GoreBox 27 Privacy Policy
The short version. GoreBox 27 is built to know as little about you as possible. There are no ads, no analytics, no tracking SDKs, and no in-app purchases. We never store your date of birth. Chat is not recorded on our servers. What we do process exists to run online multiplayer, keep it safe, and nothing else.
Who is responsible
Controller: Felix Filip, trading as F²Games,
Rostiger Weg 2, 01558 Großenhain, Germany.
Contact:
contact@f2games.com
This policy covers the game GoreBox 27. The website you are reading it on has its own site privacy policy, and the original GoreBox has its own.
What we process, and why
| Data | Where it lives | Why (legal basis) |
|---|---|---|
| Account identifier (Unity Gaming Services player id) | Unity Gaming Services, our processor | Running the online multiplayer you asked for (contract) |
| Display name you choose | On your device, mirrored to your UGS profile | Showing who you are to other players (contract) |
| Age band only (under 13 / 13–17 / 18+) | On your device only | Restriction only, never to tailor content: under 13 is offline entirely, under 18 blocks voice. Age is self-declared. Your date of birth is used once, on your device, to work out the band, and is never stored and never transmitted. |
| Multiplayer approval flag | Unity Cloud Save, protected | Access control for online play (contract, legitimate interest) |
| Progression and unlocks | Unity Cloud Save | Saving your game (contract) |
| Player reports you file or receive | Unity Cloud Save, rate limited and bounded by design: the oldest records are dropped as new ones arrive, so the store does not grow without limit | Moderating rule-breaking (legitimate interest) |
| Ban records (rule ids and duration) | Unity Cloud Save | Enforcing the Multiplayer Rules (legitimate interest) |
| Client integrity signals | Checked on your device. A tamper detection files one report record. | Anti-cheat and anti-tamper (legitimate interest). Disclosed here deliberately. |
| Voice chat audio | Unity Vivox, only if you opt in. Off by default, unavailable under 18. | Voice chat (consent, revocable at any time in Settings) |
| Session metadata while you host (session name, your display name, map, mode, region) | Unity Multiplayer Services, public to the server browser | Letting players find and join games (contract) |
What we do not do
- No advertising and no ad identifiers
- No analytics or telemetry SDK
- No sale or sharing of personal data
- No chat logging on our servers. Text chat is relayed live between the players in a session and kept only in your local session log.
- No biometric data and no precise location
- No storage of your date of birth, anywhere, ever
Processors
Unity Technologies processes the data above on our behalf under Unity's Data Processing Agreement, across Unity Gaming Services: Authentication, Cloud Save, Cloud Code, Multiplayer Services and Relay, Friends, and Vivox. Traffic in relayed sessions flows through Unity Relay, which also means other players do not learn your IP address from us.
Children
GoreBox 27 is not made for children. It is an adult product. We apply an 18+ recommendation, we do not market it to anyone younger, and there is no child mode, no child account, and nothing in it designed for a younger player.
Some minors will install it anyway. A self-declared birthday is not proof of age, so rather than pretend otherwise we work out whether a player is under 13, under 18, or an adult, and use that for exactly one purpose: taking things away.
- Under 13 — no online play at all. Nothing is collected from them either: with no online session there is no account, no Cloud Save, and nothing leaves the device.
- Under 18 — no voice chat, links and email addresses masked in chat, reduced violence pre-selected.
We do not block a minor from the single-player game, and that is a deliberate limit rather than an oversight. A hard lock-out built on a self-declared birthday teaches every player to type 1990, which would cost us the signal the restrictions above depend on. The storefront's age rating is the gate meant to carry that weight, and an adult stands behind that purchase.
The band is never used to tailor content, to advertise, to recommend anything, or for any purpose other than the restrictions above. We ask for a date of birth once, derive the band on your device, and neither verify nor store it.
Retention
Reports and moderation records are bounded by design, with the oldest dropped as new ones arrive. Timed bans expire and their records go with them. Cloud Save data persists for as long as your account exists. Local settings, including the age band, live on your device and go away when you delete them.
Your rights
You have the right of access, rectification, erasure, restriction, portability, and objection. Write to contact@f2games.com. Deleting your account removes the data held on the Unity Gaming Services side within 30 days.
You may also complain to a supervisory authority. Ours is the Saxon Data Protection Officer (Die Sächsische Datenschutzbeauftragte), Devrientstraße 5, 01067 Dresden, Germany, datenschutz.sachsen.de.
Security
Access control is server-authoritative. Protected Cloud Save keys are writable only by server-side Cloud Code. Administrative operations fail closed. Restricted builds are gated by signature. Personal data breaches are notified under Art. 33 and 34 GDPR.
Changes
Material changes bump the acceptance version inside the game, so you see and accept the new terms before playing online again.
- Version 1, 14 August 2026. First publication.
Questions about any of this go to contact@f2games.com. The companion document is the GoreBox 27 Terms of Service.