VAEWOLF
Privacy Notice
Version 1
Date of Issue: 12th of August, 2026
About This Notice
We are Aonic UK Ltd (doing business as Megabit Publishing), a company incorporated and registered in England and Wales (registration number 14488533) with our registered address at Unit Efg, 4th Floor Zetland House, Scrutton Street, London, England, EC2A 4HJ. We are a video games publisher.
This notice explains how we collect and process personal data relating to users of Vaewolf (“the Game”), including any demo version of the Game, and any services we provide in connection with the Game (“the Services”). When we decide how and why your personal data is processed, we act as the data controller.
Vaewolf is developed by Milky Tea Limited and published on the Steam platform.
If you have any questions about this notice or your personal data, contact us at dataprotection@megabit-publishing.com or hello@megabit-publishing.com.
This notice covers only the Game and the Services. Where the Game links to websites or services not operated by us (including the Steam platform), please refer to their own privacy notices.
What Data We Collect and Why
Vaewolf is a single-player game. It has no multiplayer features, no user-generated content, no real-money in-game purchases, and does not require you to create an account with us. The Game does not use a separate crash-reporting tool. The only personal data we collect is optional gameplay analytics - and only if you agree.
Gameplay Analytics
Legal basis: consent
When you first launch the Game, you are asked whether you agree to gameplay analytics. This is entirely optional: if you decline, no analytics data is collected or transmitted at all, and the Game works exactly the same. You can withdraw your consent at any time from the in-game Settings menu.
If you agree, analytics data is collected through Unity Analytics to help us understand how players interact with the Game, monitor game balance, and improve the player experience.
To follow gameplay patterns across sessions (for example, to understand how long it takes players to earn certain upgrades), a randomly generated, installation-specific identifier is assigned to your copy of the Game. This identifier is not linked to your Steam account, real name, email address, or any other personally identifying information. It allows us to follow a player’s journey through the Game over time, but it cannot be used to identify who you are outside the Game. Within our analytics environment, this identifier is additionally scrambled (hashed) as a security measure.
The analytics data collected includes:
- randomly generated player identifier (not your Steam ID);
- gameplay progress and events - for example run and level outcomes, playtime (including time played in each character form), tutorial completion, enemies defeated, and damage dealt, taken, and healed;
- in-game economy activity - virtual currencies earned and spent (such as Gold, Mead, and Bloodstones) and upgrades or purchases made with them (runes, trinkets, skills, supplies, and shop items);
- device and platform information - such as your device type, operating system, and platform, used to sort the data and diagnose technical issues. Your IP address is processed transiently by Unity to deliver the service and derive your approximate region; we do not store your IP address in our analytics environment.
All in-game currencies are earned through play: the Game contains no real-money purchases, and we collect no payment information.
This data is used solely to spot balance issues, understand feature engagement, tune the in-game economy, understand player retention, and inform decisions about the Game’s development. It is not used for advertising, profiling, or automated decision-making. We do not collect any special categories of personal data.
Steam Platform Features
Legal basis: contract performance
The Game supports Steam Achievements and may support Steam Cloud saves. These features are provided and managed entirely by Steam (Valve Corporation) under Steam’s own privacy policy. We do not collect or store your Steam ID, Steam username, email address, or any other information from your Steam profile on our systems.
For information about how Steam processes your data, please refer to Steam’s privacy policy.
How Long We Keep Your Data
We keep your data only for as long as it is needed for the purposes described in this notice. The following retention periods apply:
- Analytics data - held by Unity Analytics for up to 13 months, then automatically deleted;
- Our analytics environment - data is refreshed from Unity on a rolling cycle of approximately four weeks, so data deleted from Unity (including at your request) also disappears from our environment within that cycle;
- Aggregated, non-identifiable insights (such as dashboards) - may be retained indefinitely for product improvement.
In some cases, we may need to retain data for longer where required by law. If we do, we will keep it secure and continue to respect your rights where possible.
Who We Share Your Data With
We share your data only where necessary and only with the following recipients:
- Milky Tea Limited - the development studio for Vaewolf. Milky Tea collects and transmits analytics data on our behalf and on our instructions.
- Unity Technologies - provider of Unity Analytics. Unity processes analytics data on our behalf under its Data Processing Addendum.
- Microsoft - provider of the cloud infrastructure (Microsoft Fabric) where we analyse analytics data.
- Valve Corporation (Steam) - to operate the Game on the Steam platform. Steam processes platform data (such as achievements) as described in its own privacy policy.
- Law enforcement and authorities - where required by law, to comply with legal obligations, or to protect the rights and safety of our users.
- Corporate transactions - if Aonic UK Ltd undergoes an investment, merger, acquisition, or sale of assets, personal data may be shared as part of that process.
Our data processing agreements with service providers require them to process your data only on our instructions and to maintain appropriate security measures. They are prohibited from using your data for their own marketing.
Aonic UK Ltd does not sell your personal data to third parties.
International Data Transfers
Some of our service providers are based outside the United Kingdom and European Economic Area. In particular, Unity Technologies is headquartered in the United States. Where we transfer personal data to a country that does not provide an equivalent level of protection, we put appropriate safeguards in place as required by law, including the standard contractual clauses approved by the relevant authorities (incorporated, in Unity’s case, in its Data Processing Addendum together with the UK International Data Transfer Addendum).
For more details about international data transfers, contact us at dataprotection@megabit-publishing.com.
Cookies and Similar Technologies
The Game does not use cookies. There are no advertising SDKs, tracking pixels, or similar technologies integrated into the Game.
Withdrawing Consent and Deleting Your Data
You can withdraw your consent to analytics at any time from the in-game Settings menu. From that moment, no further analytics data is collected.
You can also request deletion of your analytics data at any time, free of charge, regardless of where you are located, by emailing dataprotection@megabit-publishing.com. We will act on your request within 30 days.
Please note that analytics data is stored only under a pseudonymous identifier - we cannot find your data from your name or email address alone. If we cannot link your request to any stored data, we will tell you and explain what options are available. Because our analytics environment refreshes on a rolling cycle of approximately four weeks, historical analytics data is in any case deleted from our systems automatically.
Your Rights
Depending on where you are located, you may have rights under applicable data protection laws. These include the right to:
- access the personal data we hold about you;
- correct any inaccurate or incomplete data;
- restrict how we process your data;
- request a copy of your data in a portable format;
- object to our processing of your data; and
- withdraw your consent at any time.
To exercise any of these rights, email us using the contact details in the “How to Contact Us” section below. We will respond within 30 days. If we need more time, we will let you know within that period and explain why.
These rights are not absolute - in some circumstances, we may be unable to fulfil a request in full. If that happens, we will explain why.
If you are not satisfied with how we handle your request, you have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner’s Office (ico.org.uk). In the EU, find your supervisory authority via the European Data Protection Board (edpb.europa.eu).
Children’s Privacy
Vaewolf is distributed on the Steam platform. We do not knowingly collect personal data from children under the age of 13 and do not market the Game to children.
Steam requires users to be at least 13 years old to create an account. We rely on Steam’s age verification and parental controls. If we become aware that we have collected personal data from a child under 13 without appropriate consent, we will delete that data without delay.
If you are a parent or guardian and believe your child has provided personal data through the Game, please contact us at dataprotection@megabit-publishing.com and we will take steps to delete the data promptly.
Additional Information for California Residents
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). The categories of personal information we collect are described in the “What Data We Collect and Why” section above.
We do not sell or share your personal information for cross-context behavioural advertising. We do not use sensitive personal information beyond what is necessary to provide the Game.
Under California law, you have the right to:
- request access to the categories and specific pieces of personal information we have collected about you;
- request deletion of your personal information;
- request correction of inaccurate personal information; and
- opt out of the sale or sharing of your personal information.
We will not discriminate against you for exercising any of these rights. To make a request, contact us using the details in the “How to Contact Us” section. We will respond within 45 days, as required by California law.
Changes to This Notice
We may update this notice from time to time - for example, when our services change or when the law requires it. When we do, we will update the date at the top of this notice. For significant changes, we may also notify you directly.
We encourage you to review this notice regularly.
How to Contact Us
If you have any questions about this notice or wish to exercise your rights, contact us at:
- dataprotection@megabit-publishing.com - for privacy and data rights requests
- hello@megabit-publishing.com - for player support
When making a data rights request (such as a deletion or access request), please include the nature of your request in the subject line so we can respond promptly.