Privacy Policy

Overview

World Stories ("we", "us") is a browser-based fantasy RPG. This policy explains what information we collect when you create an account and play, how we use it, and the choices you have. We are a small team — we collect only what the game needs to run, and nothing more.

Information We Collect

Account information. When you register, we store your email address, username, and a securely hashed password. We never store your password in plain text.

Character and gameplay data. Character names, race, class, backstory, stats, inventory, equipment, and quest progress are stored so your story persists between sessions.

Appearance and avatars. You can describe your character's appearance manually, or upload a reference photo so we can generate a pixel-art avatar in your likeness. If you upload a reference photo, it is sent to our AI image provider to extract appearance details and is permanently deleted from our servers immediately afterward — we don't retain uploaded photos.

Support messages. If you contact us through the Help page, we receive the name, email address, and message you provide, so we can reply to you.

Session cookie. We use a single cookie to keep you signed in between visits. We don't use it for tracking or advertising.

How AI Is Used

Avatar images and appearance extraction from reference photos are generated using a third-party AI image provider. NPC dialogue, scene narration, and other in-world storytelling text are generated using AI systems we run and host ourselves — that content is not sent to any outside AI provider.

How We Share Information

We do not sell your information, and we do not use third-party analytics or advertising trackers. We share information only with the services that help us run World Stories: our AI image provider (to generate avatars) and our email provider (to deliver support messages you send us). These providers process data on our behalf and are not permitted to use it for their own purposes.

Data Retention

We keep your account and character data for as long as your account exists. You can delete individual characters at any time from the character select screen. To request deletion of your entire account and associated data, contact us via the Help page — we don't yet have a self-service delete button, but we will process your request promptly.

Children's Privacy

World Stories is not directed at children under 13, and we do not knowingly collect information from children under 13. If you believe a child has created an account, please contact us so we can remove it.

Security

We take reasonable measures to protect your information, including hashing passwords and restricting access to production systems. No online service can guarantee absolute security, so please use a unique password for your account.

Changes to This Policy

If we make material changes to this policy, we'll update the date above and, where appropriate, let you know in-app.

Contact Us

Questions about this policy or your data? Reach out via the Help & Support page.