Privacy Policy – VR-we-are
1. Who is responsible
Controller under the EU General Data Protection Regulation (GDPR): 3D-Gallery e. K.
Owner, postal address, e-mail address and commercial-register entry: see the Impressum (legal notice).
Contact form: www.3d-gallery.org/contact.html
2. The app in short
VR-we-are is a media player for your own photos, comics, PDFs, music and videos. It works on the headset. The app sends no personal data to us. It has no account, no advertising, no analytics and no crash reporting service, and it does not ask for your name, e-mail address or phone number.
3. Data the app keeps on your headset
To work, the app stores the following only in its own storage on the headset:
- the media sources you choose (local folders, SMB shares, DLNA servers, web addresses);
- login data and keys you enter for network shares, servers and online sources (user names, passwords, API keys). If you choose "save", the secret is kept on the headset in the Android Keystore, encrypted by the device; otherwise it stays in memory only until the app closes. A saved secret is sent only to the share, server or site it belongs to, never to us; it is part of the encrypted backup file (section 7) and is removed by "Reset App Data";
- playback state: positions, favorites, playlists, chosen modes and settings;
- thumbnails, depth maps the app computes from your pictures, and a search index of captions and places of your media;
- your diorama library and saved scenes;
- room geometry, only if you use "Room geometry" and allow access to the headset's spatial data: a simple shape of walls, floor and furniture, no camera image;
- addresses of a PC companion ("Buddy") you use (see section 6).
The 3D depth of a picture is computed on the headset by an AI model inside the app. Your pictures are not uploaded for this.
4. Camera
When you use the text-capture mode (to read a login or address from a sheet of paper), the app uses the headset's passthrough camera, after asking for your permission. The camera runs only while this mode is open. Text is recognized on the headset; no camera image is stored or sent anywhere, and the recognized text stays on the headset unless you use it yourself, for example as a login.
5. Connections the app makes
- Your own sources: the app talks to the folders, network shares, media servers and web addresses you choose. What those services do is governed by their operators.
- Meta platform: at start the app asks the Meta platform whether your account owns the app (entitlement check). The app uses the Meta XR SDK for headset functions. Meta processes data for this under its own terms and privacy policy.
- Optional online sources ("API sites"): off until you add a site and enter your own API key. A search then sends your key and search text (for map-based sources, a small geographic area) to that site over HTTPS. Its own privacy policy applies.
6. Optional PC companion ("Buddy")
If you run the Buddy on your own computer, the app can find it on your home network and connect to it encrypted (TLS). When you use a Buddy feature, the app sends the link to a medium, or the medium itself, to your Buddy. Nothing is sent to us. The Buddy is a separate program; what it does with the data is described in its own privacy policy.
7. Backup
You can save the app's data into an encrypted backup file on the headset. The password is yours; the app does not store it and we cannot open the file. The app never sends the file anywhere.
8. Purchases
Purchases are handled entirely by the Meta Horizon Store. The app does not process payment data.
9. Deleting your data
To delete the data the app keeps on your headset: open the app's settings, go to "Storage", choose "Reset app data" and confirm. This deletes the data listed in section 3 (except language and accessibility preferences). Uninstalling the app or clearing its storage in the headset settings deletes everything. The app sets no automatic expiry; the data stays on your headset until you delete it.
The app sends no personal data to us, so we hold no data about you from the app. If you have written to us about the app, you can ask us at any time to delete your message and address, free of charge and wherever you live. To do so, send a message through the contact form (www.3d-gallery.org/contact.html) or to the e-mail address in the Impressum, say that you want your data deleted, and name the message or the address it concerns. We delete them unless a legal retention period obliges us to keep them, and in that case we tell you so.
10. Children
The app is not directed at children under 13. We collect no personal data of children.
11. Contacting us
You can reach us with the contact details in section 1. How the website handles a message you send us is described in the privacy policy of the website.
12. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing of your personal data (Art. 15–21 GDPR). To exercise them, contact us using the details in section 1. You also have the right to lodge a complaint with a supervisory authority, for example the authority in our state: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Wiesbaden.
13. Changes
We update this policy when the app changes. The date at the top shows the latest version.