Supplemental Oculus California Privacy Notice

Effective Date: July 1, 2021

This California Privacy Notice (“Notice”) is for California residents and supplements our Supplemental Oculus Data Policy and Facebook Data Policy. It explains how we collect, use, and share your Personal Information and how to exercise your rights under the California Consumer Privacy Act (“CCPA”).

When we say “Personal Information” in this Notice, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you. Personal Information does not include information that is aggregated or information that cannot be reasonably linked to you.

I. How we collect, use, and share Personal Information

To provide our virtual, mixed and augmented reality products and services, including our websites, mobile apps, platform, content, hardware, and the services described further in our Supplemental Oculus Terms of Service (“Oculus Products”) we must process information about you, including Personal Information. Subject to the limitations we describe in the Facebook Data Policy and the Supplemental Oculus Data Policy, we may share your Personal Information for business purposes with strict restrictions on how our partners can use and disclose the data we provide, at your direction, or in ways otherwise in accordance with the CCPA. We don’t sell any of your Personal Information, and we never will.

The best way to learn about the kinds of information we collect and how we use it is to review the Facebook Data Policy and the Supplemental Oculus Data Policy. Here is a summary of the CCPA-related categories of Personal Information we may have collected about you over the past 12 months, depending on how you use the Oculus Products, as well as how we use it and with whom we may have shared it.

II. Sources of Personal Information

We receive Personal Information from the information that you and others provide, your device(s), and from our partners. The categories of sources from which we’ve collected or received Personal Information include:

• You: We collect the content, communications, and other information you provide when you use the Oculus Products, including when you sign in with your Facebook account, add information to your profile, buy something through our Oculus Products, create or share content, and message or communicate with others. We also collect information about how you use the Oculus Products, such as information about the people, games, content, apps, features, or other experiences you interact with.

• Other people: We may also receive and analyze content, communications, and information about you that other people provide when they use the Oculus Products, like when they send us an abuse report that refers to or contains video of you.

• Your device(s): We collect information from and about the devices you use to access our Oculus Products, including information about the type of device you're using (such as a headset, PC, TV, mobile, or other connected device), its configuration (such as your operating system and graphics processing unit), your browser, Internet Protocol ("IP") address, and how your device is performing. We also collect information about your environment, physical movements, and dimensions when you use an XR device. For example, when you set up the Oculus Guardian System to alert you when you approach a boundary, we receive information about the play area that you have defined. We also receive information through device settings you choose, such as your photos or audio content.

• Facebook Companies: We may receive information from other Facebook Companies (which include Instagram and WhatsApp) for business purposes, such as to provide infrastructure services, that help us provide you with an innovative, relevant, consistent, and safe experience across all Facebook Company Products you use. We also process information about you across the Facebook Companies for these purposes, as permitted by applicable law, and in accordance with their terms and policies.

• Partners: We may receive information about you from partners, including third-party apps, developers, other online content providers, and marketing partners that provide us information.

III. How can you exercise your rights provided under the CCPA?

Under the CCPA, you have the following rights:

• Right to Know: You have the right to request that we disclose to you the Personal Information we collect, use, or disclose, and information about our data practices;

• Right to Request Deletion: You have the right to request that we delete your Personal Information that we have collected from you;

• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To exercise your “right to know” or your “right to request deletion,” click here.

Please note that to protect your information and the integrity of the Oculus Products, we may need to verify your identity before processing your request. In some cases we may need to collect additional information to verify your identity, such as your name and proof of residency.

Under the CCPA, you may exercise these rights yourself or you may designate an authorized agent to make these requests on your behalf. In most cases, we will facilitate your request through automated tools available through your password-protected account.

For information on the CCPA requests we have received, please see here.

IV. Contact for more information.

If you have additional questions about this Notice or how to exercise your rights under the CCPA, please contact us.