Privacy policy
Last updated September 28, 2026
EgoGaming pays people to play VR games while an app records their gameplay. Recorded gameplay is what our data partners use to build and study AI. That only works if you can trust us with it, so this page says plainly what we collect, why, who sees it, and how to get it deleted.
EgoGaming is run by EgoGaming, in the United States. Questions about anything here go to [email protected].
The short version
- The VR Logger app records only while you have started a session and confirmed it is you playing.
- It records how you move, what you press, and the game itself. Video and game sound only if you say yes to each. Never your microphone, your webcam, other apps or your files.
- Recordings are filed under a participant ID, not your name. Our data partners get recordings, never your name, email, ID documents or payment details.
- Your ID photos are encrypted, seen only by the people who review applications, and deleted 30 days after we decide.
- You can leave at any time from the app's Settings, and ask us to delete your account by email.
What we collect, and why
Your account
- Email address and password. To sign you in. Your password is stored only as a salted hash, so nobody here can read it.
- Two-step sign-in, if you turn it on. The secret behind your authenticator codes is stored encrypted.
- Who invited you, if you signed up through a referral link, so the referral bonus reaches the right person.
Your application
- About you: full name, date of birth, home address, phone number, Discord handle.
- About your setup: which games you play, your PC, your headset, whether you have a camera, your VR experience, how many hours a week you can commit.
- A photo of a government photo ID and of a proof of address (such as a utility bill or bank statement), to confirm you are who you say, that you are 18 or older and where you live. They are encrypted, only shown to team members whose job is reviewing applications, every view is logged with who looked, and they are deleted automatically 30 days after your application is decided.
Getting paid
- Payout method and details (for example your PayPal address or bank details), stored encrypted.
- Your hours: each session's date, length, game and headset, and whether it was approved. We keep this as the record of what we paid you.
What the VR Logger app records
The app runs on your PC. It records only after you start a session and confirm you are the person playing, and it stops when you press Stop, quit the app, sign out of Windows or shut down. Nothing is recorded between sessions.
While a session runs it records:
- Movement: where your headset, hands and controllers are and how they move, including the positions of your fingers where your headset tracks them, and where each eye's view is pointed.
- Input: the buttons, triggers and sticks you use, and events the game reports.
- Video of what you see in the headset, only if you agreed to video when you set the app up.
- The game's own sound, only if you agreed to audio. This is the sound the game makes, captured from the game alone. Your microphone is never recorded.
- About the session: which game, which headset, which VR software, when it started and how long it ran, and how complete the tracking was.
It never records your microphone, your webcam, other apps, your desktop, or files on your PC.
How recordings are labelled. Each recording is filed under a participant ID, a random code like
P-4K7Q-M2XA, not your name or email. The link between that code and your account is kept in a
separate system that only we can use, because we need it to pay you and to delete your data if you ask.
A recording is not anonymous. How a person moves is distinctive enough to recognise them: in published research, 55,541 VR users were identified with about 94% accuracy from 100 seconds of head and hand movement. So we do not claim these recordings are anonymous. They are personal information about you, kept under a participant ID, and some laws treat data like this as biometric or sensitive information. We handle it that way everywhere.
How recordings leave your PC. The app uploads in the background, only on a connection that is not metered. While a game is running, uploads slow to a trickle (2 Mbps) so they stay out of its way, and you can set a maximum upload speed in the app. Uploads are encrypted in transit. Your PC keeps its copy until our server has checked that every file arrived exactly as recorded, and then deletes it. A recording the server refuses, a corrupt file for example, stays on your PC instead so the problem can be looked at; you can delete it yourself.
Crash reports. If the VR Logger app crashes, it sends us a report of what went wrong: the error and the steps leading to it, the app, Windows and graphics driver versions, your graphics card and, when it happens during a recording, your headset model, the game and the session ID, recent lines from the app's log and its recent resource readings (memory and processor use). For a crash in the recorder or the headset watcher, it also includes a technical memory snapshot (a crash dump). We remove your Windows user name and PC name from the text before it leaves your PC, but a crash dump can contain file paths that include your Windows user name. The app also reports whole-PC crashes, power losses and display-driver resets that it finds in the Windows System event log around a recording, and games that stop responding mid-recording. A crash report never includes gameplay video, audio or recorded movement, and you can turn it off with the Send crash reports switch in the app's Settings.
Your consent. When you set the app up it shows you the consent text for your region, which you read to the end and agree to. Video and game sound are separate choices, and saying no to either still lets you take part. We keep a record of which version of the text you agreed to, and when.
If the app crashes
- A crash report from the VR Logger app, as described under crash reports above. It is not sent if you turn crash reports off.
When you contact us
- What you write on the contact form or the support page, and our replies.
- If you link Discord: your Discord user ID and handle, so our bot can give you the Player role. Nothing else from Discord.
Keeping the site safe
- The IP address of a connection that gets a password wrong, to slow down guessing. It is used for nothing else.
- Website analytics, only if you say yes. See cookies below.
Who sees your information
Our team, and only the parts their job needs. People who review applications can see ID photos. People who handle payments see payout details but not ID photos. Moderators see nothing personal: no date of birth, phone number, IDs or payout details.
Our data partners license recorded gameplay. They receive recordings filed under participant IDs, with the session details listed above. They never receive your name, email, date of birth, contact details, ID documents, payment details or anything else from your account. Before any partner receives a recording it must agree in writing not to attempt to identify participants, to protect the recordings, not to pass them on, and to delete them when we ask. No data partner exists yet.
Illinois is different. Illinois law forbids selling, leasing, trading or otherwise profiting from biometric information, and consent does not change that. Recordings made by participants in Illinois are therefore never licensed or passed to our data partners. They are used only by us, for the purpose set out in the consent text those participants agreed to, and our servers mark every Illinois recording as never-licensable, and every delivery to a partner must exclude them.
Colorado and Washington. We do not accept applications from these states yet. Their biometric privacy laws need work we have not finished, and we would rather wait than get it wrong.
Service providers who run parts of EgoGaming for us, and may only use your information to do that:
| Provider | What for |
|---|---|
| Cloudflare | Hosting the site and the app's server, our databases, and storage for recordings |
| Resend | Sending email: confirming your address, password resets, support replies |
| Discord | Our community server and support tickets, if you use them |
| Anthropic | Answering questions asked through the contact page, and drafting support replies for our team to review |
| Google Analytics | Counting which pages people read, only if you allow it |
Our data partners pay us for a licence to recorded gameplay. Several state privacy laws call that a sale of personal information, and we do not dispute it. We do not use your information for advertising. We may share information if the law requires it.
How long we keep it
| What | How long |
|---|---|
| ID photos | 30 days after your application is decided, then deleted automatically |
| Sign-in sessions | Up to 30 days, or until you sign out |
| Your account and application | While your account exists, or until you ask us to delete it |
| Hours and payment records | As long as tax and accounting law requires |
| Crash reports | Reports 180 days, crash dumps 90 days, then deleted automatically, or sooner if you leave the study |
| Recordings | As long as the programme runs, or until you ask us to delete them. Illinois: at most three years after your last interaction with us. Texas: within one year after the purpose for collecting them ends. Today nobody but us holds recordings; any data partner that receives one must delete it when we ask |
Biometric information: our retention and destruction schedule. This is the written policy Illinois law requires us to publish. We keep the movement data in your recordings while you are taking part and for up to three years afterwards. We permanently destroy it when that purpose has been satisfied, or within three years of your last interaction with us, whichever comes first. Destruction means deleting it from our storage and requiring our service providers to delete their copies. If you leave the study, we stop using your recordings straight away and destroy them on request: write to [email protected] and we will confirm when it is done.
Your choices and rights
- Leave the study at any time from Settings in the VR Logger app. Recording stops immediately, sessions still on your PC are deleted, and the app tells us you have left. Leaving deletes this PC's crash reports from our servers, and the app clears any it hasn't sent yet. This applies to the PC you do it on: if you record on more than one PC, leave on each of them, or write to us and we will do all of them. Recordings we already hold are destroyed on request. Today nobody but us holds recordings; if a data partner has received one before you leave, we tell them to delete it, and they are bound to.
- Get a copy of your information, correct it, or have your account deleted: email [email protected] from the address on your account.
- Change your mind about analytics by clearing this site's data in your browser, which brings the cookie question back.
The consent text you agreed to in the app sets out the rights that apply where you live, and how to complain to the regulator there: the GDPR in the EU, the UK GDPR and the ICO in the United Kingdom, POPIA and the Information Regulator in South Africa, BIPA in Illinois, and state privacy laws elsewhere in the United States.
Where your information is stored
Recordings stay in your region. If you agreed to the consent text for the European Union or the United Kingdom, your recordings are stored only in the European Union. Everyone else's are stored in Cloudflare's object storage without being pinned to a particular country.
Crash reports are not kept in your region. Crash reports from the VR Logger app, and the crash dumps that come with some of them, are stored on Cloudflare's network in North America for everyone, including participants who agreed to the consent text for the European Union or the United Kingdom, under the safeguards described below.
Your account, application and payment details are stored on Cloudflare's network, which spans many countries. Cloudflare is bound by the standard contractual clauses approved by the European Commission and the UK Addendum to them, which form part of its data processing addendum, and for South African participants by section 72 of POPIA with your consent. Write to us for a copy.
How we protect it
- Everything travels encrypted (HTTPS), from the website and from the app.
- ID photos, payout details and two-step secrets are encrypted where they are stored. Passwords are hashed.
- Your name and email are kept apart from recordings, and the link between them apart from both. Your account does hold the reference numbers of your sessions, so that we can pay you for them.
- Each PC signed up to the app gets its own key, which stops working the moment you leave.
- Team members each sign in with their own account, see only what their role allows, and every look at an ID photo is logged with who looked.
Age
EgoGaming is only for people aged 18 or older. We check this against your ID, and the app asks you to confirm it.
Cookies
Two cookies do the work, and one more only if you allow it:
| Name | What it does | How long |
|---|---|---|
p2p_u | Keeps you signed in to your account | 30 days, or until you sign out |
p2p_ref | Remembers who invited you, between clicking their link and signing up | 30 days |
| Google Analytics | Counts which pages people read, with your IP address shortened. Only set if you choose "Fine by me". | Set by Google |
Your answer to the cookie question is saved in your browser, not in a cookie, so you are not asked again on every page. Members of our team get a few more cookies to sign in to our dashboard; players never do.
Changes
If we change what we collect or how we use it, we will update this page and its date. For changes that matter, we will tell you by email or in the app before they apply, and ask again where your consent is needed.
Questions: [email protected]