Privacy Policy – SECE

Privacy Policy

Last Updated: 16/06/2026

1. Introduction

This Privacy Policy explains how Stockholm University (“we,” “our,” or “us”) handles information in connection with the use of “SECE” extended reality (“XR”) application.

SECE” is provided as part of a research project and is distributed through the Meta Quest platform. Please read this Privacy Policy carefully before using it.

2. Information Collected by the Research Team

The research team does not collect, store, retain, sell, share, or otherwise process personal information through this Application.

We do not operate databases or servers that store user information obtained through the Application.

3. Meta Account Authentication

The Application uses Meta platform services to verify that users are authenticated with a valid Meta account and are authorized to access multiplayer features.

This authentication process is performed through Meta’s platform infrastructure.

The research team does not store, retain, or maintain records of Meta account information obtained during this process.

4. Spatial Mapping and Co-Location Features

The Application supports multiplayer co-located experiences.

To enable these features, Meta platform services may process information relating to a user’s physical environment, including but not limited to:

  • Spatial mapping information
  • Scene understanding information
  • Spatial anchors
  • Environmental scan data
  • Point cloud data
  • Other spatial computing data required for shared coordinate alignment

This information may be transmitted to and processed by Meta in order to establish and maintain a shared spatial reference between participating devices.

The research team does not receive, access, store, retain, or analyse this environmental or spatial data.

Any collection, transmission, processing, storage, or retention of such information is performed by Meta and is governed by Meta’s own privacy policies and terms.

5. Multiplayer Connectivity

The Application uses multiplayer networking functionality to allow users to participate in shared experiences.

Information necessary for establishing and maintaining multiplayer sessions may be processed by Meta or other platform services used by the Application.

The research team does not maintain logs of multiplayer session activity and does not store information regarding user participation.

6. Third-Party Services

The Application relies on third-party services to provide core functionality.

Meta Platforms, Inc.

The Application uses Meta platform services for:

  • User authentication
  • Entitlement verification
  • Platform integration
  • Spatial computing features
  • Shared spatial alignment and co-location functionality

To provide these services, Meta may process account information and spatial or environmental data required for mixed reality and co-located experiences.

The research team does not access, store, retain, or analyse such information.

Information processed by Meta is governed by Meta’s own privacy policies and terms of service.

Photon Engine

The Application uses Photon Fusion networking services provided by Exit Games GmbH to enable multiplayer functionality.

To establish and maintain multiplayer sessions, Photon may process information such as:

  • Network connection information
  • IP addresses
  • Session identifiers
  • Technical information necessary for multiplayer communication

The research team does not use Photon services to collect participant data and does not maintain independent records of this information.

Information processed by Photon is governed by Photon’s own privacy policies and terms of service.

7. Research Activities

The Application is used in connection with a research project conducted by Stockholm University and Ericsson AB.

The Application itself does not collect research data from participants.

If separate research activities involve surveys, interviews, questionnaires, consent forms, observations, recordings, or other forms of data collection, those activities will be governed by separate participant information and consent documentation provided to participants.

8. Data Storage and Retention

Because the research team does not collect or store personal information through the Application, we do not retain user data.

Any information processed by Meta is retained according to Meta’s own policies and practices.

9. International Data Transfers

The research team does not transfer personal information internationally because we do not collect personal information through the Application.

However, information processed by Meta may be transferred, stored, or processed in accordance with Meta’s own systems and policies.

10. Children’s Privacy

The Application is not directed toward children who do not meet the minimum age requirements established by Meta for use of the Meta Quest platform.

We do not knowingly collect personal information from children through the Application.

11. Security

The research team does not store personal information collected through the Application.

Security of authentication, networking, and spatial computing services is managed by the relevant platform providers, including Meta.

12. Data Access and Deletion Requests

The research team does not collect, store, retain, or maintain personal information through the Application. As a result, we do not possess user data that can be accessed, corrected, exported, or deleted upon request.

If you wish to delete information that may be processed by third-party service providers used by the Application, you should contact those providers directly and follow their procedures for exercising your privacy rights.

Relevant providers include:

  • Meta Platforms, Inc., which may process account authentication information and spatial computing data required for platform functionality.
  • Exit Games GmbH (Photon), which may process technical networking information required for multiplayer communication.

Requests regarding information processed by these providers are subject to their respective privacy policies and applicable laws.

If you have questions about whether the research team holds any information about you, you may contact us using the details provided in the Contact Information section of this Privacy Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any updates will be reflected by revising the “Last Updated” date above.

Continued use of the Application after changes become effective constitutes acceptance of the updated Privacy Policy.

14. Contact Information

If you have questions about this Privacy Policy or the research project, please contact:

Extrality Lab, Stockholm University Department of Computer and System Sciences, DSV

P.O. Box 1073, 164 25 Kista

extralitylab@dsv.su.se

15. Summary

The research team does not collect, store, retain, or analyse personal information through the Application.

The Application relies on:

  • Meta platform services for authentication, platform integration, and co-located mixed reality functionality; and
  • Photon Fusion networking services for multiplayer connectivity.

These service providers may process information required to provide their services, including authentication information, network connection information, and spatial computing data used for shared mixed reality experiences.

The research team does not have access to or retain such information unless explicitly stated elsewhere in participant documentation.