# Shape of Dreams Privacy Policy

### 1. Introduction

This Privacy Policy explains how Shape of Dreams (“the Game”) collects, uses, stores, and protects your personal data when you play the Game. We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA), the UK GDPR, the California Consumer Privacy Act (CCPA), and other relevant privacy regulations. We are committed to safeguarding your personal information.
\
By playing the Game, you consent to the collection and use of information in accordance with this Policy.

### 2. Information We Collect

We collect the following types of information to provide, maintain, and improve the Game:

#### 2.1 Device & System Information

* Computer information: operating system (OS), hardware specifications, system language
* Location information: your country or region, based on system settings
* We collect PUID(Epic Online Services Player Unique ID) to report abusive players\ <br>

#### 2.2 Gameplay Data

* In-game interactions: boss defeats, player deaths, and other gameplay events
* Game progress: save files and progression data
* Gift code usage: information related to the redemption and use of gift codes

#### 2.3 Technical & Diagnostic Data

* Error reports: game errors and crash information for debugging
* Device identifiers: Device ID collected through Unity Analytics
* Steam information: your Steam 64-bit ID and profile name may be included in save data and error logs

#### 2.4 Server Environment Setup, Balance Adjustments, and Bug Fixes

* **Computer Information (OS, hardware specifications, system language)**

This information is used to automatically recommend graphics settings optimized for the user’s PC environment, conduct hardware compatibility testing, and improve lag-related performance issues. Additionally, the system's language information is used to set the default in-game language automatically.

* **User Country Information**

The user’s connection country is identified to match them with the server that provides the lowest network latency (Ping). It is also used to verify compliance with the legal age rating requirements applicable in that country.

* **In-Game Interactions (e.g., boss defeats, number of deaths)**

Gameplay data is analyzed to adjust game difficulty balance. For example, high death rates in certain sections can be identified and used as statistical data to fine-tune difficulty levels in future patches.

* **Game Error and Crash Information**

This information is used to identify the causes of abnormal game terminations (crashes) or bugs that occur during gameplay, allowing us to fix issues and improve overall service stability.

* **Game Save Files**

Through the cloud save feature, game progress is backed up on the server and can be restored in cases such as device changes or system formatting.

* **Gift Code Redemption Information**

This information is used to verify the proper distribution of event codes, prevent duplicate redemptions, and block abnormal access attempts to maintain a fair service environment.

### 3. How We Use Your Information

We use collected data for the following purposes:

* To provide game functionality: saving game progress and enabling core features
* To improve performance: to check key performance metrics and carry out performance optimisation.
* To provide technical support: diagnosing and fixing bugs, crashes, and technical issues
* To analyse player behaviour: understanding how players interact with the Game to enhance the user experience
* To validate gift codes: processing and verifying code redemptions

### 4. Data Storage & Third-Party Services

Your information is stored in the following locations and services:

#### 4.1 Own Servers

* AWS (Amazon Web Services): Hosted in the ap-east-1 region (Hong Kong)
* Supabase: Hosted in East US (Ohio), used for database and analytics
* for managing gift codes and storing limited-edition items

#### 4.2 Third-Party Cloud Services

* Unity Cloud: Used for analytics and diagnostic data
* Steam Cloud: Used for save file synchronisation

#### 4.3 Third-Party SDKs

* Unity Analytics: Used for analysing player progress and collecting Device IDs
* Supabase: Used as the primary analytics database

### 5. Data Retention

* Own Servers (AWS, Supabase): Data stored on our servers is retained until you request deletion.
* Unity Cloud & Steam Cloud: Retention depends on each provider’s policies:
* Unity Privacy Policy:[ https://unity.com/legal/privacy-policy](https://unity.com/legal/privacy-policy)
* Steam Privacy Agreement:[ https://store.steampowered.com/privacy\_agreement/](https://store.steampowered.com/privacy_agreement/)

### 6. Data Sharing & Disclosure

We do not sell your personal data. We may share your information only in the following cases:

* Service providers: including Unity, Steam, AWS, and Supabase for delivering game-related services
* Legal obligations: if required by law, court order, or government authority
* Business transfers: in cases of mergers, acquisitions, or asset sales

### 7. Your Rights & Choices

Your rights depend on your location:

#### 7.1 EEA & UK Users (GDPR)

* Right of access: request a copy of your personal data
* Right to rectification: request correction of inaccurate information
* Right to erasure: request deletion (“right to be forgotten”)
* Right to restriction: request limitation of data processing
* Right to data portability: receive your data in a structured format
* Right to object: object to certain processing activities
* Right to withdraw consent: withdraw your consent at any time

#### 7.2 California Users (CCPA)

* Right to know: what personal information is collected
* Right to delete: request deletion of personal information
* Right to opt out: refuse the sale of personal information (we do not sell personal data)
* Right to non-discrimination: exercise of rights will not result in unfair treatment

#### 7.3 How to Exercise Your Rights

To exercise these rights, contact us at \[<sod_help@neowiz.com>].\
We will respond within the timeframe required by law (typically 30 days).

### 8. Account Integration

Steam Integration: The Game connects with Steam for authentication and save synchronisation. No other third-party account integrations are required or supported.

### 9. Children’s Privacy

The Game is not intended for children under 13 years old (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children.\
If you believe we have inadvertently collected such data, please contact us immediately.

### 10. International Data Transfers

Your information may be transferred to and processed in locations outside your country of residence, including Hong Kong (AWS) and the United States (Supabase).\
We apply appropriate safeguards in accordance with this Privacy Policy and applicable laws.

### 11. Data Security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction.\
However, no method of data transmission or electronic storage is completely secure.

### 12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.\
Any changes will be posted on this page with an updated “Last Updated” date.\
Continued use of the Game after changes indicates acceptance of the revised Policy.

### 13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

\[NEOWIZ / <sod_help@neowiz.com>]

### 14. Additional Information for Specific Jurisdictions

#### 14.1 EEA & UK

Legal bases for processing:

* Contract necessity: to provide game services
* Legitimate interests: to improve the Game and provide technical support
* Consent: where required by law

Data Protection Officer: \[<sod_help@neowiz.com>]\
Supervisory authority: You have the right to file a complaint with your local data protection authority

#### 14.2 California

* Personal information categories: as described in Section 2
* Business purposes: as described in Section 3
* Sale of personal data: we do not sell personal data

#### 14.3 Additional Rights for EU & UK Residents

To comply with GDPR (2016/679) and the UK Data Protection Act 2018, we have appointed official EU and UK representatives:

EU Representative:\
Bird & Bird GDPR Representative Services SRL\
Avenue Louise 235\
1050 Bruxelles\
Belgium\
<EUrepresentative.NEOCCPrivacy@twobirds.com>\
Key Contact: Vincent Rezzouk-Hammachi

UK Representative:\
Bird & Bird GDPR Representative Services UK\
12 New Fetter Lane\
London EC4A 1JP\
United Kingdom\
<UKrepresentative.NEOCCPrivacy@twobirds.com>\
Key Contact: Vincent Rezzouk-Hammachi


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://shape-of-dreams.gitbook.io/shape-of-dreams-privacy-policy/shape-of-dreams-privacy-policy.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.