Draft — not yet in effect. This document is a template with placeholder details and has not been reviewed by a lawyer. Fill in src/lib/legal/operator.ts and have it reviewed before relying on it.
← Back to WorldBuilder

Privacy Policy

Effective [EFFECTIVE DATE]

WorldBuilder (“we,” “us”) is a creative-writing app where young writers build fictional “story universes” with the help of an AI companion. This policy explains what we collect, how we use it, who we share it with, and the choices you and your family have. Because WorldBuilder is used by children, we follow the U.S. Children’s Online Privacy Protection Act (COPPA). If you are a parent or guardian, the Children’s Privacy & Parental Rights section is for you.

1. Who we are (operator & contact)

This service is operated by [OPERATOR LEGAL NAME]. You can reach us about privacy, or to review or delete your child’s information, at:

  • Email: [privacy@your-domain.com]
  • Mail: [STREET, CITY, STATE ZIP, COUNTRY]
  • Phone: [+1 (555) 555-5555]

2. Information we collect

We collect only what we need to run the app:

  • Account information — email address, a display name you choose, and a date of birth (used to apply age-appropriate protections and determine whether parental consent is required).
  • Content you create — the stories, characters, world rules, canon facts, and chat messages you write in the app. This may contain whatever personal details you choose to put in your writing, so we encourage writers not to include real personal information in their stories.
  • Parent/guardian information — for users under 13, a parent’s email address, collected to obtain and document consent.
  • Usage and technical data — basic logs, error reports, and AI-usage counts (e.g. number of requests and approximate token usage) needed to operate, secure, and rate-limit the service.

3. How we use information

  • To create and maintain your account and save your worlds.
  • To provide the AI companion features (see the next section).
  • To keep the service safe and reliable — preventing abuse, enforcing usage limits, and fixing errors.
  • To contact a parent/guardian for consent, and to respond to privacy requests.

We do not sell personal information, we do not show third-party behavioral advertising, and we do not use children’s content to build advertising profiles.

4. AI processing

When you chat with the companion or use AI features, the text you write and the relevant parts of your universe are sent to our AI provider (Anthropic) to generate a response. We instruct the provider to process this data only to return results to you, not to train its models on it. AI responses are generated automatically and may be inaccurate or imperfect; they are creative suggestions, not facts or advice.

5. Who we share information with

We share information only with service providers that help us run WorldBuilder, under contracts that limit their use of it. Categories of providers:

  • Hosting & database (e.g. Supabase, Vercel) — to store your account and content and serve the app.
  • AI processing (e.g. Anthropic) — to generate companion responses, as described above.
  • Email delivery (e.g. Resend) — to send account and parental-consent emails.

We may also disclose information if required by law, or to protect the safety, rights, or security of our users or the service. A parent can consent to our collection and use of a child’s information without agreeing to disclosures that are not integral to the service.

6. Children’s privacy & parental rights (COPPA)

WorldBuilder is intended for children as well as older writers. For any user under 13, we collect personal information only after obtaining a parent or guardian’s verifiable consent. Until that consent is given, the child’s account is held inactive and AI/authoring features are disabled. We collect a parent’s email address for the purpose of seeking this consent.

As a parent or guardian, you have the right to:

  • Review the personal information we have collected from your child.
  • Ask us to correct or delete your child’s personal information.
  • Refuse to allow further collection or use of your child’s information (this may mean closing the account).
  • Agree to collection and use without agreeing to non-essential disclosures to third parties.

To exercise any of these rights, email us at [privacy@your-domain.com]. We will verify that you are the child’s parent or guardian before acting on the request.

7. Data retention

We keep your account and content while your account is active. If you (or a parent) ask us to delete an account, we delete the associated personal information and content, except where we must keep limited records to comply with law or to protect the service.

8. Security

We use reasonable technical and organizational measures to protect information, including access controls and encryption in transit. No system is perfectly secure, but we work to protect your data and limit who can access it.

9. Cookies & local storage

We use only the cookies and local storage needed to keep you signed in and run the app. We do not use third-party advertising or tracking cookies.

10. Your choices & other privacy rights

Depending on where you live, you may have additional rights (such as to access, correct, delete, or port your information). Contact us at [privacy@your-domain.com] and we will respond as required by applicable law.

11. Changes to this policy

If we make material changes, we will update the effective date above and, where required, notify parents directly before the changes affect a child’s information.

12. Contact us

Questions or requests? Email [privacy@your-domain.com] or write to us at [STREET, CITY, STATE ZIP, COUNTRY].