Privacy

Draft · to be reviewed before launch · last updated [DATE]

Reading the site needs no account and leaves nothing about you behind except ordinary server logs. This page is about what we keep once you sign up.

What we keep

• Your account: the name you show, your email address, and your password as a one-way hash (we can't read it). If you sign in with Discord or Google, we keep that service's account number and, if it shares one, your verified email.
• What you write: your worlds, their history of changes, your works, and the reports you file.
• Payments: Stripe processes payments. We keep your Stripe customer number, your credit balance and what you spent credits on; your card details go to Stripe and never to us.
• Logs: the server records requests (address, time, page) to keep the site working and secure. [Logs are deleted after 30 days.]
• Security log: sign-ins, failed sign-in attempts, password and two-step sign-in changes, moderators' actions, and changes made to open worlds by people who aren't signed in, each with the time and the internet address it came from. Only administrators can see it, and entries are deleted after 30 days.
• Using AI without an account: we make a guest record with no name, email or password, so your free tries and AI jobs can be counted. To stop the free tries being reset by clearing cookies, we keep a keyed hash of your internet address with each try. The hash can't be turned back into the address.
• Two-step sign-in: if you turn it on, we keep the key your authenticator app shares with us and your recovery codes as one-way hashes.

Checking new passwords

When you choose a password, we check it against passwords exposed in other sites' data breaches, using the Have I Been Pwned service. Only the first five characters of a one-way hash of the password are sent, which matches hundreds of unrelated passwords; your password itself never leaves our server.

Cookies

One cookie keeps you signed in, or, if you use AI without an account, remembers your guest record. The site also remembers your language and a few display choices in your browser. There are no advertising or tracking cookies.

Who else sees it

• Anything you publish (a public or unlisted world, a work) can be read by anyone with the link. Drafts are visible only to you, and to administrators when handling a report.
• When you use an AI feature, the text involved is sent to Anthropic, our AI provider, to produce the result. [Anthropic does not use API data to train its models by default.]
• Stripe (payments), [HOSTING PROVIDER] (hosting) and [EMAIL PROVIDER] (email) process data for us to run the site.
• We don't sell your data.

Your choices

You can change your name and password, disconnect Discord or Google, and delete your worlds and works from the site. To delete your account entirely, or to get a copy of your data, write to [CONTACT EMAIL].

Contact

[OPERATOR NAME] · [CONTACT EMAIL]