Privacy
What Allworld stores
- Your character: the nickname you chose, how your character looks, and the life it lives in the game (its home, money in the game, friends, what it has done). This is the game itself.
- An account, only if you sign in: the e-mail address of the sign-in you used (Google or e-mail and password), so your character follows you to another phone. Guests have no account and no e-mail.
- What you post: feed posts, photos and clips you upload, replies, reactions, communities, events, gigs, notices on your area's noticeboard (with your character's name, and only people whose badge is in the same area can read them) and the messages you send. Public posts are public; friends-only posts are for friends.
- Your location badge, if you turn it on: the city (and, if you choose, the local government area) that your own phone found itself in. Your phone works it out and sends only the place name. Allworld never receives, stores or logs your position, and the badge is removed with one tap.
- Business and payment details, if you use them: a business listing you wrote; for real-money features, an account at the payment company Bachs opened in your name. Bachs checks your identity and holds your bank details; Allworld keeps only the account's reference and its status, and never holds your money. What counts as real money.
- Technical records: a session cookie so the game knows which character is yours, and short-lived counts per network address to stop abuse. The address itself is never stored.
What never leaves your phone
- Your position. "Find my street", the location badge and "Find my area" all run on your device; only a place name is sent, and only when you say yes.
- Your contacts. If you look for friends from your contacts, every number is scrambled on your phone first; only the scrambled codes are sent, and you are matched only with people who also have your number.
- A selfie used to start your character from a photo: it is read on your phone and thrown away.
- Clips and photos you record of the game stay on your phone until you share them yourself.
Analytics and error reports
Usage analytics is optional and off until you accept it (Settings → Privacy). If you accept, Allworld counts which steps you complete and how the game runs for you, never what you write, where you are, your voice, or your e-mail. Error reports (what went wrong in the code) are always sent so the game can be fixed; they contain no chat, names or positions. Analytics is always off for players under 18 and when your browser sends a "Do Not Track" signal. The companies that process this for Allworld are PostHog and Sentry.
Who can see what
Other players see your nickname, your character, your public posts and your badges. People you add as friends see friends-only posts. Nobody sees your e-mail, your contacts or your position. Allworld does not sell data and does not show you advertising based on your data.
Children
Allworld asks your age once. Players under 18 cannot post publicly, use real-money features, or be followed by strangers, and analytics is off for them.
Delete your account
You can delete your Allworld account outside the app. Open joinallworld.com in any browser, sign in with the same email account, then open Settings → Account → Erase account. Confirm your sign-in again. Tick the option to also remove your character's saved life if you want it removed; otherwise it stays on that browser as a guest. Settings → Account also lets you download your account data.
Erasing removes the Allworld account, its email and device sign-ins, set-aside characters, and the selected saved life. It removes linked shop galleries, location-related progress and payment-provider references held on the account. It does not delete your separate sign-in-provider account.
Messages already sent to others, social conversations, feed posts, public listings and some shared-world records are currently retained. Chat photos and voice notes normally expire after 30 days; a server setting can change the photo period. Paid sale history, security audit records and historical backups are retained without a fixed automatic expiry. These records are not all removed by the account action.
To have everything removed, including the posts, messages and records the account action leaves, or if you cannot sign in, email support@joinallworld.com with the subject “Allworld account deletion”. Give your player code and sign-in email, never your password. Once we have checked the account is yours, we delete all the data we hold about you. This page is a draft pending a lawyer's review.
Where it is kept
Allworld runs on Cloudflare's network and keeps your data encrypted in transit. Payments are handled by Bachs under its own terms. The source code is public (AGPL), so what this page says can be checked.
Contact
Questions about privacy: use Help in the game or email support@joinallworld.com. This page changes when the game changes; the date at the top is the last change.