Privacy Policy

Last updated October 18, 2026·Private alpha

In short

We keep what the game needs: your sign-in, username, look, saves and worlds, plus basic security records.
From Google or Discord we only get your name, email, picture and account ID, and use them only to sign you in.
No ads, and we never sell your information. We use Google Analytics on worldsalpha.com to see how the game is used, PostHog to see how the game plays and how smoothly it runs, and Sentry to catch errors.
Players in your party connect to your browser directly, so their devices can see your IP address.
Email us to see or delete your information.

01Who we are

Worlds is a game made by HYTOPIA, Inc. ("we", "us"), played at worldsalpha.com. This policy explains what information we keep when you play, why, and what you can do about it. It goes with our Terms of Service.

02What we collect

What	Details	Where it comes from
Sign-in	Your email address. If you use Google or Discord: your name, profile picture and that service's account ID. If you link a wallet: its public address and network.	You, Google, Discord, your wallet
Profile	Your username and how your character looks.	You
Game data	Your saves, home world, inventory, items, levels, trips you join and who was in them.	Your play
Friends	Your friends list, the friend requests you send and receive, the players you block, your status (Open, Invite only, Do not disturb or Appear offline) and whether friends may see where you are. We tell your friends you're online from the game's regular check-in while you play, and we keep no record of when you were last online.	You and your play
Sessions	When you signed in, your IP address and your browser's name and version (user agent).	Your browser
Fair play records	Game actions our checks flag as possible cheating, and where each item's value came from.	Your play
Errors	When the game or our server runs into an error: what went wrong and where, which game screen, your recent actions in the game, your browser and device type, the game version, and your IP address (so we can count how many players an error affects). No name or email.	Sentry, on worldsalpha.com and our server
Bug reports	When you send one from the game's Esc menu: what you write, a picture of the game view if you include it, and the game's state at that moment (game version, the world and its Danger level, where you stand, your gear, your settings, your recent actions in the game, frame rate and recent errors). No name or email.	You, through our server, to Sentry
Usage	Which game screens you open and for how long, your device and browser type, and your rough area (worked out from your IP address, which Google Analytics doesn't store).	Google Analytics, on worldsalpha.com
Play and performance	Events about your play and how smoothly the game runs: the game opening and loading, signing in and how (email, Google, Discord or wallet), choosing a username, tutorial steps, trips started and ended (the Danger level, the party size, which of your trips it is, how long and how it ended), passing out and its cause, boss fights, items you craft, milestones, trades, players joining or leaving your party, settings you change, notices shown to you, lost connections, feedback you send, and a summary of each session (how long you played, blocks placed and broken, and how many chat messages you sent, never what they say). Each event also carries the game version, your graphics setting, how many days since your first visit, your browser and device type, and with the frame-rate summary your graphics card's name, your screen size and your number of processor cores. The first event of a visit also carries the website that sent you to the game (its domain only, such as x.com) and the link's campaign tags. Every event carries a random code for the visit, so the events before and after you sign in count as one visit. Our server replaces your account with a player code it makes with a secret key, so events can be grouped by player without naming you. No name, chat text, email, account ID or IP address: our server sends none of them, and PostHog is set to drop IP addresses.	Your play, sent by our server to PostHog
Messages to us	Anything you send us by email or in our Discord.	You

We don't collect your real address, phone number, payment details or date of birth. We don't use advertising tools, and Google Analytics' advertising features are turned off.

03Google and Discord sign-in

If you sign in with Google, we ask only for your basic profile and email (the openid, email and profile permissions). If you sign in with Discord, we ask only for your account and email (the identify and email permissions). We get your name, email address, profile picture and account ID, and we use them only to create your account and sign you in.

We don't read your contacts, files, servers or messages, we don't post anything for you, and we don't use this information for ads or sell it. The sign-in tokens these services give us are stored encrypted.

Worlds' use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

04How we use it

To run the game: sign you in, save your progress and worlds, and let you play with others.
To keep the game fair and safe: spot cheating, limit abuse such as too many sign-in attempts, and act on reports.
To send sign-in codes to your email. We don't send marketing email.
To fix bugs and improve the game, including error reports (Sentry) and seeing which parts of the game players use and for how long (Google Analytics) and how the game plays and how smoothly it runs (PostHog), and to answer you when you contact us.
To follow the law.

Where privacy laws such as the GDPR apply, we rely on running the game you asked for (contract), keeping it fair and secure (legitimate interests) and legal duties.

05Playing with others

Worlds is played browser to browser. When you join a party, one player's browser hosts the game and the players' browsers connect to each other directly. To make that connection:

Our server passes connection details between the players. These include IP addresses, so other players' devices can see your IP address, as in most online games.
Your browser asks a Google server (a "STUN" server) for its public address, so Google receives your IP address for that request.
If your browser can't connect directly to another player, the game's traffic goes through Cloudflare's relay servers instead. Cloudflare receives your IP address and passes on the game's traffic, which stays encrypted.
The host's browser sees what you do in the game, like any game host would.

Other players see your username, your character and what you do in the game.

Friends see whether you're online, whether you're at home or on a trip, and whether you're in a party. Appear offline hides all of this, and a switch in Friends hides where you are.
When you come online, your friends may see a short notice. Appear offline sends none.
Friends can join your world when your status is Open, and can build in it, as invited players can.
Players you block can't see you, send you friend requests, invite you or join your world. They aren't told.
Other players can find you by typing your exact username.
Chat in a world goes from your browser to the other players in that world, through the host's browser. Our servers don't receive or keep it, so we can't review it. To stop seeing a player's messages, mute them in chat or block them in Friends.

06Cookies and storage

We use only the cookies the game needs to work:

Sign-in cookie (name starting hytopia): keeps you signed in for up to 30 days.
Wallet cookie (__Host-hytopia-wallet): lasts 5 minutes while you link a wallet.
Sign-in state: a short-lived cookie while you sign in with Google or Discord.
Google Analytics (_ga and _ga_ followed by our ID): tells one visit from another, for up to 2 years. Players in the European Economic Area (the EU, Iceland, Liechtenstein and Norway), the UK and Switzerland don't get these cookies; Google receives only anonymous signals from them.

The game also stores your settings, parts of your worlds and your current trip in your browser's own storage, so it loads quickly and can pick up where you left off. It also keeps the date of your first visit there, so the play events in section 2 can tell a first visit from a return, and a random code for the current visit in the tab's own storage, which the browser forgets when the tab closes. You can clear these in your browser's settings. Clearing them won't delete your account.

08How long we keep it

Account, profile and game data: until you delete your account. Alpha resets may wipe game progress sooner.
Friends, blocks, your status and the where-you-are switch: until you change or remove them, or delete your account. They stay through alpha progress resets.
Friend requests nobody answered: 30 days.
Invites and online notices: up to 24 hours.
Chat in a world: not kept on our servers.
Sign-in sessions: up to 30 days. Expired sessions and sign-in codes are removed automatically.
Fair play records: flagged checks for 30 days. Records of corrections to an account's items and progress are kept for as long as the account exists.
Server logs: about 7 days. Database backups: 7 days.
Google Analytics data: up to 14 months.
PostHog play and performance events: up to 1 year.
Error reports and bug reports: up to 90 days.

09Your choices and rights

Sign-in methods: you can add or remove Google, Discord, email or a wallet in My Account. Your last sign-in method can't be removed.
See, correct or delete your information: email support@hytopia.com from the email on your account. We'll answer within 30 days. Deleting your account deletes your profile, saves, worlds, items, friends and blocks.
Google: you can also remove Worlds' access at myaccount.google.com/permissions.
Discord: you can remove Worlds under Settings, Authorized Apps.
Google Analytics: you can opt out with Google's browser add-on at tools.google.com/dlpage/gaoptout, or by blocking cookies in your browser.

Depending on where you live (for example the EU, UK or California), you may have more rights, such as getting a copy of your information or objecting to how we use it. Email us to use them, and you can complain to your local data protection authority.

10Children

Worlds is not for children under 13, and we don't knowingly collect information from them. If you think a child under 13 has an account, email us and we'll delete it.

11Security

We use encrypted connections (HTTPS), secure sign-in cookies, hashed sign-in codes and encrypted sign-in tokens, and we limit who can reach our servers and database. No system is perfectly secure, so please keep your sign-in methods safe too.

12Where it is stored

Our servers are in the United States, and PostHog stores the play and performance events in the United States too. If you play from elsewhere, your information is sent to and stored in the United States.

13Changes

We may update this policy. When we do, we'll change the date at the top, and for important changes we'll tell you in the game or by email.

14Contact

Questions or requests about your privacy: support@hytopia.com
HYTOPIA, Inc.