Privacy Policy

• Early-access list: the email address you submit, the referral or campaign source that brought you (for example a ref or utm_source value), and basic device information such as your browser user agent.
• Account and profile: once accounts are available to you, sign-in details handled by our authentication provider, plus a display name and avatar if you add one.
• Your creations: worlds, campaigns, scenes, generated entities, notes, uploaded or generated artwork, and the prompts and field values used to create them.
• Feedback: survey answers and comments you choose to send us.
• Public-site usage events: lightweight first-party analytics such as public page views, an anonymous session identifier, and whether an early-access signup succeeded or failed. We do not put email addresses into these public analytics records.
• Signed-in product activity: for authenticated accounts, we keep the account ID, a random activity-session identifier, normalized app route, event type, and timestamp so we can understand active use, onboarding and retention. These activity records do not contain your lore, prompts, notes, generated text, or full content-record IDs.
• Subscription information: when paid plans launch, we will keep plan, status and renewal metadata. Card and payment details are handled by our payment provider — WorldCanon does not store your card number.

• To provide, maintain and improve the service and your saved content.
• To operate early access, including invitations and waitlist management.
• To send product updates and early-access emails you asked for.
• To protect the service: abuse prevention, rate limiting and security investigation.
• To understand how the product is used and where it can be better.
• To answer support requests.
• To handle billing and subscriptions once paid plans launch.
• To meet legal and record-keeping obligations.

Generating text, images and floor plans requires sending prompts and related structured content to AI providers acting on our behalf. Please do not submit personal, confidential or sensitive information you would not want processed by those providers.

We rely on vendors for hosting, databases, authentication, file storage, email delivery, payments and analytics. They process data on our behalf and only as needed to deliver those services. We do not sell your personal information.

We use cookies and browser storage for essential purposes: keeping you signed in, remembering anonymous and signed-in activity sessions for usage counting, and enforcing guest generation limits. Blocking these may break sign-in or limit functionality.

We keep information for as long as needed to run the service and to meet business, legal or security needs. You can ask us to delete your data. After deletion, copies may remain in routine backups for a limited period before those backups age out.

We use reasonable technical and organisational safeguards, including access controls and row-level database security. No online service is perfectly secure, and we cannot guarantee absolute security.

• Unsubscribe from our emails at any time using the link in each email.
• Request access to, correction of, or deletion of your information by contacting us.
• Edit or delete your worlds, campaigns and generated content in the app.

WorldCanon is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has given us information, contact us and we will remove it.

We and our providers may store and process information in countries other than the one you live in. Those countries may have different data protection rules than your own.

We may update this policy as the product evolves. When we do, we will change the effective date above, and we may notify you for significant changes.

Questions or requests: privacy@worldcanon.app.