top of page

Privacy Policy

Last updated: 1 October 2026
 

This Privacy Policy explains how Stacked Games Ltd (“we”, “us”, “our”) handles personal data in connection with our website, our games and related online services, including Gym Bros: LooksMaxx.
 

Data deletion requests: All Gym Bros: LooksMaxx players may request deletion of personal data associated with their Game account by emailing support@stackedgamesltd.com. See Section 18 (“Data Deletion Requests”) below for instructions.
 

1. Who We Are

Stacked Games Ltd is the data controller responsible for the personal data covered by this Privacy Policy where we determine how and why that data is processed.

Stacked Games Ltd
Company number: 16276332
Registered office: 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE

Email: support@stackedgamesltd.com
Website: www.stackedgamesltd.com

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us using the email address above.
 

2. What This Policy Covers

This Privacy Policy applies to personal data processed in connection with:

  • our Wix-hosted website;

  • Gym Bros: LooksMaxx on Steam;

  • Gym Bros: LooksMaxx on Meta Quest;

  • versions of the Game distributed through SideQuest, itch.io or other platforms;

  • online multiplayer and networking;

  • voice chat;

  • player accounts, progression and virtual currency;

  • cosmetic items and other virtual items;

  • purchases and downloadable content, including the Supporters Bundle;

  • player support, moderation and security; and

  • communications sent directly to Stacked Games Ltd.
     

Third-party platforms and services such as Steam, Meta, Discord, YouTube and other websites have their own privacy policies. This Privacy Policy does not replace their policies where they independently determine how they process your information.
 

3. Age Requirements and Children

Gym Bros: LooksMaxx is currently intended for players aged 13 and over.

The Meta Quest version is currently intended to be distributed as a Teens and Adults (13+) experience rather than as an app for children aged 10–12.

We do not knowingly offer the Game to children under 13 or intentionally collect personal data directly from children under 13.

If we become aware that we have collected personal data from a child under 13 in circumstances where we are not permitted to do so, we will take reasonable steps to delete or otherwise appropriately handle that information.

If we decide in future to make the Game available to younger users, we will review and update our technical measures, privacy practices and this Privacy Policy before doing so.
 

4. Personal Data We May Process Through the Game

When you play Gym Bros: LooksMaxx, we and the service providers used to operate the Game may process information including:

Account and player information

The information we process depends on the platform, the version of the Game you use and the features available to you. It may include:

  • your Steam ID, app-scoped Meta user ID or other platform identifier made available to the Game;

  • your PlayFab player ID;

  • your display name or username;

  • information required to associate your platform account with your Game account;

  • friends, social connections or blocked-user information where you use relevant social or multiplayer features; and

  • purchase, entitlement, session or invite information where you use relevant platform features.
     

We use this information to identify and authenticate your Game account, provide multiplayer and social features, maintain progression and entitlements, fulfil purchases, prevent account impersonation and provide the other Game features described below.
 

Meta Quest platform data

If you play Gym Bros: LooksMaxx on Meta Quest, the Game uses Meta Platform SDK features. Where a feature is available in your version of the Game, we may process the following Meta data:
 

User ID

We receive your app-scoped Meta user ID and an authentication proof provided by Meta. We use these to sign you in, link you to the correct Game account, maintain your progression, inventory and purchases, prevent account impersonation and identify you in multiplayer sessions.
 

Your Meta user ID may be stored with your Game account through Microsoft PlayFab and Microsoft Azure and processed through coherence for multiplayer functionality. It may also be stored locally with Game data on your headset.
 

User profile

We receive your Meta display name. We use it as your in-game name and to identify you in multiplayer, leaderboards, podiums and social features such as the Bros menu.
 

We do not receive your Meta profile picture, email address, age, locale or country through this integration.
 

Friends

We may receive the Meta user IDs and display names of Meta friends made available to the Game. We use this information to show which friends play the Game, help you find or join them, and support Bros requests and related social features.
 

We may send friend identifiers to PlayFab to determine whether a friend has a Game account. We do not store a complete copy of your Meta friends list on our servers. Some links between platform and Game accounts may be stored locally on your device as needed for the feature.
 

Blocked users

Where supported, we receive the Meta user IDs of users you have blocked on Meta. We use this information to respect platform blocking relationships, including muting or hiding blocked players from relevant voice, social and invite features.

The Game may also maintain its own block list. Block records may include a Game account identifier, display name and platform and may be stored through PlayFab and Azure.
 

Invites

Where supported, Meta may provide the identifiers and profile information needed to show friends who can be invited. When you choose to send an invite, the Game provides Meta with the destination or multiplayer session information needed to create that invitation.
 

The Game may also provide its own Bros invite functionality using Game account, room and join information through our backend services.

Deep linking

​

Where supported, accepting a Meta invitation may open the Game with destination and session information that allows the Game to take you directly to the relevant multiplayer session. We use this information for that purpose and do not intentionally retain the Meta deep-link data after it is no longer needed.

In-app purchases and downloadable content

​

When you use the Meta store, we may receive:

  • product prices;

  • a Meta purchase or transaction identifier;

  • the product or content identifier;

  • entitlement or ownership status; and

  • other information needed to verify and deliver the purchase.
     

We use this information to display prices, verify purchases, deliver virtual currency, items or downloadable content, maintain entitlements and prevent the same purchase from being delivered more than once.

​

Microsoft Azure and PlayFab may process purchase and entitlement information for these purposes. Meta processes the payment itself. We do not receive your full payment-card information.

​

Entitlement and achievements

The Game may ask Meta whether your account is entitled to use the Game and may send achievement progress to Meta. Entitlement checks are used to confirm access to the Game and achievement information is used to provide the relevant Meta platform feature.

​

Progression, items and virtual currency

We use Microsoft PlayFab and associated Microsoft services to support persistent player information.

​

Depending on the Game features you use, this may include:

  • virtual currency balances;

  • virtual currency earned through gameplay;

  • virtual currency purchased through a platform store;

  • owned cosmetics and other virtual items;

  • inventory information;

  • progression and rewards;

  • Supporters Bundle or other DLC entitlement information; and

  • transaction or purchase information needed to confirm and maintain entitlements.
     

This information may be stored server-side so that we can maintain your Game account, purchases, currency, inventory and progression.

​

Multiplayer and networking information

The Game uses online networking services, including coherence, to provide multiplayer functionality.

​

Information processed in connection with multiplayer may include:

  • lobby, room and session information;

  • player or session identifiers;

  • your display name and in-game appearance;

  • connection information;

  • IP address or other network information where technically necessary;

  • server and networking logs; and

  • technical information needed to establish and maintain multiplayer sessions.
     

This information is used to provide multiplayer functionality, show other participants in the session, diagnose connection problems, maintain service security and prevent misuse.

​

Local Game data

Some Game information may also be stored locally on your device, including settings, preferences, identifiers and other information needed by the Game.

Deleting the Game or its local save data may remove locally stored information, but it will not necessarily remove information stored through PlayFab, Azure or other online services.

​

5. Voice Chat

Gym Bros: LooksMaxx uses Unity Vivox to provide voice-chat functionality.

Vivox may process information required to provide the voice service, including:

  • a developer-defined player identifier;

  • device information;

  • a truncated IP address; and

  • voice data while you are communicating.
     

We do not currently:

  • record or permanently store voice conversations ourselves;

  • use speech-to-text or voice transcription;

  • use voice conversations for advertising; or

  • use automated voice recording or voice-moderation technology.
     

Voice data required to transmit a conversation is processed through Vivox as part of providing the voice service.

​

Unity, as the provider of Vivox, determines the service-level retention practices that apply to information processed through Vivox. For current information about Vivox data handling and retention, please see Unity's Vivox Privacy Overview at https://docs.unity.com/en-us/vivox-core/privacy-overview.

​

If we materially change how voice chat is processed, including by introducing recording, transcription or additional moderation technology, we will update this Privacy Policy as appropriate.

​

6. Purchases

Purchases of the Game, the Supporters Bundle, virtual currency or other paid content are processed by the relevant platform store, such as Steam or Meta.

The platform provider handles payment information such as payment-card details. We do not receive your full payment-card information.

​

We may receive information needed to provide or verify what you purchased, including:

  • a Steam ID, Meta user ID or other platform/player identifier;

  • transaction or purchase identifiers;

  • the item, virtual currency or content purchased;

  • DLC, entitlement or ownership status;

  • purchase date or related transaction information; and

  • information needed to credit virtual currency, virtual items or other purchased content to your Game account.
     

We use this information to fulfil purchases, maintain and restore entitlements, credit purchased content, investigate transaction problems and prevent fraud.

​

7. Analytics, Telemetry and Crash Reporting

We do not currently use advertising-tracking or behavioural-profiling SDKs in Gym Bros: LooksMaxx.

​

The Game does, however, use LIV Camera Kit (LCK) to provide recording, screenshot, virtual-camera and related creator functionality. LCK collects limited technical and usage telemetry to operate and improve its SDK and help diagnose problems.

​

This may include:

  • use of recording and streaming features;

  • recording or streaming events;

  • SDK configuration and feature usage;

  • device model and operating-system information;

  • Game, engine and SDK versions;

  • graphics API and render-pipeline information;

  • performance information;

  • error codes, crash reports and diagnostic information; and

  • an application-specific identifier used to associate telemetry with Gym Bros: LooksMaxx.
     

LIV states that standard LCK telemetry does not collect or transmit recorded video content, microphone audio, camera images, in-game player data, purchase history, usernames or account information.

​

Recordings created using LCK are normally created and stored on the player's device unless the player chooses to share or stream them using an external service.

LCK telemetry is used for purposes including service operation, debugging, performance monitoring, SDK improvement and developer analytics.

More information is available in LIV's Privacy Policy at https://www.liv.tv/legal/privacy-policy.

​

Other platforms and technical services required to operate the Game may also generate operational information such as server logs, connection information, authentication events, errors and security or diagnostic information.

​

LIV's SDK licence also explicitly says it may collect an indication that recording occurred, the game identifier and an app-specific device identifier.

​

8. Our Website

Our website is hosted using Wix.

Wix may process technical information and use cookies or similar technologies required to operate, secure and deliver the website.

​

At the date of this Privacy Policy:

  • we do not operate a mailing list through the website;

  • we do not use a website contact form;

  • we do not intentionally use Meta Pixel;

  • we do not intentionally use TikTok Pixel;

  • we do not intentionally use behavioural advertising or advertising-tracking pixels; and

  • the website contains links to services such as Steam, Meta, SideQuest, Discord, YouTube and social-media platforms.
     

If you follow a link to another service, that service's own privacy policy will apply.

​

9. Contacting Us

If you contact us directly by email, we may process:

  • your name;

  • your email address;

  • information contained in your message;

  • relevant player or platform identifiers you provide; and

  • our correspondence with you.
     

We use this information to respond to your enquiry, provide support, deal with privacy requests, resolve problems and maintain appropriate business records.

Please do not send us passwords, full payment-card information or other information that we do not need in order to assist you.

​

10. How We Use Personal Data

We may use personal data to:

  • provide and operate the Game;

  • authenticate players and connect Game accounts with platform accounts;

  • provide multiplayer functionality;

  • provide voice chat;

  • maintain progression, currency and inventory;

  • fulfil and verify purchases;

  • provide DLC and other entitlements;

  • maintain friends and social features;

  • respect platform blocked-user relationships;

  • send, receive and act on Game invitations;

  • use deep links to launch the Game or join the relevant multiplayer destination or session;

  • provide player support;

  • operate and secure our website and services;

  • investigate technical problems;

  • prevent fraud, cheating, abuse and misuse;

  • enforce our Terms & Conditions;

  • deal with player reports or moderation issues where applicable;

  • protect our players, systems and legal rights;

  • comply with legal obligations; and

  • establish, exercise or defend legal claims.
     

We do not sell personal data.

We do not currently use personal data for targeted advertising.

​

11. Our Lawful Bases for Processing

Under UK data-protection law, we must have a lawful basis for processing personal data.

​

Depending on the circumstances, we rely on the following bases:

​

Performance of a contract

We process information where it is necessary to provide the Game and services you request under our Terms & Conditions.

This includes processing required to provide:

  • player accounts;

  • multiplayer;

  • voice chat;

  • progression;

  • virtual currency;

  • inventories;

  • purchases;

  • DLC entitlements;

  • friends and social features;

  • blocked-user handling;

  • invitations; and

  • deep linking used to join the relevant Game destination or multiplayer session.
     

Legitimate interests

We may process information where necessary for our legitimate interests or those of another party, provided those interests are not overridden by your rights and interests.

​

These interests include:

  • operating and maintaining our Game and website;

  • diagnosing technical problems;

  • preventing fraud and cheating;

  • protecting our systems and players;

  • improving reliability and security;

  • responding to support requests; and

  • establishing or defending legal claims.
     

Legal obligations

We may process or retain information where required to comply with a legal obligation, court order, regulatory requirement or lawful request.

​

Consent

We do not generally rely on acceptance of our Terms & Conditions as consent to data processing.

​

Where we introduce optional processing that legally requires your consent, we will request that consent separately where required.

You may withdraw consent for processing based on consent at any time, without affecting processing that was lawful before withdrawal.

​

12. Service Providers and Other Recipients

We use third parties to provide parts of our Game, website and infrastructure.

These may include:

  • Valve / Steam – platform accounts, store services, purchases and Steam functionality;

  • Meta – Meta Quest platform accounts, user IDs and profiles, friends and blocked-user features, invitations, deep linking, entitlement checks, achievements, store services, purchases, downloadable content and other Meta platform functionality;

  • Microsoft PlayFab and Microsoft Azure – Game accounts, authentication, Meta user IDs and display names, progression, virtual currency, inventory, entitlements, purchase records, Bros and block-list information, online status, backend services and related server logs;

  • coherence – multiplayer networking and related server functionality, including player identifiers, display names, Game account identifiers and in-game appearance needed for multiplayer sessions;

  • Unity Vivox – voice chat and the technical information required to provide that service;

  • LIV Inc. / LIV Camera Kit (LCK) – in-game recording, screenshot, virtual-camera and optional streaming functionality, together with associated app, device, usage, diagnostic and performance information;

  • Wix – website hosting and related website functionality; and

  • other professional, technical, security or legal providers where reasonably necessary.
     

Some providers process personal data on our behalf, while platform providers such as Meta and Valve may also process information independently for their own purposes under their own privacy policies.

​

Other players in the same multiplayer session may receive information needed for the Game to function, such as your display name, in-game appearance and session identifiers used to identify participants.

We may also disclose information where reasonably necessary to:

  • comply with law;

  • respond to a lawful request from a regulator, court or law-enforcement authority;

  • investigate fraud, security incidents or unlawful activity;

  • protect the rights, property or safety of Stacked Games Ltd, our players or others; or

  • establish, exercise or defend legal claims.
     

We do not sell or rent player personal data to third parties.

​

13. International Data Transfers

Some of our service providers operate internationally and may process personal data outside the United Kingdom.

​

At the date of this Privacy Policy, the Microsoft Azure and PlayFab services used for our Game backend are configured to process relevant Game data in the United States. Our coherence multiplayer configuration uses its European Union region. Other providers, including Unity Vivox and LIV, may process information internationally using their own infrastructure and service providers.

​

Where personal data is transferred internationally, we take steps intended to ensure that the transfer is made using a mechanism permitted by applicable data-protection law.

​

Where required, we rely on one or more transfer mechanisms permitted by applicable data-protection law. These may include UK adequacy regulations, approved contractual safeguards or other lawful transfer mechanisms appropriate to the relevant provider and destination.
 

You may contact us if you would like further information about the safeguards relevant to your personal data.

​

14. How Long We Keep Personal Data

We keep personal data only for as long as reasonably necessary for the purposes for which it is processed, including providing the Game, maintaining purchases and progression, protecting our systems and complying with legal requirements.

Retention depends on the type of information.

​

Game account and progression information

Game account information held through PlayFab, including identifiers, display name, progression, virtual currency, inventory, purchase records, Bros information and entitlements, may be retained while your Game account exists.

​

When we complete a valid account-deletion request, we will delete or de-identify the associated information that we control, subject to the legal, security and technical exceptions described in this Privacy Policy.

​

Block-list information

Game block-list records held through PlayFab or Azure may be retained while required to provide the block feature or until the associated Game account data is deleted, subject to applicable legal or security requirements.

​

Online status

Backend information indicating your current room, session or join information is intended to be temporary and is normally removed within 24 hours after it is no longer needed for an active session.

​

Azure server logs

Our Azure server logs that contain player identifiers are configured to be deleted automatically after 30 days.

​

Friends

We do not store a complete copy of your Meta friends list on our servers. Friend names retrieved from Meta may be held temporarily while the relevant social interface is in use.

​

Transaction information

Transaction and entitlement information may be retained for as long as necessary to maintain purchases and comply with accounting, fraud-prevention and legal requirements.

​

Platform providers such as Steam and Meta separately retain information in accordance with their own policies.

​

Meta invites and deep links

Meta invite and deep-link information is processed as needed to provide the relevant invite or join feature. We do not intentionally retain Meta deep-link data after it is no longer needed.

​

Multiplayer and technical information

Technical, networking and security information is normally retained only for as long as needed to operate, troubleshoot and secure the relevant service, subject to the retention practices of the provider involved.

​

Vivox

Information processed through Vivox is retained by Unity in accordance with the retention practices and settings applicable to the Vivox service. For current information, please see Unity's Vivox Privacy Overview at https://docs.unity.com/en-us/vivox-core/privacy-overview.

​

Local data

Information stored only on your device may remain there until you delete the relevant Game data or uninstall the Game.

​

Support communications

We may retain correspondence for as long as reasonably necessary to resolve the issue and maintain appropriate records.

​

When personal data is no longer reasonably required, we will delete it, anonymise it or allow it to be deleted through the systems of the applicable service provider, subject to legal and technical requirements.

​

LIV Camera Kit

LIV may retain LCK telemetry for different periods depending on the information involved. Its documentation describes retention periods for technical, performance and analytics information.

​

Recorded video, microphone audio and camera imagery created locally using LCK are not retained by LIV as part of normal LCK telemetry unless a player separately uses a feature or external service that transmits that content.

​

15. Security

We take reasonable technical and organisational measures intended to protect personal data against accidental loss, unauthorised access, misuse, alteration or disclosure.

​

We also use established platform and infrastructure providers to operate parts of the Game.

​

No internet-connected service can guarantee absolute security, and you should protect your own platform accounts and login credentials.

​

16. Automated Decision-Making

We do not currently use personal data to make decisions about players solely by automated means that produce legal effects or similarly significant effects.

​

The Game may automatically apply ordinary gameplay rules, rewards, progression, matchmaking logic or technical systems. These are part of normal Game operation and are not used to make legal or similarly significant decisions about you.

​

17. Your Privacy Rights

Depending on where you live and the circumstances of the processing, you may have rights including the right to:

  • ask whether we process your personal data;

  • obtain a copy of personal data we hold about you;

  • correct inaccurate or incomplete personal data;

  • ask us to delete personal data;

  • ask us to restrict certain processing;

  • object to processing based on legitimate interests;

  • receive certain personal data in a portable format;

  • withdraw consent where processing is based on consent; and

  • complain to a data-protection authority.
     

Some rights are subject to legal limitations and may not apply in every circumstance.

​

You have the right to object to processing that we carry out on the basis of legitimate interests.

​

To make a privacy request, including an access, correction or deletion request, email:

support@stackedgamesltd.com

​

For a Game-data deletion request, you can also follow the specific instructions in Section 18 below.

​

Please provide enough information for us to identify the relevant Game account or records. We may need to ask for additional information to verify that the request relates to you.

​

Where a request concerns information held by one of our service providers, such as PlayFab or Vivox, we may need to work with that provider to complete your request.

If you are in the United Kingdom, you also have the right to complain to the Information Commissioner's Office (ICO).

​

18. Data Deletion Requests

How to request deletion: Any Gym Bros: LooksMaxx player, regardless of where they live, may request deletion of personal data associated with their Game account by emailing:

​

support@stackedgamesltd.com

Please use the subject line “Gym Bros Data Deletion Request” where possible.

There is no fee for making a deletion request.

​

Please tell us whether you play on Steam or Meta Quest and provide enough information to identify the relevant account. This may include:

  • your Meta username or Steam profile name;

  • the display name you use in the Game;

  • your relevant platform identifier, where available;

  • your PlayFab ID, where available; or

  • other information reasonably necessary to identify the account and verify that the request relates to you.
     

Do not send us your password or payment-card details.

​

We will respond to a valid deletion request without undue delay and normally complete it within 30 days. If applicable law allows additional time because a request is particularly complex, we will tell you if an extension is required.

When we complete a deletion request, we will take reasonable steps to delete or de-identify the personal data associated with the relevant Gym Bros: LooksMaxx account from systems that we control. This may include deleting the associated PlayFab Game account and relevant records held through our Azure backend. Where necessary, we will work with our service providers to complete the request.

Azure server logs containing player identifiers are configured to be deleted automatically within 30 days.

​

Deletion may permanently remove progression, Drip, inventory, cosmetics, Bros information, block-list information and other Game data associated with the account. Some purchased or earned in-game content may also cease to be available through our Game systems after account deletion. Platform providers may separately retain their own purchase and entitlement records.

​

Some information may need to be retained where deletion is not permitted or is not appropriate because the information is required for legal obligations, accounting, fraud prevention, security, dispute resolution, enforcement of our Terms & Conditions, or the establishment, exercise or defence of legal claims. Where applicable, we will limit retained information to what is reasonably necessary for those purposes.

​

To remove data stored only on your device, delete the relevant local Game data or uninstall the Game. Uninstalling the Game by itself does not automatically delete server-side Game data, so you should still contact us if you also want us to delete the personal data associated with your online Game account.

A deletion request made to Stacked Games Ltd applies to personal data that we control in connection with Gym Bros: LooksMaxx. Meta, Steam and other platform providers may separately retain information that they control under their own privacy policies and account-deletion processes.

​

19. Cookies

Our Wix-hosted website may use cookies and similar technologies required to:

  • operate the website;

  • maintain security;

  • remember relevant settings; and

  • provide standard website functionality.
     

Where applicable law requires consent for non-essential cookies or similar technologies tht we introduce in future, we will provide appropriate notice and controls.

​

We do not currently intentionally use advertising or behavioural-tracking pixels on the website.

​

20. Third-Party Links and Services

Our website, Game and store pages may contain links to or interact with third-party services.

​

These may include Steam, Meta, SideQuest, itch.io, Discord, YouTube and social-media platforms.

​

When you use those services, their own privacy policies and terms apply to processing that they independently control.

​

We encourage you to review the privacy information provided by those services.

​

21. Changes to This Privacy Policy

We may update this Privacy Policy where our Game, website, service providers or legal obligations change.

​

When we make changes, we will update the Last updated date at the top of this page.

​

If a change materially affects how we use personal data, we will take additional steps to inform players where required by law or reasonably appropriate.

​

22. Contact

For questions, concerns, privacy requests or Game-data deletion requests, contact:

​

Stacked Games Ltd
Company number: 16276332
Registered office: 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE
Email: support@stackedgamesltd.com

bottom of page