Privacy Policy

1. Overview

This policy explains what personal data Worldly (worldly.academy) collects, why we collect it, and the choices you have. We collect the minimum we need to run the service, we do not sell your data, and we do not show ads.

2. What we collect

• Account details: your email address, username, and password (stored in hashed form by our authentication provider). You may optionally add a recovery email.
• Gameplay data: quiz and duel results, XP and level, streaks, learning progress, and countries marked on your travel map.
• Social data: your friends list, duel challenges, and the messages you send in friend chats and duel rooms.
• Technical data: standard server logs (such as IP address and browser type) used for security and debugging, and a bot check on sign-up provided by Cloudflare Turnstile.

3. How we use it

We use your data to operate the game: signing you in, saving progress, matching duels, showing leaderboards and friend activity, and delivering your messages. We use your email to send account emails (such as password resets) and notifications you trigger, like duel challenge invitations. We do not use your data for advertising, and we do not sell or rent it to anyone.

4. Who processes it

We rely on a small number of service providers to run Worldly. Each processes data only on our behalf:

• Vercel hosts the site and serves requests.
• Supabase provides authentication and our database.
• Resend delivers our transactional emails.
• Cloudflare Turnstile protects sign-up from bots.

5. Cookies

We use only essential cookies: session cookies that keep you signed in. We do not use advertising or cross-site tracking cookies, so there is no cookie banner to click through.

6. How long we keep it

We keep your data while your account is active. If you delete your account from your profile settings, your personal data is removed from our database. Messages you sent to other players may remain visible to them, and residual copies in backups are purged on a rolling basis.

7. Your rights

Depending on where you live (including under GDPR and CCPA), you have the right to access, correct, export, or delete your personal data, and to object to certain processing. You can delete your account yourself in profile settings, or email us to exercise any of these rights.

8. Children

Worldly is not directed at children under 13 (or the higher age required in your country). If you believe a child has created an account without consent, contact us and we will remove it.

9. Changes and contact

If we make significant changes to this policy we will make that clear on the site. Questions or requests? Email hello@worldly.academy. See also our Terms of Service.