PROTOCOL 75 LTD // PRIVACY INFORMATION
Privacy policy
Coming soon. Attack Warning Red is in development. This notice describes the current development build and our websites and support service. Planned release changes are identified separately below; they are not features already available in the current build.
1. Who is responsible
Protocol 75 Ltd develops Attack Warning Red and is responsible for the personal information processing it determines for the game, attackwarningred.com, protocol75ltd.com and enquiries sent to us.
We are registered in England and Wales, company number 17486889. Our registered office is 65 Dehaviland Way, Skelmersdale, WN8 6DG.
For privacy questions, support or deletion requests, email [email protected].
2. Approximate location and maps
The current development build uses your internet connection’s public IP address to estimate an approximate geographical location. It does not use GPS or headset tracking coordinates for this lookup. The estimate may be inaccurate and need not match your home or exact position.
When no valid saved map and location are available, the headset contacts ipapi.co. If that lookup fails, it tries ipwho.is. The service contacted receives the public IP address and returns approximate geographical information. The headset then sends the returned latitude and longitude to Mapbox to request a local map. Mapbox also receives the connection’s public IP address and technical request information.
The game uses the approximate location to display the local map, prioritise nearby cities as simulated targets, position simulated strikes and report simulated impacts within 80 km of the saved location. These are fictional gameplay calculations, not scientific predictions of nuclear effects.
The map image and coordinates are stored locally on the headset without a scheduled expiry. While a valid saved copy exists, this feature skips the lookup and map download. Missing or invalid saved data can trigger another request. Protocol 75 Ltd does not receive these coordinates or maps on its own server through this feature.
Current controls: the development build performs this lookup automatically when needed. It does not yet have an in-game location-consent or location-deletion control. “Retry local strike map” reuses a valid saved copy; it does not erase the location.
Planned release changes: we plan to remove ipapi.co and use ipwho.is with Mapbox, ask before enabling location-based personalisation, allow continued play after declining, and provide a control to withdraw permission and delete the saved location. We will update this notice when those changes are implemented. This paragraph does not mean those controls exist today.
3. Local game data and Meta Quest features
Game progress and settings are stored locally on the headset. Mixed-reality setup also saves the position, rotation and size of virtual command equipment relative to the headset’s tracking space so the layout can be restored. Equipment placement is separate from geographical location.
The game uses Meta Quest tracking and passthrough functionality to display and operate the command equipment. The current build requests Meta’s spatial-data permission. We have not implemented a service that uploads room scans to Protocol 75 Ltd.
Unity Analytics, Unity Ads and Unity crash-reporting services are disabled in the current project configuration. This does not mean the Meta platform and its SDKs process no technical information. Meta’s published SDK policy describes identifiers, system configuration, software versions and diagnostic events used to operate, secure and troubleshoot its services. Meta’s account, headset and platform processing is governed by its own notices and settings.
See Meta’s essential SDK data policy and Meta’s privacy information.
4. Email and website information
If you contact us, we receive your email address, any name you provide, and your message and attachments. We use this information to answer enquiries, provide support and handle privacy requests or disputes. Email to our published address is forwarded by Cloudflare Email Routing to our company-operated Gmail mailbox, where Google handles storage and email delivery.
We delete routine support correspondence 12 months after the enquiry is resolved. Relevant information may be retained longer where necessary for an ongoing dispute or a legal obligation. Please avoid sending passwords or unrelated sensitive information.
Cloudflare hosts our websites and processes connection and request information, including IP addresses, to deliver and protect them. Our website code does not include advertising or analytics tracking scripts. Opening a link to another provider’s website subjects that visit to the provider’s own practices.
5. Purposes and legal bases
We use support correspondence and website connection information for our legitimate interests in answering enquiries and operating a secure website. We process information needed to meet applicable data-protection duties on the basis of legal obligation.
During development, local game data and the location-feature requests described above are used for our legitimate interests in developing and testing the game and its local strike assessment. These purposes do not remove your rights to object or request deletion. The planned public-release location feature will use an optional consent choice; we are not treating the current automatic lookup as consent.
Local game state and equipment placement support saving progress and operating the game. We do not use simulated strike calculations to make decisions about your legal rights or eligibility for real-world services.
6. Providers and international processing
The providers involved in the processing described here are ipapi.co, ipwho.is / IPWHOIS, Mapbox, Meta, Cloudflare and Google. A provider may also process technical records for its own service, security or legal purposes. Our support-email retention period does not govern those records.
These services can process information outside the UK, including in the United States. Mapbox publishes information about international processing and safeguards in its privacy policy and data processing addendum. Google and Cloudflare describe their international-transfer mechanisms in their respective privacy notices. The scope of each provider’s arrangements depends on its service and terms; contact us for information about the arrangements relevant to your request.
Mapbox states that it normally retains IP addresses for 30 days, with possible longer retention for investigations, security, fraud prevention or legal compliance. Other provider retention periods depend on their purposes and applicable terms; we do not promise that deleting headset data deletes their records.
7. How to delete information
Information held by us: email [email protected] to request deletion, from any region. There is no fee for making a deletion request. We may request proportionate information to verify your identity. If an applicable legal exception requires us to retain information, we will explain it.
Information on your headset: use the clear-app-data option for Attack Warning Red in the headset’s Storage settings. This removes local saved progress, settings, equipment layout, map and coordinates. We cannot remotely erase files held only on your headset. Launching the current development build again without a valid saved map can trigger a new location lookup.
Any Meta cloud backups: remove them separately through the Cloud Backups page in your Meta account, including backups associated with other devices. Clearing local data or uninstalling the game does not itself delete existing cloud backups. Meta explains local-data and cloud-backup deletion here.
Provider records: local deletion does not automatically erase earlier requests retained by third parties. Contact us for assistance, or use the privacy-contact routes in the providers’ notices.
8. Your rights and complaints
Depending on the circumstances and applicable law, you can request access, correction, deletion, restriction or portability of your personal information. You can object to processing based on legitimate interests. Where consent applies, you can withdraw it without affecting earlier lawful processing.
Contact us at [email protected]. We will respond within the applicable statutory period, normally one month for a UK data-rights request, and explain any permitted extension.
You can complain to the UK Information Commissioner’s Office or your relevant local data-protection authority.
9. Audience and updates
Attack Warning Red is intended for teens and adults, not children under 13. Applicable store age restrictions and content ratings also apply. If you believe a child has sent us personal information, contact us so we can address it.
We will update this policy when the game or our information practices change, including before releasing the planned location controls. The date at the top identifies this version.