We use functional and performance cookies to operate our website. With your consent, we would like to set analytical/targeting cookies to measure how you use this site and record statistical information. For more information, please read our Privacy Notice.
Last updated November 2023
This Privacy Notice (the “Notice”) explains how we, Build A Rocket Boy Ltd. (also: “Build A Rocket Boy“, “BARB” or “we“), collect and use your personal data when providing and maintaining our website www.everywhere.game, as well as our platform “EVERYWHERE” and certain online features, online play connectivity and interactivity and other features relating to EVERYWHERE, to allow you to play, create and connect with others on our platform. In this Notice, our website and EVERYWHERE including all of its features and services are collectively referred to as the “Services”. This Notice also informs you about how we protect your personal data and the rights and options you have to control your data.
This Notice will give you information about:
We advise you to read this Notice carefully and to consult it on a regular basis when you use our Services, as it may be necessary for us to amend this Notice from time to time. If we want to make substantive changes to the way we process personal data, for example if we want to collect new types of personal data or process personal data for new purposes, we will take reasonable steps to inform you in advance.
Please note that this Notice specifically applies to our website www.everywhere.game and our platform EVERYWHERE. If you want to learn more about how we collect and process personal data when applying for a job at Build A Rocket Boy, please consult the candidate privacy notice on www.buildarocketboy.com.
When we talk about data or personal data in this Notice, we refer to all data that can be directly or indirectly traced back to you as an individual. Depending on how you use our Services, we collect and process data that you ask us to process or data that we otherwise collect. The categories of data we process are:
Player Account Data – which consists of data you provide and which we automatically collect when you create an account in EVERYWHERE:
Gameplay Data – which consists of data we automatically collect throughout your use of our Services and during gameplay:
Technical Data – which consists of data we automatically collect throughout your use of our Services:
Note: Some of this Technical Data is collected through cookies, pixels and other technologies (“Cookies”), for more information on Cookies please see section 5.
Transaction Data – which consists of data you share with us and which we automatically collect when you purchase in-game products or services:
In-Game Social Data – which consists of data related to communications and interactions between players in EVERYWHERE:
Customer Support Data – which consists of data which is required to provide you with customer support including through Discord and our presskit Enquiry Channel:
Marketing Data – which consists of data which is provided by you to us for the purpose of sending marketing materials about our products and services:
| Purpose of processing | Categories of personal data | Corresponding legal basis |
|---|---|---|
| Creating and managing your account | Player Account Data | This is necessary for us to fulfil our contract with you to create and manage your EVERYWHERE account |
| Developing and improving our Services | Technical Data, Gameplay Data | It is our legitimate business interest to develop and improve the delivery of our Services (including by understanding how you use the services) and to develop new services or products |
| Processing and managing your in-game purchase orders, in-game payments and entitlements | Transaction Data | This is necessary for us to fulfill our contract with you when you purchase our in-game products or services, including any entitlements you may receive. |
| To improve gameplay and your in-game experiences | Account Data, Technical Data , Gameplay Data | It is our legitimate business interest to develop and improve its Services and gameplay |
| To provide you with and to manage your social interactions with other players within EVERYWHERE | In-Game Social Data | We process this data only when you request or perform such social interactions within EVERYWHERE and with your consent where required by applicable law |
| To provide you with a personalized and tailored game experience, including providing you with recommendations we think you’ll like | Account Data, Gameplay Data, In-Game Social Data | It is our legitimate business interest to provide you with a tailored and personal gameplay experience, including providing you with recommendations we think you’ll like. Where required by applicable laws we will ask your consent |
| To provide you with helpful and seamless customer support experience | Customer Support Data | It is our legitimate business interest to provide you with such a helpful and seamless customer support experience |
| To perform ‘know your client’ processes | Player Account Data | It is in our legitimate interest to perform any ‘know your client’ processes to protect our business and Services |
| To protect establish, exercise or defend our and third parties’ rights, to defend against lawsuits and to detect and prevent crime and fraud within our Services | Player Account Data, Gameplay Data, Technical Data, Transaction Data, In-Game Social Data, Customer Support Data | It is our legitimate business interest to protect its and third parties’ rights and to detect, investigate and prevent crime and fraud within or related to its Services, and the products and services of third parties to the extent permitted by law |
| To comply with our legal obligations, for instance our fiscal, bookkeeping and tax obligations | Player Account Data, Gameplay Data, Technical Data, Transaction Data, In-Game Social Data, Customer Support Data | This processing is necessary for our compliance with our legal obligations |
| Providing you with marketing materials for the promotion of Build A Rocket Boy and our products and services (including EVERYWHERE and MindsEye) | Marketing Data | It is our legitimate business interest to market our activities and promote the success of our business, website(s) and services. Where required by applicable laws we will ask your consent |
As per our Terms of Use, you can sign up to create an account if you are aged 13 or older. In order to use our Services for EVERYWHERE Alpha testing you have to be aged 18. We do not knowingly collect or process personal data within our Services from minors aged below 13. If we learn we have collected or received personal data from anyone under the age of 13, we will delete such data. Please contact us if you believe we might have collected or received data from minors under the age of 13. In addition, if you believe that a minor aged below 18 has access to or is playing EVERYWHERE, please contact us.
Where relevant and necessary, we provide personal data to the following third parties:
We use Cookies to store and access data on your device to help our websites and apps work. This table explains their purpose, how long they last, and who else can access their data. Where necessary under applicable laws we obtain your consent for using these Cookies on your devices.
| Cookie Name | Functionality | Duration | Purpose |
|---|---|---|---|
| _under13 | Functional | 12 months | Applied if a user enters an age under 13. |
| _evUserId | Performance | 30 days | Unique ID used to track users between our websites (for example, from the EVERYWHERE website to account creation) |
| _barbToken | Functional | 1 day | Remembers your login information for 24 hours |
| _barbUserId | Performance | 30 days | Unique ID used to track users between our sites (for example, from the EVERYWHERE website to account creation) |
| Google Analytics | Targeting | 90 days | To track your behaviour on our website and improve the website’s performance. |
| Third-Party Marketing Cookies (Google, YouTube, Meta, Stackadapt, Reddit, TikTok and Twitter) | Targeting | Up to 12 months | For advertising purposes, including Google Ads (also for YouTube), Meta, Stackadapt, Reddit, TikTok and Twitter |
We try to process your data within the EU and UK as much as possible. Sometimes it is necessary to transfer your data outside the EU or UK to a country which does not provide for the same level of data protection as is provided in the EU and the UK, for example, if a third-party service provider is located outside Europe. When we transfer your data outside the EU or UK, we ensure that this is done in accordance with applicable data protection laws and that the protection of your data is adequately safeguarded. We do this, for example, by concluding agreements with third party service providers based on the EU or UK standard contractual clauses for the international transfer of personal data. If you would like to receive more information on the safeguards taken, please contact us via privacy@buildarocketboy.com.
We have implemented physical, technical and organisational security measures to protect your personal data as required by applicable laws. These measures are aimed at ensuring the integrity and confidentiality of your personal data, for instance by ensuring that only authorised employees have access to your personal data, and to protect it against unlawful or unauthorized destruction, loss, alteration, use or disclosure, or access. We evaluate and update these measures on a regular basis. Please be aware that no information system can be 100% secure. This means that we cannot guarantee the absolute security or availability of your personal data.
We will retain your personal data for the duration of your interaction with our Services, unless a shorter retention period is required by applicable laws or the data is no longer necessary for the purposes for which the data was obtained. Once you no longer interact with our Services, we will retain your personal data for the period of time that enables us to:
We respect the rights granted to you under applicable data protection laws. Depending on your location and such applicable laws, these may include the right to access your personal data that we hold about you, to rectify or erase certain personal data, to restrict processing of your personal data and to get an electronic copy of your personal data for purposes of transmitting it to another company. These rights may be subject to certain limitations or restrictions as allowed or imposed by applicable laws, if this is the case we will let you know in our communications with you.
In addition, where we rely on our legitimate interest to process your personal data, you have the right to object to such processing, wholly or partly, on grounds related to your particular situation and in accordance with the laws applicable to you. For instance, depending on your country this may include a right to opt-out to marketing communications via an opt-out link in the respective marketing message.
Where we rely on your consent to process your personal data, you have the right to withdraw your consent at any time.
To exercise your rights, please use the options provided thereto in your EVERYWHERE account, or send an email to privacy@buildarocketboy.com.
You are also entitled to lodge a complaint with your local data protection authority.
Our Services may contain links to third party services or websites. We are not responsible for the way in which these third parties handle your personal data. We advise you to read the privacy notice of the third party when you make use of their service or visit their website in order to understand how this third party collects and uses your personal data.
Build A Rocket Boy Ltd. 29 Constitution St, Leith, Edinburgh EH6 7BS United Kingdom Email: privacy@buildarocketboy.com
This section provides information required under various U.S. state privacy laws about how we handle certain personal information we have collected, used, and disclosed and certain rights under applicable state law. These provisions supplement the other sections in this Notice.
The chart below provides additional information about the personal data we collect and disclose. You can read more about the personal data we collect in the “What personal data we collect” section above, how we use personal data in the “Why we process your personal data” section above, and how we retain personal data in the “How we protect and store personal data” section above.
| Category | Categories of third parties to whom we disclosed personal data for business purposes |
|---|---|
| Identifiers (e.g., your name, username, IP address) | Our external game backend support platform provider, to the extent you have chosen to share this information |
| Protected classification characteristics under California or federal law (e.g., your gender) | Our external game backend support platform provider, to the extent you have chosen to share this information. |
| Commercial Information, such as your transaction history | Our external payment service provider if you have chosen to share that information. |
| Internet or other similar network activity (e.g., information about your interaction with EVERYWHERE) | Our cloud service provider. |
| Geolocation data (e.g., your country) | Both our cloud service provider and our external game support platform. |
| Potentially Sensitive Information (e.g., your account log-in information and bank account details) | Our external payment service provider if you have chosen to share that information. |
Certain data collection and processing on our Services may be considered “targeted advertising,” a “sale,” or “sharing” for cross-context behavioral advertising under applicable state law. As defined by California law, we “sold” or “shared” identifiers, internet or similar network activity, and geolocation data with our third-party marketing partners to provide you with more relevant advertising. We do not “sell” or “share” the personal information of known minors.
Please note that we use and disclose sensitive personal data only for purposes expressly permitted under California law.
To the extent provided for by law and subject to applicable exceptions, individuals may have the following rights concerning their personal data:
You may submit requests to know, delete, or correct by contacting us using the contact information provided above. To exercise your rights, please use the options provided thereto in your EVERYWHERE account or send an email to privacy@buildarocketboy.com. Please include the phrase “Personal Information Privacy Request” in the subject line, and specify the Service you are inquiring about, along with your name, address, and email address. To protect your personal data from unauthorized access, change, or deletion, we will further verify and respond to your request consistent with applicable law, taking into account the type and sensitivity of the personal information subject to the request. We may need to request additional personal information from you to protect against fraudulent or spoofed requests.
To submit a request to opt out of “sales,” “sharing” for cross-contextual behavioral advertising, or targeted advertising, please opt out of such or use privacy preference signals recognized under applicable local law, such as the Global Privacy Control (GPC), but please note that this signal will be linked to your browser only. For more information on the GPC and how to use a browser or browser extension incorporating the GPC signal, see https://globalprivacycontrol.org/.
Authorized agents wishing to exercise rights on behalf of an individual may use the submission method noted above. We will honor a request from an authorized agent provided that (i) the individual provides written authorization to the authorized agent to act on their behalf and we can verify their identity, and (ii) the agent submits proof of authorization.
You may also have a right to appeal a decision we make relating to requests to exercise your rights under applicable local law. To appeal a decision, please contact us via privacy@buildarocketboy.com and include the phrase “Personal Information Appeal Request” in the subject line.