Wander Engine Privacy Policy
Last updated: 2026-10-23
This policy explains what information Wander Engine keeps about you, where it is kept, who can see it, how long it is kept, and how to have it deleted. It covers the website at wanderengine.app and the worlds made with its "Create a world" service. Wander Engine is run by the people named "we" and "us" in our Terms of Service.
The short version
- You sign in with Discord. We get your Discord id, username, display name, and avatar. We never get your email address or your Discord password.
- Every world you visit receives your Discord identity, and that world's owner can see it. World owners are other users of Wander Engine, not us. If you'd rather a world's owner didn't know who you are on Discord, don't sign in to that world.
- What you do in a world (your character, what you build, and what you write) is stored in that world.
- If a world uses AI, what you ask it to write or draw is sent to an outside AI provider.
- We don't sell your information, show you ads, or use tracking or analytics tools.
Who can see what
World owners. When you sign in to a world, the world is told your Discord id, username, display name, and avatar, and keeps them on your account in that world. The world's owner and the administrators they appoint can see that your character belongs to your Discord account. We require owners to use this only to run and moderate their world, and never to publish it or use it to contact or track you outside the world (see the Terms of Service). We can't technically stop an owner who chooses to break that rule, so please decide for yourself which worlds you sign in to.
An owner can download a copy of their world. The copy includes the world's content and one public line per character (name, display name, title, descriptions, and gender). It leaves out accounts, Discord ids, the rest of each player's saved data, and moderation records. An owner can also connect their own tools to their world to help build it; what those tools do is up to the owner.
Other players. When you first sign in to a world, your character is named after your Discord username unless that name is taken. Other players in that world see your character's name, so they may be able to recognize you. Anything you say or do in a world can be seen by the people there with you.
Us. The people who run Wander Engine can access every world's stored data to operate, fix, back up, and moderate the platform. We look at it only for those reasons.
What we keep, and where
When you sign in (the sign-in service at wanderengine.app)
The sign-in service passes your Discord identity to the world you are signing in to. It does not keep an account for you. It keeps:
- Whether Discord has confirmed you're an adult. If you run the
/verifycommand, we record that your Discord account passed Discord's adult check, and when you last confirmed it. We store this under a scrambled form of your Discord id, not the id itself, with no username, server, or world attached. Only worlds rated adult ask for it. - Short-lived sign-in records that last from a minute to a few minutes while you sign in, and a website session of up to 12 hours if you sign in to the "Create a world" or "My worlds" pages.
- Server logs that record requests to the service. We strip the parts of web addresses that would carry Discord sign-in codes and names. These logs are held by our hosting provider, Fly.io, for a limited time under its own terms.
If you request a world
When you ask to create a world, we keep your request: your Discord id and name, the world's name, address, emoji, tagline, colors, plugins, whether it contains adult content, whether to list it in the public directory, and the request's status and dates. If you change the directory setting later, we keep that choice too. We keep requests after they are decided, including declined and expired ones, until you ask us to delete them.
The world's address and the Discord id of its owner are also stored in the world's own settings, and the world's address is recorded in our code repository (on GitHub) so that updates can be deployed to it.
In each world
Each world runs on its own server with its own storage (a Fly.io volume). A world stores:
- your account in that world: your Discord id, username, and avatar, and your character's name;
- your character and its settings, inventory, and progress;
- what you build: rooms, characters, objects, and descriptions;
- images generated for the world, such as portraits;
- moderation records, such as bans, which are kept by character name and Discord id;
- anything else the world's design saves.
Recent chat on a world's channels is kept in memory only (the last few lines per channel) and is lost when the world restarts. A world's server logs record connections and errors.
Backups. Each world's storage is snapshotted once a day, and each snapshot is kept for 14 days.
Bug reports. Created worlds don't send bug reports anywhere today. If you attach a screenshot to one, it may still be saved in the world's storage.
Where your information is processed
We use these companies to run Wander Engine. Each of them handles your information to provide their service to us.
| Company | What they do for us | What they receive |
|---|---|---|
| Discord | Sign-in, and the adult check behind /verify |
Your sign-in request; Discord already holds your account |
| Fly.io | Hosting for the sign-in service and every world, including storage, backups, and server logs | Everything each world and the sign-in service stores |
| Venice.ai | AI text and image generation, in worlds that use AI | What you or the world ask the AI to write or draw, and any reference images |
| Anthropic | Makes some of the AI text models that Venice runs for us | The text sent for generation, when Venice uses one of Anthropic's models for a request |
| Fonts for the game screen in a world | Your browser loads the fonts from Google, which sees your IP address and browser details | |
| GitHub | Our code repository, which records each world's address so updates can be deployed to it | World addresses, not information about players or owners |
| Cloudflare | Domain name records for wanderengine.app | Not your traffic: the records point straight at Fly.io |
Venice passes some requests on to the company that makes the model it uses for them, such as Anthropic. Each provider handles what it receives under its own terms.
Our servers are in the United States (Fly.io's San Jose region). If you use Wander Engine from elsewhere, your information is processed in the United States.
How we use your information, and why
- to sign you in and keep you signed in, and to run the worlds you visit and save what you do in them, because that is the service you asked for;
- to confirm, when a world rated adult asks, that Discord has judged you an adult, because the world's rating requires it;
- to generate AI text and images when you or a world ask for them;
- to fix bugs, keep the platform secure, and investigate abuse, because we have a legitimate interest in keeping Wander Engine working and safe;
- to enforce our Terms of Service and Content Policy, and to meet legal duties.
Cookies and browser storage
We use only what sign-in needs: short-lived cookies that tie a sign-in to your browser, a session cookie for the "Create a world" and "My worlds" pages, and a token in your browser's storage that keeps you signed in to a world. We don't use advertising or analytics cookies.
Children
You must be at least 13 to use Wander Engine, and 18 to visit a world rated adult (see the Terms of Service, section 2). We don't knowingly collect information from children under 13. If you believe a child under 13 is using Wander Engine, or that someone under 18 is in a world rated adult, tell us at support@wanderengine.app and we will remove their account.
How long we keep things
- Sign-in records: minutes. Website sessions: up to 12 hours.
- Your adult-check record: until you ask us to delete it, or we clear it.
- World requests: until you ask us to delete them.
- Your account and content in a world: as long as the world exists, unless you or the owner delete it, or you ask us to.
- Backups: 14 days after the snapshot was taken.
- A world its owner has deleted: the world's storage, including every player's account and saves in it, is kept for 30 days in case the owner changes their mind, then destroyed. Backup copies of it expire within a further 14 days.
- A record that a world was deleted (its address, who deleted it, and when): kept, so that a deleted world's address is never given to someone else.
- Moderation and abuse records: as long as needed to keep the platform safe and meet legal duties.
Deleting your information, and your other choices
You can ask us to:
- tell you what we hold about you, and give you a copy;
- correct it;
- delete your account and content in one world, or in every world;
- delete your adult-check record;
- delete your world requests.
World owners can also delete a world they created themselves, from the "My worlds" page.
Write to support@wanderengine.app, naming the Discord account concerned. We will need to confirm it's you, for example by asking you to message us from that Discord account. We will answer within 30 days. Deleted information disappears from backups when they expire, within 14 days. When an owner deletes a whole world, its storage is held for 30 days first, as described above. We may keep what the law requires, or what we need to deal with abuse (for example, a record that an account was banned).
There is no self-serve button for this yet; we do it by hand.
Depending on where you live (for example, in the European Union, the United Kingdom, or California), you may have further rights, such as to object to some uses of your information, or to complain to your local data-protection authority. Write to us to use them.
Security
Sign-in uses Discord's standard sign-in with extra protections against forged or stolen sign-ins. Each world runs separately with its own secrets. We store the adult-check record under a scrambled id. No system is perfectly secure, and we will tell affected people if a breach puts their information at risk, as the law requires.
Changes
We may update this policy. When we do, we will post the new version on this page and update the date at the top.
Contact
Questions about privacy: support@wanderengine.app.