Privacy Policy
Last updated: 15 November 2026
Can Carnival collects no personal data for advertising or analytics and has no user accounts. This policy explains the little data that is involved when you play.
1. Controller
Net-Prom Spletne storitve BORIS KRAJNC S.P., Videm pri Ptuju 27, 2284 Videm pri Ptuju, Slovenia, is responsible for the processing described here. Contact: info@playcancarnival.com">info@playcancarnival.com.
2. What stays on your device
| Data | Purpose | Where it is kept |
|---|---|---|
| Game progress: stars, best scores, challenges, chosen bonus stone, up to four local player profiles named "Player 1" to "Player 4" | so you can continue where you left off | in the storage of your browser or the app on your headset |
| Slingshot calibration and music setting | comfort settings | same |
| Headset and controller position, hand tracking | to aim and shoot | processed live on the device, not stored |
| Detected surfaces in your room, if you allow it in mixed reality | to help place targets on a surface | processed live on the device, not stored |
None of this is sent to us. You can delete it at any time by clearing the site data in the browser or the app data on the headset.
The Game does not use cookies for tracking, does not show advertising and contains no analytics or social media code.
3. What reaches a server
Hosting. The Game and its website are delivered by Cloudflare, Inc., which acts as our processor. As with any website, its servers process your IP address, the time of the request and technical details of your browser to deliver the files and protect the service. The legal basis is our legitimate interest in running a secure website (Article 6(1)(f) GDPR).
Purchases. The full game is bought through the Meta Horizon Store. Meta processes your account and payment data as an independent controller under its own privacy policy. We receive no payment details.
Purchase check. When the store version starts with a purchase on your account, and when you buy or restore the full game, the Game sends our server an identifier that Meta creates for your account only for this app. Our server asks Meta whether that account owns the full game and, if so, delivers the paid content. We do not store this identifier and use it only to provide what you bought (Article 6(1)(b) GDPR).
Contacting us. If you e-mail us, we use your address and message to answer you and keep the correspondence for as long as needed to deal with it.
4. Who receives data
We do not sell or share personal data. Data is handled only by the hosting provider acting on our instructions and, for purchases, by Meta. If a provider processes data outside the European Economic Area, this happens under the safeguards the GDPR requires, such as standard contractual clauses.
5. Children
The Game is not directed at children under 13 and we do not knowingly collect personal data from them.
6. Your rights
Under the GDPR you may ask us for access to your personal data, for its correction or erasure, for restriction of processing and for data portability, and you may object to processing based on legitimate interest. Write to info@playcancarnival.com">info@playcancarnival.com; we answer within one month.
You also have the right to complain to a supervisory authority. In Slovenia this is the Information Commissioner (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana.
7. Changes
If the Game changes, for example if an online leaderboard is added, we will update this policy before the change takes effect and show the new date at the top.