Cooking Tornado: Privacy Policy

Effective 30 October 2026. Cooking Tornado is made by RRH Studio, a studio of Red Rock Home LLC, Doha, Qatar ("we", "us"). This policy covers the Cooking Tornado game and its app on the Meta Horizon Store.

The short version

Cooking Tornado has no accounts, no ads, no chat and no tracking, and it never asks you for your name, email, location, voice or camera. To work on the Meta Horizon Store, it uses Meta's age group check and Meta's in-game purchase. Through them, the game's app processes your Meta user ID and your age group on your headset. Your progress, settings, photos and clips also stay on your headset. We do not store your user ID, your age group or anything else about your play on our servers (we keep only the emails you send us, to answer them), and we never sell or share personal data. Everyone can ask us at any time, free of charge, to delete their data (see "Deleting your data").

What the game collects and how it is used

This is everything Cooking Tornado collects, processes or stores about you, what each part is used for, and how long it is kept.

Your Meta user ID

• What it is: a number Meta gives your Meta account for this app (other apps see a different number). It does not contain your name, email or age.
• How the game gets it: Meta pairs access to the user ID with its age group check and with add-ons (Meta's "User ID" platform feature), and the game uses both. Meta's platform software, which is part of the game's store app, uses it on your headset.
• What it is used for: only these two things, for the account that is signed in:
  1. The age group check: at every start, Meta tells the game which age group your account is in (see "Your age group" below).
  2. The Full World Tour: when the game starts and when you open the tour's page, Meta tells the game whether your account owns this add-on and what it costs in your store; when you choose to buy it, Meta's purchase window opens for your account.
• What is never done with it: the game's own code never asks for it or looks at it. It is never stored by the game, sent to our servers or to anyone else, or used to recognise you between sessions, track you, show ads, run analytics or build a profile.
• How long it is kept: the game and we do not keep it at all.

Your age group

• Under 13, 13 to 17, 18 and over, or unknown: Meta tells the game at every start, because Meta requires apps for mixed ages to ask. It is used only to follow Meta's rules for young players; the game is the same for every age. It is kept only in the headset's memory while the game runs: never saved, never sent to us or to anyone else, and gone when the game closes.

The Full World Tour (your purchase)

• The first 3 stops are free. One optional add-on, the Full World Tour, opens the other 17 stops. It is bought once and kept.
• When the game starts and when you open the tour's page, Meta tells the game whether your account owns it and what it costs in your store. So that the tour stays open for you, your headset keeps a yes/no note that you own it (and whether you have seen the first welcome card).
• The game opens Meta's own purchase window only when you choose to buy. Meta handles the payment, your payment details and the real record of your purchase; we never receive your payment details, and nothing about your purchase is sent to us.

Your movements

• While you play, the game reads where your headset and controllers are, how they turn and which buttons you press, so that it can show the kitchen from your eyes, move your chef's hands and let you cook. This is used in real time on your headset only: it is never saved or sent to us. The only thing kept is a setting: the play-area height that Calibrate fits to you (see below). The game does not use hand tracking, the headset's cameras or the microphone.

Your progress, settings, photos and clips

• Progress and settings (stars, coins, best scores, unlocked trucks and outfits, your chef's look and chef name, picked from the game's own lists, which tips you have seen, and your difficulty, comfort, picture and TV settings, including the play-area height that Calibrate fits to you) are saved only on your headset, in the game's own storage, so that you can carry on where you left off. We never receive them.
• Photos and clips you take with the in-game mirror are made from the game's own picture (not from the headset's cameras). Each one is saved to your headset's Downloads folder when you take it, and the game also keeps your latest 6 photos and 3 clips in its own storage on the headset, to pin the photos on the selfie corner's board and play the newest clip on its TV; newer ones replace the oldest. They stay on your device unless you share them yourself.

The store check

• When you start Cooking Tornado from the Meta Horizon Store app, the game opens at once. The app makes a random one-time code for this start itself and adds it to the game's address. The code is made from random numbers only: it says nothing about you or your headset.
• While the game opens, the app asks Meta, on the headset, whether your account has the game. That is Meta's own check: nothing from it is sent to us. Then the headset's system gives the app a one-time token from Meta for that code (Meta's Attestation API). The token only says that this is a genuine copy of Cooking Tornado installed from the Meta Horizon Store, running on a genuine Meta Quest headset, and that it was made for this code. It holds no name, no account, no user ID and no age.
• The app sends the token to our website, and our website sends it to Meta only, to check it. The game does not wait for this check: we use Meta's answer only to see that the check works. When the game starts from the store app, your headset keeps a small signed cookie for up to 14 days, which lets the game's files load. The cookie holds no ID, only the date it stops working.
• To match the token to the start it was made for, our website keeps the random code for about two minutes, with our hosting provider Cloudflare; then it is deleted. A code works for one start only.
• We do not store, log or share the token or Meta's answer about it, and use them for nothing else. Meta's answer also carries a code for the headset that is different for every app and changes every 30 days; we do not keep or use it.
• Testers who open the game without the store app can enter a password instead; that sets the same kind of cookie, for up to 30 days.

Connection details

• The game's files are delivered by our hosting provider, Cloudflare, Inc. (United States). Like any internet service, Cloudflare handles your device's IP address and basic request details to deliver the files and keep the service secure, under Cloudflare's privacy policy. We do not use them to identify or track you.

Emails you send us

• Your email address and message, used only to answer you, and kept only as long as that takes, unless the law requires us to keep them longer.

Who else receives data

• Meta runs the Meta Horizon Store, your Meta account, the age group check and your purchases under Meta's own privacy policy, and checks the store check's token.
• Cloudflare, our hosting provider, delivers the game's files, runs our website's part of the store check (the one-time token passes through it on its way to Meta) and keeps the store check's one-time code for about two minutes.
• Our email provider delivers and stores the emails you send us.
• No one else. We never sell, rent or share personal data.

Deleting your data

• Anyone can ask, at any time and free of charge, wherever they live: email [email protected] with the subject "Delete my data" (or "What data do you hold?"). You do not need to send your user ID or any account details. We will answer within 30 days, delete anything we hold about you, and confirm when it is done. A parent or guardian can ask for a child.
• What we hold: we do not store your Meta user ID, your age group, your purchases or anything else about your play on our servers, so usually there is nothing on our side to delete apart from any emails you have sent us, and we will tell you so. The store check's one-time code deletes itself after about two minutes, and the cookie stops working by itself after 14 days (30 for testers).
• On your headset: your progress, settings, the note that you own the Full World Tour, and your mirror photos and clips never reach us, and you control them. You can delete the photos and clips in Downloads with your headset's Files app. If you would like help clearing what the game keeps in its own storage (progress, settings and the latest photos and clips), write to us and we will guide you.
• With Meta: your Meta account, your purchases and your age group are held by Meta. Meta's privacy policy explains how to see or delete them.
• When we cannot delete something: we cannot delete what Meta holds or what is stored on your headset, because it never reaches us (the two points above say how you can delete it). If the law requires us to keep something, for example a record that we answered your request, we will keep only that, only for as long as the law requires, and tell you.

What we do not do

• No accounts, sign-ins or player profiles on our side.
• No advertising, no analytics or tracking tools, no selling or sharing of personal data.
• No use of the headset's microphone, cameras, location or contacts.
• Online play with other people is not part of the game at this time.

Children

Cooking Tornado is made for players aged 10 and up, including children aged 10 to 12 (Meta's "Mixed ages" group). The game is the same for every age. It never asks a child for personal information, and a child's data is handled exactly as described above: the Meta user ID and age group are used only on the headset, for Meta's age group check and the Full World Tour, and are never stored by us or shared. For players under 13 in particular:

• Their age group, at every start. Each time the game starts from the Meta Horizon Store app, it asks Meta which age group the account is in (under 13, 13 to 17, or 18 and over), as Meta requires of apps for mixed ages. The answer is kept only in the headset's memory while the game runs: it is never saved, never sent to us or to anyone else, and it is gone when the game closes. When a tester opens the game without the store app, it cannot ask, and does not.
• One optional purchase, no ads, no chat. The first 3 stops are free. The Full World Tour can be bought only in Meta's own purchase window, and the game never pushes it: no "buy now", no timers, and every offer has a way to say no. There is no advertising, no chat, no online play and no links out of the game.
• The store check. It is the same for every player and sends nothing about the player, children included: only the random one-time code and the one-time token described above, which say that the game is a genuine store copy on a genuine headset. No account ID, name or age is sent to us.
• Deletion. Parents and guardians can ask us at any time, free of charge, to delete data (see "Deleting your data").

Changes

If the game ever starts using personal data in a new way (for example if online play is added and needs your user ID or user name), we will update this page first and change the date at the top.

Contact

Questions about privacy, or a request to delete data: [email protected]
Red Rock Home LLC, Doha, Qatar