and glasses out of reach first.
- Elven Arrows: drawing a bow means large arm movements — check the space above and beside you.
- Do not play under the influence of alcohol or when very tired.
- Lighting and tracking: very dark, empty, reflective or glass-heavy rooms track poorly — and then the grid can sit in the wrong place too.
End User Licence Agreement
2Sync GmbH · House Defender · Elven Arrows · Mixed Snow Worlds · The Last Galaxy
Version 2.0 · 14 August 2026
1. Who we are
2Sync GmbH, August-Bebel-Straße 88, 14482 Potsdam, Germany. Registergericht Potsdam, HRB 39154. Managing Director: Moritz Loos. Contact: hello@2sync.io.
2. What this agreement covers
This agreement covers the four games named above (“the Games”) and governs only the licence we grant you to use them.
You accept this agreement in the app before you first play, and you can read it again at any time at 2sync.io/appinfo/.
3. Your contract with the store
You obtained the Games from the store, not from us. Your contract for that is with the Meta company named in the Meta Horizon Store Terms — for the European Economic Area, that is Meta Platforms Technologies Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. That contract governs purchase, payment, any right of withdrawal (Widerrufsrecht), refunds, your account and your entitlement. Their terms: meta.com/legal/quest/store-terms-of-sale/ · their refund policy for digital content: meta.com/legal/quest/quest-rift-content-refund-policy/.
Any right of withdrawal in respect of your purchase is a right against the store operator; please use the store’s own cancellation process. We cannot exercise it for you, and nothing here affects it.
Your statutory rights are unaffected by anything in this agreement.
How we handle personal data is described in our privacy policy on this page. Accepting this agreement is not consent under data protection law. Consent for room sync and for usage analytics is asked separately in the app and can be withdrawn there at any time.
4. Who may accept
You may accept this agreement only if you have full legal capacity, or if your parent or guardian accepts it for you. Please check the age rating on the store listing before letting a child play, and read the safety information together with them.
5. What you need
The Games require a Meta Quest 3, Quest 3S, Quest 2 or Quest Pro running the manufacturer’s current system software, a completed scan of your play area and, for the online functions, an internet connection. We do not owe operation on other devices, on modified devices, or on system versions the manufacturer no longer supports.
6. Your licence
We grant you a simple, non-exclusive right to install and use the Games on the devices linked to your store account, for as long as your entitlement lasts. The entitlement is granted and administered by the store operator, not by us.
You may play the Games privately and in company, and record, stream and publish gameplay footage, including on monetised channels — provided you do not create the impression of a partnership with or endorsement by us, and do not use the footage in unlawful or infringing content.
You may not distribute, rent or sublicense copies of the Games, modify them, use cheats or unauthorised servers, remove or circumvent technical protection measures, or present the Games publicly to an audience beyond your personal circle — for instance in an arcade, at a location-based venue, at a trade fair or as part of an event — whether or not a fee is charged. Publishing gameplay footage as permitted above is not a public presentation of this kind. Any mandatory statutory right you may have to pass on a copy you permanently acquired remains unaffected.
Commercial and public operation is available as a separate product: SyncArena, syncarena.io.
Your rights under §§ 69d and 69e UrhG — in particular to make a backup copy, to observe, study and test the program, and to decompile for interoperability — remain unaffected.
Rights in the Games, including all content, code and trademarks, remain with us or our licensors.
We do not claim ownership of your room scans. To provide room sync, you grant us the simple, revocable right to store and transmit your scans for that function, for as long as you use it. This is not consent under data protection law — that is asked separately in the app.
The Games contain third-party components, including the Photon networking library, the Meta XR SDK, the PostHog SDK and Unity engine components. Their licence and attribution notices: Third-party software on this page.
7. Playing with others
When you play online, the other players see the player name from your store account and any room name you enter. Please do not enter other people’s names, addresses or other personal data as a room name — everyone in your session can see it.
Do not use names that are insulting, discriminatory or that impersonate someone else, and do not use the online modes to harass other players, to cheat or to disrupt their sessions. If you do, we may reset the name, end the session, and temporarily or — for serious or repeated breaches — permanently block your access to the online functions. Termination of this agreement is governed by section 12.
You can report other players to us at hello@2sync.io. Conduct on the platform itself can also be reported to the store operator.
8. Room sync and online functions
Room sync is a free additional function of House Defender (from version 3.0) and Elven Arrows (from version 1.2). It stores a copy of your room scans on our servers so that you can use them in another 2Sync app on the same account. It is not a backup service and does not replace one — please treat a scan as something you can re-create.
Multiplayer, room sync and shared spatial anchors depend on servers operated by us and by third parties. Where we have a valid reason — in particular a technical, security or legal necessity, or the discontinuation of a third-party service we depend on — we may change or discontinue such an online function. If that significantly impairs your use of a Game, we will tell you at least three months in advance in the app, in a form you can save, and at 2sync.io; on request we send you the same notice by e-mail. The notice tells you what changes, when it takes effect and what you can do about it. Where a security issue or the shutdown of a third-party service leaves us no such lead time, we tell you as early as we reasonably can. Where technically possible, we give you the opportunity to save your stored rooms to your device beforehand. You may then end this agreement free of charge within 30 days. Your rights towards the store operator are unaffected.
If your entitlement ends — in particular if you delete your store account — the licence ends with it. Room scans stored with us are not deleted automatically when you delete your store account: delete them in the app beforehand or write to hello@2sync.io. Otherwise they are deleted 24 months after your last sync.
9. Safety
The Games are house-scale mixed reality: you move through your own room while wearing the headset.
All four Games run in boundaryless mode — we switch the headset’s own Guardian boundary off while you play. Instead, the Games show your scanned room in the game and display a grid over walls and objects as you approach them. That grid depends on your scan and on the headset’s tracking and can be in the wrong place. It is not a safety system and does not replace a cleared room.
Please read the safety notice on this page before you play. It is not a formality: it describes how to prepare your room and what to do when something looks wrong. The app also shows you its key points before your first session, and you confirm them when you accept this agreement.
10. Defects
If a Game is defective, the statutory rules apply. Because you obtained the Games through the store, your statutory rights to have a defect remedied, to a price reduction or to end the contract are as a rule rights against the store operator, and you should raise them there. These rights are subject to time limits — as a rule two years from when the Game was made available to you (§ 327j BGB). This does not limit any rights you may have against us.
Independently of that, please tell us about the problem at hello@2sync.io. We read every report. Please note: a report to us is not a claim against the store operator and does not stop those time limits from running. If a defect matters to you, raise it there as well.
11. Updates
We provide the updates needed to keep the Games in conformity, including security updates. These include updates that become necessary because your device, its operating system or the store platform has changed. We are not obliged to add new features going beyond what conformity requires.
We provide these updates for at least 24 months from the day you acquired the Game. This is a minimum commitment on our side and does not shorten any longer period you may expect under § 327f BGB.
We tell you about updates through the store and, for security updates, in the app. Please install them. If you do not install an update we have provided and told you about, we are not responsible for problems that arise only because it is missing — unless the problem was caused by our installation instructions (§ 327f Abs. 2 BGB).
12. Term and termination
This agreement runs for as long as your entitlement to the Games lasts. You may stop using the Games at any time.
We may terminate only for good cause — in particular a serious and culpable breach of sections 6 or 7 — and only after we have warned you and given you an opportunity to stop, unless the breach is so serious that a warning is unreasonable. We will give notice in text form and state the reason.
If we terminate, your right to use the Games ends; please stop using them and remove the installed copies. Your contract with the store operator, your entitlement, and any claims you may have against the store operator or against us are unaffected.
13. Liability
We are liable without limitation
- for intent and gross negligence, including intent and gross negligence on the part of our legal representatives and the people we use in performing this agreement,
- for injury to life, body or health resulting from a negligent breach of duty by us, or from an intentional or negligent breach of duty by our legal representatives or the people we use in performing this agreement,
- under the Product Liability Act,
- for fraudulently concealed defects, and
- where we have given a guarantee.
Except in the cases listed above, we are liable for slight negligence only where we breach a material contractual obligation — an obligation whose fulfilment makes the proper performance of this agreement possible in the first place, on whose observance you may regularly rely, and whose breach jeopardises the purpose of this agreement. In that case our liability is limited to the damage typically foreseeable for this kind of agreement.
We are not liable beyond this, on whatever legal ground. This does not affect the cases of unlimited liability listed above, nor any liability that cannot be excluded by law, in particular under Article 82 GDPR. These limitations apply equally in favour of our legal representatives, employees and the other people we use in performing this agreement.
Where we are liable for loss of data on the basis of slight negligence, our liability is limited to the effort that restoring the data would typically have required had you made backups regularly and appropriately to the risk, and where such backups were possible and reasonable for you. This limitation does not apply in the cases of unlimited liability listed above.
14. Changes to this agreement
If we change this agreement, the new version applies to you only once you have accepted it in the app. Until then, the version you accepted continues to apply.
If you do not accept a new version, you can keep using the Games. This does not affect the updates we owe you under section 11 — we continue to provide them. Where a new function requires new terms, that function may not be available to you until you accept them.
15. Notices
Text form is sufficient for all declarations under this agreement. An e-mail to hello@2sync.io reaches us.
16. Applicable law
German law applies. If your habitual residence is outside Germany, you additionally keep the protection afforded to you by those provisions of the law of your country of habitual residence that cannot be derogated from by agreement. We have not agreed a place of jurisdiction with you; the statutory rules apply, which for consumers generally means the courts at your place of residence.
17. Final provisions
If a provision of this agreement is or becomes invalid, the rest remains in force; the statutory provisions apply in place of the invalid one.
Third-party software
The Games contain third-party components, including the Photon networking library (Exit Games), the Meta XR SDK (Meta Platforms Technologies), the PostHog SDK (PostHog Inc.) and Unity engine components (Unity Technologies). The licence and attribution notices applicable to the versions used in each Game are available on request at hello@2sync.io.

