Online concerns about the Oculus Rift’s Terms of Service have made their way to the Capitol.
Sen. Al Franken (D-Minn.) sent a letter Thursday to Oculus CEO Brendan Iribe, seeking clarification on how the Facebook-owned company collects and intends to use personal data.
That comes after online forums and media outlets have noted that Rift owners, before strapping the VR headset on, must agree to a number of unusual stipulations, including Oculus reserving the right to collect user physical movement and locational data and all activity on Oculus-hosted servers. The terms also suggest that all data collected by the Rift could possibly be shared with Facebook (FB).
That’s enough to spur action by Franken, a noted privacy rights advocate. In his two-page letter, he asked Iribe to be much more specific about what data is being collected and how it’s being used.
Get Data Sheet, Fortune’s technology newsletter.
Over six questions, Franken asks how user data such as location, communications, and physical movement are being used and what precautions are being taken by the company to protect this data. He also inquires about how long Oculus plans to store the information and whether it’s being sold to third parties.
And while Franken doesn’t name Facebook directly, he asks pointed questions about data sharing between Oculus and its “related companies.”
Also not included in Franken’s note or other conversations about the terms of service are how they might impact Samsung’s Gear VR, a product that uses Oculus technology. Gear VR is a very basic headset compared with Rift—and all content comes through Samsung phones via an app. What’s not clear is what information is shared with Oculus and how that information is used.
For more on privacy, watch: [fortune-brightcove videoid=4834098711001]