Privacy Policy
Who is responsible (controller).
LuWi Games GmbH, represented by managing director Simon Widmann
c/o MDC Management#1553, Welserstraße 3, 87463 Dietmannsried, Germany
Tel. +49 (0) 175 203 1887, [email protected]
Amtsgericht München, HRB 283949, VAT ID DE361500675, luwigames.com
This policy covers the Legion1 game and the legion1.live website. The privacy policy for the luwigames.com website (in German) is at luwigames.com/contact.html.
1. Summary
Legion1 is an online multiplayer VR shooter made by LuWi Games GmbH. To let you play with other people, keep your progress, sell optional cosmetic currency and run the legion1.live website, we process a limited amount of data about you. We do not sell your data, we do not use it for advertising, and we do not see your real name, e-mail address, payment details or precise location. You can delete all of it at any time (section 10).
2. Data from your Meta account (Meta Platform features)
Legion1 uses the following Meta Platform features. This is exactly what we receive through each of them and what we do with it.
| Feature | What we receive | How we use it |
|---|---|---|
| User ID | Your app-scoped Meta user ID, plus a one-time proof that the ID really belongs to you | It is the key of your Legion1 account. Our server checks the proof with Meta, then creates or loads your account (progress, currency, cosmetics, settings) under this ID. It is also your identity in multiplayer sessions, in moderation (reports, mutes, bans) and when you sign in on legion1.live. It is stored for as long as your account exists. |
| User Profile | Your Meta username (alias) and display name, and your profile picture URL | Shown to other players: above your avatar, in lobbies, scoreboards, leaderboards, the kill feed and match results, on your public player page on legion1.live, in live streams of matches, and on the leaderboard of the public Legion1 Discord server. Stored with your account; it is refreshed each time you sign in, so changes on Meta carry over. |
| Friends | The list of your Meta friends who also own Legion1, with their names, pictures and whether they are online and where | Shown only to you, on the Friends board in the game, so you can see and join friends. It is read on your headset when the board is open and is not sent to or stored on our servers. |
| Invites | The Meta user IDs and usernames of the friends you choose in the Meta invite panel | Sending them an invitation to your party or match. The invite is kept on our server until it is answered or expires. |
| Deep linking | When you start the game from an invite or a friend's "Join" button: the destination and the party or match code you were invited to | Putting you straight into that party or match. While you play, the game also tells Meta which destination, party or match you are in (group presence) so your friends can see it and join you. This information is not stored by us. |
| In-app purchases | The product (SKU) you bought and Meta's confirmation that you own it | Delivering the Tokens you bought. Our server confirms the purchase with Meta, marks it as used and credits your account. We keep a purchase record (user ID, product, amount, time, status) for delivery, refunds, fraud prevention and accounting. Payment is handled entirely by Meta; we never receive card or billing details. |
| Device ban (attestation) | A signed integrity report about the app and the headset, including a device identifier created by Meta for our app | Anti-cheat: our server checks that the game is unmodified and that the headset is not banned from Legion1. If a device is caught cheating or modding, we ask Meta to ban that device from Legion1, and accounts used on it are banned too. For this we keep which account was seen on which identifier for 90 days (Meta changes the identifier every 30 days); identifiers of banned devices are kept for as long as the ban lasts. The identifier is used only for these checks and bans; it is not shown to anyone and not used for anything else. |
We have no access to your Meta account beyond these features. Meta's own privacy policy applies to your Meta account.
3. Data created while you play
| Data | Why |
|---|---|
| Statistics: kills, deaths, assists, damage, matches, wins, playtime, XP, level, rank, weapon XP, achievements, quests, match history | Progression, leaderboards, match results, quests |
| Currency balances (Credits and Tokens), owned and equipped cosmetics, clan membership | Your inventory and shop |
| Current room and game version (a heartbeat about every 20 seconds while the game runs) | Showing friends and followers where you are, playtime, update notices |
| Settings and consent you gave | Remembering your choices |
| Voice chat | Talking to other players in your match. Voice is relayed live and is not stored by us, except as part of match streams (section 5). |
4. legion1.live website
You can sign in on legion1.live with a one-time code from the game. Your player page shows your name, picture, level, stats, achievements and clan. If you choose to use these features, we also store: the bio you write, comments you post, the players you follow, your browser's push subscription if you allow notifications ("player X is online"), and, if you connect Discord, your Discord ID, username and server booster status. Your sign-in token is kept in your browser's local storage. Like every website, our servers process your IP address to deliver pages; it is not stored in our database.
5. Live spectating, recordings and clips
Matches can be watched live on legion1.live and on the TVs in the game lobby. Viewers see the match as rendered by our spectator host, including player names, pictures, levels, scores and the match voice chat. To cut highlight clips, the stream is kept in a short rolling buffer on our server that is deleted automatically after a few minutes. When a standout play happens, a clip of about 12 seconds is saved and shown on legion1.live and in the clips channel of the Legion1 Discord server. By playing Legion1 you agree that your matches may be streamed this way. If you want a clip of you removed, write to us.
6. Moderation, anti-cheat and bans
We store reports you file, players you mute or block, reports about you, short-lived kill and match logs to detect stat manipulation, and anomaly records. Repeated independent reports can lead to an automatic temporary ban; bans are recorded with their duration. A banned account can still play offline against bots, without progress or stats except playtime and a few offline quests.
7. Services we use
- Meta Platforms: sign-in, entitlement, friends, invites, presence, in-app purchases and device attestation.
- Photon (Exit Games GmbH, Germany): multiplayer networking and voice relay. Your user ID and display name are your network identity.
- Microsoft PlayFab: player account, statistics, currency and inventory storage.
- Cloudflare: our backend (sign-in, progression, purchases, moderation) and its database.
- Hetzner Online GmbH (Germany): server for the website, live streams and clips.
- Discord: the public Legion1 server shows the leaderboard and clips by display name; moderation and sales notices go to a private channel only we can see.
8. Legal basis (GDPR)
Running the game and website you asked to use (account, multiplayer, friends and invites, progression, purchases, spectating): Art. 6 (1) (b) GDPR, performance of a contract. Anti-cheat, moderation, bans and highlight clips: Art. 6 (1) (f), our legitimate interest and that of other players in a fair, safe and visible game. Keeping purchase records: Art. 6 (1) (c), legal obligations under tax and commercial law. Optional website features (push notifications, Discord connection): Art. 6 (1) (a), your consent, which you can withdraw at any time.
9. How long we keep it
Account, profile, statistics, progression, inventory, website profile, follows and mute list: until you delete your account. Presence: overwritten continuously. Kill and match logs: 48 hours. Anomaly records: 30 days. Reports: as long as needed for moderation, at most 12 months. Bans: for their duration plus the strike count. Device identifiers: 90 days after last use, or for the duration of a device ban. Stream buffer: a few minutes. Clips: until removed. Purchase records: as long as tax and commercial law requires.
10. Deleting your data and your rights
In the game: Settings, then Delete account (press the button twice). This immediately removes your account, profile, statistics, progression, currency, cosmetics, quests, achievements, follows, comments, clan membership, mutes and reports about you from our database, and deletes your linked PlayFab player account. Reports you filed are kept anonymised so moderation history stays intact. The next time you start the game you get a fresh, empty account.
Without the game (for example if you no longer own a headset): e-mail [email protected] with the subject "Delete my Legion1 data" and your Meta username. We delete everything listed above within 30 days and confirm by e-mail. Data-deletion requests that reach us through Meta are handled the same way.
Only purchase records are kept after deletion, because the law requires it; they are not used for anything else.
Under the GDPR you also have the right to access, correct or export your data, to restrict or object to processing based on legitimate interest, to withdraw consent, and to complain to a supervisory authority. Write to [email protected]; we answer within one month.
11. Children
Legion1 is intended for players who meet the minimum age of the Meta Quest platform in their country. We do not knowingly collect data from children below that age; if you believe a child is using the game, contact us and we will delete the account.
12. Changes
If this policy changes in a way that matters, the game asks you to accept it again on your next start. The current version is always at legion1.live/privacy.