Privacy Policy

Last updated: June 1, 2026

This Privacy Policy document describes how we (“2AM”) collect, use, and share personal information when you use Layer2 (“the Game”) along with the legal basis for each use. Where we rely on your consent, you may withdraw it at any time; for other processing we rely on the legal bases set out in the “Legal Bases for Processing” section below.

The Data Controller is 2AM. For any inquiries regarding this Privacy Policy, you can reach the Data Controller at privacy@playlayer2.com.

Information We Collect

We collect the following types of information when you use the Game:

a. Information You Provide

  • Account Information: When you create a Game account via Apple or Google login, we collect personal information tied to that platform's account, such as your username and email address. Sensitive information such as your password and OTP code are never visible to us.
  • Location: We collect your precise geographical location while you use the Game. Precise location is necessary for the Game’s core location-based features; if you do not allow location access, the Game cannot function. We collect precise location only while the Game is in use.
  • Payment Information: If you make in-game purchases, we collect information related to the transaction (e.g., billing information), but payment processing is handled by third-party providers (e.g., Apple App Store, Google Play), and we do not store payment details directly.
  • Profile Information: You can choose to customize your profile in the Game, e.g. by setting a Display Name (nickname) or bio text. Your profile information is visible to other users of the Game. Please do not include information in your Display Name or bio that you do not want to be public.

b. Automatically Collected Information

We may further collect certain information automatically, including but not limited to:

  • Device Information: We collect data about your device, such as device type, operating system, unique device identifiers, and IP address.
  • Game Data: We collect information about how you use the Game, including game progress, in-game purchases, gameplay statistics, and crash reports.
  • Log Information: This includes your IP address, account information, and the date and time you performed actions in the Game.

Where the GDPR or similar laws apply, we rely on the following legal bases:

  • Performance of a contract: to create and authenticate your account, operate core gameplay (including processing your precise location, which is necessary for the Game to function), and process in-game purchases.
  • Consent: to send you marketing and promotional communications, and for any other processing where we specifically ask for your consent. You may withdraw consent at any time without affecting processing carried out before withdrawal.
  • Legitimate interests: to maintain the security and integrity of the Game, prevent fraud and abuse, fix bugs, and improve the Game. Where we rely on legitimate interests, we balance them against your rights and freedoms.
  • Legal obligation: to comply with applicable laws, regulations, and valid legal requests.

Where you are a child (as defined in the “Children’s Privacy” section), processing that would otherwise rely on consent is carried out only with the consent of your parent or legal guardian.

How We Use Your Information

We use your information for the following purposes:

  • To Authenticate You: We use your Apple or Google account to allow you to create and log in to your Game account securely.
  • To Provide and Improve the Game: We use your information to operate, maintain, and improve the Game’s functionality, including fixing bugs, optimizing performance, and personalizing user experiences.
  • To Process Payments: We use your information to facilitate in-app purchases and virtual transactions.
  • To Communicate With You: We may use your email address to send you updates, promotional offers, and other game-related communications, only if you opt-in. You can withdraw this consent at any time.
  • To Ensure Safety and Security: We use your information to detect and prevent fraud, abuse, or any illegal activity and to ensure the Game’s security.
  • To Comply With Legal Obligations: We may use your information to comply with applicable laws, regulations, or court orders.

How We Share Your Information

We may share your personal information in the following ways:

Service Providers

We use Sentry for crash monitoring. Sentry processes your data on our behalf, which may include Personally Identifiable Information such as your IP address and device hardware & software specifications.

We may share information with third-party service providers who perform services on our behalf, such as payment processors, cloud server/storage providers, and analytics services. These providers are contractually required to protect your data and use it only for the purposes for which we share it. These providers act as our processors, and we remain responsible for the personal information they handle on our behalf.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of the transaction.

We may disclose your information if required to do so by law or in response to valid legal requests by public authorities (e.g., a court or government agency).

To Protect Us and Others

We may share your information in cases where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, or situations involving threats to the safety of our employees or any other person.

We may share your information with third parties when we have your explicit consent to do so.

Your Privacy Rights

Depending on your country of residence, you may have certain rights regarding your personal information. We offer these rights to all of our users, regardless of where they live. These rights are:

  • Access: You can obtain confirmation about whether we process your personal information or not, and if so, to access this information.
  • Rectification: You can request that we correct any inaccuracies in your personal data.
  • Erasure: You can request that we delete your personal information, subject to certain exceptions.
  • Restriction of Processing: You can request that we stop processing your personal information for certain purposes, such as direct marketing and promotions.
  • Data Portability: You can request a copy of the personal information we hold about you in a structured, commonly used, and machine-readable format. You can also request that we transmit this information to another controller.
  • Objection: You can object to our processing of your personal information where we rely on legitimate interests, and you can object at any time to processing for direct marketing.
  • Withdraw Consent: Where we rely on your consent, you can withdraw it at any time. This does not affect the lawfulness of processing carried out before withdrawal.
  • Lodge a Complaint: You have the right to lodge a complaint with your local data-protection supervisory authority. If you are in the EEA, this is the authority in your country of residence.

If you would like to exercise any of these rights, please contact us at privacy@playlayer2.com. We aim to fulfill your request within 30 days upon receiving it, or a shorter time period if applicable by the laws of your jurisdiction.

Data Retention, Security, and Integrity

Your personal information will be retained for so long as reasonably necessary to fulfill the purposes for which it was collected, or as required by law. If you delete your account, we will irreversibly anonymize your personal data after approximately 30 days, unless we are legally obligated to retain it. Anonymized data can no longer be used to identify you.

We also take reasonable measures to protect your personal information from unauthorized access, misuse, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

When agreeing to this Privacy Policy during a Game Test (as outlined in the Terms of Service), your personal information is by default considered ephemeral, and will be deleted within 30 days after the test concludes.

Service providers that process personal information on our behalf are bound by data-processing agreements requiring appropriate security measures, and we remain responsible for that processing. Some third parties — such as Apple and Google — act as independent controllers of the information they collect through their own platforms; their handling of that information is governed by their own privacy policies, which we encourage you to review.

Children's Privacy

As described in the Terms of Service, a child may use the Game only if their parent or legal guardian has reviewed and accepted the Terms of Service and this Privacy Policy on the child’s behalf and has consented to the processing of the child’s personal information. We do not knowingly collect personal information from a child without that parental consent. If we learn that we have collected personal information from a child without the required parental consent, we will take steps to delete that information. Because the Game uses precise location and displays profile information to other players, we encourage parents and guardians to review these settings with their child.

We define “children” as follows:

  • Residents of the EEA: anyone under 16 years old, or the age needed to consent to the processing of personal data in your country of residence.
  • Residents of the Republic of Korea: anyone under 14 years old.
  • Residents of other regions: anyone under 13 years old or the age needed to consent to the processing of personal data in that region.

International Data Transfers

Your personal information may be transferred to, stored, and processed in countries outside your own, including countries that may not provide the same level of data protection as your home country. By using the Game, you consent to such transfers.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Game or other communication channels. Your continued use of the Game after the changes take effect constitutes your acceptance of the updated Privacy Policy. Where a change requires your consent under applicable law, we will ask for that consent before the change applies to you.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@playlayer2.com.