Privacy Policy

1. Information We Collect

Account Information

When you create an OrbiWorlds account, we collect:

• Username (publicly visible)
• Email address (for account recovery and important notifications)
• Password (encrypted and never stored in plain text)
• Date of birth (to ensure age-appropriate experiences)
• Parent email (for users under 13)

Usage Information

To improve your experience, we automatically collect:

• Games you play and create
• Friends you connect with
• Items you purchase or trade
• Forum posts and messages
• Login times and activity patterns
• Device information (browser type, operating system)
• IP address (for security and location-appropriate content)

2. How We Use Your Information

Platform Operations

• Creating and maintaining your account
• Processing purchases and transactions
• Displaying your profile and content to other users
• Enabling social features (friends, messaging, forums)
• Personalizing your experience

Safety & Security

• Detecting and preventing fraud, abuse, and policy violations
• Enforcing our Terms of Service
• Protecting child safety with age-appropriate filters
• Investigating reports and suspicious activity
• Maintaining platform security and integrity

Communication

• Sending account-related notifications
• Responding to support requests
• Announcing new features and updates (you can opt out)
• Marketing communications (only if you opt in)

3. When We Share Information

Public Information

The following is visible to other users:

• Your username and avatar
• Games you create
• Public forum posts
• Items in your inventory (if you choose to display them)
• Friends list (unless you hide it in privacy settings)
• Online status (if enabled)

Service Providers

We share limited data with trusted partners who help us operate:

• Payment processors (for purchases)
• Cloud hosting services (for data storage)
• Analytics providers (to understand platform usage)
• Email service providers (for notifications)

These partners are contractually required to protect your data and can only use it for specified purposes.

Legal Requirements

We may disclose information if required by law or to:

• Comply with legal processes (subpoenas, court orders)
• Protect our rights and property
• Ensure safety and prevent harm
• Report child endangerment to authorities

4. Your Privacy Controls & Rights

Settings You Can Control

• Profile Visibility: Choose who can see your profile and activity
• Friend Requests: Control who can send you friend requests
• Messages: Limit who can message you
• Online Status: Hide when you're online
• Inventory Display: Show or hide your items
• Email Preferences: Opt out of promotional emails

Your Data Rights

You have the right to:

• Access: Request a copy of your data
• Correction: Update inaccurate information
• Deletion: Request account and data deletion
• Export: Download your content and creations
• Object: Opt out of certain data uses

5. How We Protect Your Data

Security Measures

• Passwords encrypted with industry-standard hashing
• HTTPS encryption for all data transmission
• Regular security audits and updates
• Secure data centers with access controls
• Staff training on data protection
• Automated monitoring for suspicious activity

Your Responsibility

• Choose a strong, unique password
• Never share your password with anyone
• Log out on shared devices
• Report suspicious activity immediately
• Keep your email account secure

6. Cookies & Tracking Technologies

What We Use

• Essential Cookies: Required for login and core functionality
• Preference Cookies: Remember your settings and customizations
• Analytics: Help us understand how users interact with OrbiWorlds
• Session Management: Keep you logged in securely

Your Choices

You can control cookies through your browser settings, but note that disabling essential cookies may limit functionality.

7. Children's Privacy (COPPA Compliance)

Users Under 13

Parental Rights

Parents of users under 13 can:

• Review all information collected from their child
• Request deletion of their child's data
• Refuse further collection of their child's information
• Access parental control settings
• Receive notifications of policy changes affecting children

Contact parents@orbiworlds.com to exercise these rights.

8. Data Retention & Deletion

How Long We Keep Data

• Active Accounts: Data retained while account is active
• Inactive Accounts: May be deleted after extended inactivity
• Deleted Accounts: Most data removed within 30 days
• Backup Retention: Backups purged within 90 days
• Legal Holds: Data retained longer if legally required

What Remains After Deletion

Some information may persist after account deletion:

• Public forum posts (username anonymized)
• Transaction records (for accounting and fraud prevention)
• Moderation logs (for safety and pattern detection)
• Aggregated analytics data (fully anonymized)

9. International Data Transfers

OrbiWorlds is operated from the United States. By using our platform, you consent to your information being transferred to and processed in the U.S., which may have different data protection laws than your country.

European Users (GDPR)

If you're in the EU/EEA, you have additional rights under GDPR:

• Data portability
• Right to be forgotten
• Object to automated decision-making
• Lodge complaints with supervisory authorities

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do:

• We'll update the "Last Updated" date below
• Significant changes will be announced via email or platform notification
• You'll be asked to review and accept major changes
• Continued use after changes means you accept the updated policy

11. Contact Us About Privacy

Questions or Concerns?

• Privacy Questions: privacy@orbiworlds.com
• Data Requests: datarequest@orbiworlds.com
• Parents: parents@orbiworlds.com
• General Support: support@orbiworlds.com