Terms Unconditional

Media, News & Creative Apps · Social/VR · Structural / no discrete incident

Meta Horizon (VR)

Headline

VR headsets collect a category of data no other consumer device produces: eye tracking, hand and body motion, spatial mapping of the inside of your home, and gait and posture signatures that are identifying in the way…

Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.

VR headsets collect a category of data no other consumer device produces: eye tracking, hand and body motion, spatial mapping of the inside of your home, and gait and posture signatures that are identifying in the way a fingerprint is. Research has shown motion data alone can re-identify individuals with high accuracy from very short sessions. None of that fits neatly into existing biometric statutes, which were drafted around faces, fingerprints and voices. Meta Horizon is also used by children in substantial numbers, and a room-scale scan of a family home is a category of collection no privacy policy meaningfully explains at setup.

  • SeveritySeverity 2 of 5, not independently verified. VR headsets collect a category of data no other consumer device produces: eye tracking, hand and body motion, spatial mapping of the inside of your home, and gait and posture signatures that are identifying in the way…
  • Evidence tierUnassigned
  • Claims confirmedNo sourced claims yet
  • Last verified2026-08-04

Primary source. None recorded — Unverified - heuristic first draft.

Last verified 96 days agoverified 96 days ago0180 days
Freshness. Last verified 96 days ago (2026-08-04); stale after 180 days.

Terms

Arbitration

Same as Meta overall.

Data sharing

VR/AR platforms like Meta Horizon collect uniquely sensitive BIOMETRIC data beyond typical apps — eye tracking, hand/body movement, and even involuntary physiological responses (e.g., subtle head/body movements that can reveal health conditions) — privacy researchers and the FTC have specifically flagged VR biometric data as a growing area of regulatory concern given how much MORE revealing movement/gaze data can be compared to typical smartphone app data. No Horizon-specific lawsuit independently confirmed this pass beyond Meta's overall corporate findings.

Fees and billing

Not itemized this pass.

Contacts

Privacy contact. No published privacy email; Meta routes all requests through in-product privacy forms

Legal notice. PUBLIC COMPANY (META). Service route: c/o General Counsel / Corporate Secretary, Menlo Park, California — the corporate address on the SEC Form 10-K cover page is the official address of record. Confirm the exact street address on the current 10-K at sec.gov/edgar, and check the state-of-incorporation registered agent (usually Delaware; most large filers use The Corporation Trust Company or Corporation Service Company) via the Secretary of State business-entity search. A registered agent MUST accept service, which is why it is the reliable channel when a company publishes no privacy address.

Mailing address. Meta Platforms, Inc., ATTN: Privacy Operations, 1 Meta Way, Menlo Park, CA 94025, USA (corporate/SEC address per EDGAR: 1 Meta Way, Menlo Park, CA)

Written channel present
Paper trail: written. Written channel present.

Evidence

No claims have been itemized for this row yet.

No sources are on file for this row yet.

Source vault

Link status: Candidate - not yet fetched

DocumentLast fetchPDF
Privacy policy
See Meta's overall Privacy Policy
Not fetched yetNO (HTML only)
Terms of service
See Meta's overall Terms of Service
Not fetched yetNO (HTML only)
Website
meta.com
Not fetched yet—
Primary source
No URL recorded
Verification: Unverified - heuristic first draft
Not fetched yet—

Enforcement

No enforcement actions are linked to this row.

State statute

Headquarters on file: California. Provisions of CCPA/CPRA on file:

ProvisionTypeSource
Right to Deletion
Cal. Civ. Code § 1798.105
hardsource
Right to Correction
Cal. Civ. Code § 1798.106
hardsource
Right to Know / Access
Cal. Civ. Code § 1798.110
hardsource
Right to Limit Use of Sensitive Personal Information
Cal. Civ. Code § 1798.121; Cal. Code Regs. tit. 11, § 7027
hardsource
Right to Data Portability
Cal. Civ. Code § 1798.130(a)(3)(B)(iii)
hardsource
Privacy Policy / Privacy Notice Requirements
Cal. Civ. Code § 1798.130(a)(5); Cal. Code Regs. tit. 11, § 7011
hardsource
Sensitive Personal Information — Categories
Cal. Civ. Code § 1798.140(ae)
hardsource
Service Provider and Contractor Contract Requirements
Cal. Civ. Code § 1798.140(ag); Cal. Code Regs. tit. 11, § 7051
hardsource
Applicability Threshold (2025 CPI-Adjusted)
Cal. Civ. Code § 1798.140(d)
thresholdsource
Privacy Risk Assessment — Mandatory for High-Risk Processing (Eff. Jan. 1, 2026)
Cal. Civ. Code § 1798.185(a)(15); Cal. Code Regs. tit. 11, §§ 7150-7157
hardsource
Right to Opt Out of Sale or Sharing
Cal. Civ. Code §§ 1798.120, 1798.135
hardsource
Sale vs. Sharing Distinction
Cal. Civ. Code §§ 1798.140(ad), 1798.140(ah)
hardsource
Enforcement — CPPA and AG; Civil Penalties (2025 CPI-Adjusted)
Cal. Civ. Code §§ 1798.155, 1798.199.90; Cal. Bus. & Prof. Code § 17206
hardsource
Notice at Collection
Cal. Code Regs. tit. 11, § 7012
hardsource
Cybersecurity Audit — Annual Independent Audit Requirement (Eff. Jan. 1, 2026)
Cal. Code Regs. tit. 11, §§ 7120-7124
hardsource
Automated Decision-Making Technology (ADMT) — Notice, Opt-Out, and Access Rights
Cal. Code Regs. tit. 11, §§ 7200-7222; Cal. Civ. Code § 1798.185(a)(16)
hardsource