1. Information We Collect
Account Information: When you create an account, we collect your display name, email address, and profile avatar via Firebase Authentication (Google sign-in). We do not store your Google password.
Usage Data: We track in-app actions (worlds forged, records observed, reactions, SP transactions) to power progression, badges, and leaderboards. This data is tied to your account.
Generated Content: Worlds, records, choices, comments, and other content you create are stored on our servers.
Payment Information: If you purchase SP via Stripe, payment details are handled entirely by Stripe. We store only your Stripe customer ID and transaction history — never card numbers or banking details.
2. How We Use Your Information
- Provide and improve the WorldForge Nexus platform
- Display your public profile (display name, avatar, level, badges) on leaderboards and world pages
- Process SP purchases and manage your account balance
- Send AI-generated content to language model providers (Anthropic Claude, Cloudflare Workers AI, or local Ollama) to generate worlds and records — your blurbs and story context are included in these prompts
- Detect abuse, enforce rate limits, and maintain platform integrity
3. AI-Generated Content
WorldForge Nexus uses third-party AI services to generate story content. When you forge a world or generate a record, your input (genre, blurb, character details, and story context) is sent to the configured language model provider. These providers have their own privacy policies:
- Anthropic (Claude) — anthropic.com/privacy
- Cloudflare Workers AI — cloudflare.com/privacypolicy
AI-generated images (world covers, character portraits) are processed through Cloudflare Workers AI or a self-hosted Stable Diffusion instance.
4. Data Sharing
We do not sell your personal information. We share data only with:
- Firebase (Google Cloud): Authentication and database hosting
- Stripe: Payment processing
- AI Providers: As described in Section 3
5. Data Retention & Deletion
Your account data is retained for as long as your account is active. You may request account deletion by contacting us, which will remove your profile, transaction history, and associated content. Published worlds may be anonymized rather than deleted if other users have interacted with them.
6. Cookies & Local Storage
We use browser local storage for session tokens (Firebase Auth) and UI preferences (dismissed hints, theme settings). We do not use third-party tracking cookies or analytics services.
7. Security
All data is transmitted over HTTPS. Authentication tokens are verified server-side on every API request. We apply rate limiting, input sanitization, and security headers to protect against common attacks.
8. Children's Privacy
WorldForge Nexus is not intended for users under 13 years of age. We do not knowingly collect information from children under 13.
9. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated revision date.
10. Contact
For privacy-related questions or data deletion requests, contact us at privacy@worldforgenexus.online.