Privacy Policy

1.Scope

1. 1.1

   This policy covers the keepworlds.com website and every service offered through it. The controller of your personal data is the operator of this service, 四川天府新区成都片区万安空岛灵境信息技术服务工作室, an individually-owned business registered in the mainland of the People's Republic of China at 四川省成都市天府新区万福寺路636号 / No. 636 Wanfusi Road, Tianfu New Area, Chengdu, Sichuan 610213.

2. 1.2

   We process personal data on the basis of performing our contract with you, of complying with our legal obligations, and of our legitimate interest in keeping accounts and infrastructure secure. Where we rely on your consent, you can withdraw it — see Your rights.

3. 1.3

   This policy does not cover the games reached through our service. In-game accounts, chat, and behavioral data are handled by the game's developer under its own privacy policy, and we take no part in that.

2.What we collect

We collect only what the service actually needs, and nothing unrelated to it. This is the complete list.

1. 2.1

   Account information: your email address, and your password stored as an irreversible hash. We never store your password in the clear, and nobody — including our own operators — can recover it from the database.

2. 2.2

   Sign-in and security logs: the IP address and browser User-Agent recorded at each sign-in. These are used only for account security auditing and for the signed-in device list in the Console, so you can see and remove sessions you don't recognize.

3. 2.3

   Transaction information: what you ordered, the amount, the payment method, and the transaction reference returned by the payment provider. We never see or store your card number, CVC, or other payment credentials — the payment provider collects and processes those directly.

4. 2.4

   Service operation information: the running state, server address, and server password of the instance you bought, and the automatic backups of your game save. The contents of the save are yours; we store them only to run and restore the service.

5. 2.5

   Information you give us: the description you write when opening a support ticket, and anything else you send while talking to support. Please don't include sensitive personal information that isn't relevant to the problem.

6. 2.6

   We do not collect: your real name, government ID numbers, phone number, biometric data such as face or fingerprint, location data, your contacts, or any in-game chat.

3.How we use it

1. 3.1

   Providing the service: creating your account from your email, sending registration and sign-in codes, sending you the server address and password when your server goes live, and sending expiry and renewal reminders.

2. 3.2

   Completing transactions: creating orders, starting payments, reconciling payment results, and handling refunds and accounting.

3. 3.3

   Keeping things secure: spotting unusual sign-ins, defending against credential stuffing and bulk registration, and investigating account security incidents.

4. 3.4

   Handling your requests: answering tickets, diagnosing faults you report, and restoring saves when you ask.

5. 3.5

   Meeting legal obligations: providing information where the law requires it or an authority lawfully demands it.

6. 3.6

   We do not use your personal data for advertising, profiling, or automated decision-making, and we never sell it to anyone.

4.Cookies and local storage

1. 4.1

   We don't use cookies to track behavior, and we haven't integrated any third-party analytics, advertising, or data-analysis SDK.

2. 4.2

   We use your browser's local storage for two things: your sign-in token (to keep you signed in; cleared when you sign out) and your theme preference (light or dark). Both stay on your own device.

3. 4.3

   You can clear local storage from your browser settings at any time. Doing so signs you out and you'll need to sign in again; nothing else is affected.

5.Who else sees it

We don't share or sell your personal data, but the service cannot be provided without a small number of processors, each of which necessarily handles part of it. Every one of them is named below, with what it does for us and what it receives. We have contracts with each of them setting out the purpose and duration of processing, and we hold them to their protection obligations.

1. 5.1

   Paddle (Paddle.com Market Limited, United Kingdom, and its affiliates in the United States and Canada) — our payment provider and the merchant of record for your purchase. To take payment and issue refunds we pass the order amount and an order reference. Your card details go to Paddle directly and never pass through us, and Paddle also processes your data under its own privacy policy.

2. 5.2

   Google Cloud (Google LLC, United States, and its affiliates, operating the infrastructure in Tokyo, Japan on which our own systems run) — the host of the machine that runs this website, our application, and their logs. Everything the service does passes through processes on that machine, so the data described above is handled there, along with the credentials our systems use to manage your game instance. Under our contract it processes that data only to provide the infrastructure to us, and not for its own purposes.

3. 5.3

   Supabase (Supabase, Inc., United States, operating the database on infrastructure in Tokyo, Japan) — our managed database provider, and the processor that holds the largest part of your data: your email address and password hash, your sign-in IP addresses and User-Agents, your order and payment records, and the contents of your support tickets are all stored in the database it runs for us. Under our contract it processes them only to operate that database, and not for its own purposes.

4. 5.4

   Tencent Cloud (a cloud provider established in the mainland of the People's Republic of China, operating the infrastructure in Japan, South Korea, and Hong Kong on which your instance runs) — the provider of the game machines, and of nothing else. We use it to create and run your game instance and to store game saves and runtime data in the region you chose when ordering. We do not pass your email address, your order records, or any other account information to it — those stay in the database described above.

5. 5.5

   Resend (Resend, Inc., United States) — our email provider. To send verification codes, launch notifications, and expiry reminders we pass your email address and the content of the message.

6. 5.6

   Legal cases: where the law requires it, an authority lawfully demands it, or it is necessary to protect our rights or someone else's, we may disclose relevant information. We check that such requests are legitimate before acting on them.

7. 5.7

   If we merge, split, or wind up, we will tell you beforehand who the recipient is and how to reach them, and require the recipient to remain bound by this policy. If there is no recipient, we will delete or anonymize your personal data.

6.Where it lives and how long we keep it

1. 6.1

   Where it is: your account, order, and ticket data sits on infrastructure in Tokyo, Japan. Your game instance, its save data, and its backups sit in the region you chose when ordering — Tokyo, Seoul, or Hong Kong. Backups stay in the same region as the instance they came from.

2. 6.2

   Who can reach it, and from where: we are established in the mainland of the People's Republic of China and we operate this service from there, so our staff access all of the infrastructure above from mainland China for operation, maintenance, and support — remotely, whichever country the machine itself stands in. Of our processors, the one that runs your game machines is also established in mainland China and its staff may reach that infrastructure from there; the machine our own systems run on and the database holding your account, order, and ticket data are operated by providers established in the United States, on infrastructure in Japan. Your personal data may therefore be accessed from mainland China, where the authorities may in defined circumstances require access to data held by us or by a provider established there.

3. 6.3

   Why we may do this: these transfers are necessary to perform the contract you entered into with us — there is no version of this service in which the machine running your game world, and the system that manages it, are in the same country as every player. We keep them to what the service actually needs, and our processors are contractually bound to protect the data they hold. Country-specific information is set out in the Country-specific information chapter.

4. 6.4

   Account information is kept while your account exists. After you close it, we delete or anonymize the data within 30 days, except where the law requires us to keep a record.

5. 6.5

   Sign-in logs (IP and User-Agent) stop being used for the service once the session expires or you remove the device, and are retained after that only for security auditing.

6. 6.6

   Transaction records are kept for as long as tax and accounting law requires — normally several years from the date of the transaction.

7. 6.7

   Game saves and backups follow the Renewal, expiry and data retention chapter of the Terms of Service: 7 days on the instance after expiry, 30 more days for the cloud backup, and permanent deletion after that.

7.How we protect it

1. 7.1

   The whole site is served over HTTPS; passwords are stored one-way with a standard salted hashing algorithm and cannot be reversed.

2. 7.2

   Internal access follows the principle of least privilege. The admin console and the customer-facing site use entirely separate credential systems, and sensitive operations leave an audit record.

3. 7.3

   Despite all of that, nothing on the internet is absolutely secure. Keep your password safe, and don't reuse the same password across sites.

4. 7.4

   If a personal data breach occurs, we will start our incident response promptly, tell affected users what happened and what they can do about it, and notify the relevant authority where the law requires.

8.Your rights

You have the following rights over your own personal data. You can exercise most of them yourself in the Console, or ask us using the contact details at the end of this policy.

1. 8.1

   Access and copies: the Console shows your account details, order history, service instances, and signed-in devices. If you want a copy of the data we hold, ask us and we'll provide one.

2. 8.2

   Correction: you can change your password in account settings. If anything else is wrong, contact us and we'll correct it.

3. 8.3

   Deletion: where we no longer need the data for the purpose we collected it, where you close your account, or where we have processed it unlawfully, you can ask us to delete it. Where a legal obligation prevents deletion, we will stop processing it for anything except storage and the security measures that storage requires.

4. 8.4

   Portability: you can ask for the account and order data you gave us in a commonly used, machine-readable format. Game saves can be exported from the Console at any time.

5. 8.5

   Closing your account: you can ask us to close it at any time. Closing ends all services; account data is handled under this policy and the Terms of Service, and cannot be recovered afterwards.

6. 8.6

   Objection and withdrawal of consent: you can object to processing based on our legitimate interests, and withdraw consent to a specific processing activity. Withdrawal doesn't affect processing already carried out on that basis, but afterwards we may no longer be able to provide the related service.

7. 8.7

   To exercise any of these, open a ticket in the Console or email [email protected]. To protect your account we may need to verify who you are first. We reply within 30 days, and sooner where the law where you live requires it — for users in South Korea, requests to access, correct, delete, or suspend the processing of personal data are answered within 10 days.

9.Country-specific information

The rights above are given to everyone. This chapter adds what the law of a particular market requires us to tell you there, and names the authority you can complain to.

1. 9.1

   Japan: this service is operated from outside Japan and is subject to the Act on the Protection of Personal Information. The operator's name and address are in the Contact us chapter. Personal data is provided to third parties located outside Japan as set out above — Paddle (United Kingdom, United States, Canada), Google Cloud (United States, operating the infrastructure in Japan on which our own systems run), Supabase (United States, operating in Japan the database that holds your account, order, and ticket data), Tencent Cloud (mainland China, operating the infrastructure in Japan, South Korea, and Hong Kong on which your instance runs), and Resend (United States). Those countries' data protection regimes differ from Japan's, and we require each of them by contract to take measures equivalent to those the Act requires of us. You may contact the Personal Information Protection Commission of Japan.

2. 9.2

   South Korea: personal data of users in Korea is transferred outside Korea because the service cannot be provided otherwise, and we do this under the exception for processing and storage necessary to perform a contract with you, by disclosing the following in this policy. Items transferred: email address, sign-in IP address and User-Agent, order and payment records, ticket contents, and the instance and save data belonging to your order. Recipients, countries, and purposes: Paddle (United Kingdom, United States, Canada) receives the order amount and an order reference, for taking payment and issuing refunds; Google Cloud (United States; infrastructure in Japan) hosts the machine our own systems and their logs run on, so every item above is handled there; Supabase (United States; database operated in Japan) holds your email address, sign-in IP address and User-Agent, order and payment records, and ticket contents; Tencent Cloud (mainland China; infrastructure in Japan, South Korea, and Hong Kong) receives the instance and save data belonging to your order, for running and backing it up; Resend (United States) receives your email address and the content of the message, for sending email to you. Contact details for each recipient are available on request through the Contact us chapter. Timing and method: continuously, over encrypted network connections, as you use the service. Retention: for as long as this policy says we keep the relevant data. You can refuse the transfer by not using the service or by closing your account — because the transfer is inseparable from the service, refusing it means we cannot provide the service. You may contact the Personal Information Protection Commission of Korea.

3. 9.3

   Taiwan: you have the rights given by the Personal Data Protection Act — to ask what we hold about you, to get a copy, to have it corrected or supplemented, to stop us collecting, processing, or using it, and to have it deleted. Exercising them costs you nothing beyond what the law allows us to charge, and refusing to give us data means only that we may be unable to provide the related service. International transfers of your data are made as described above; you may contact the Personal Data Protection Commission.

4. 9.4

   Everywhere else: use the rights in Your rights above. Where the law where you live gives you more than this policy does, that law applies, and you may complain to your local data protection authority.

10.Children

1. 10.1

   This service is for people who can enter into a contract. If you are under 18, read this policy with a parent or guardian and get their consent before using the service or paying for it.

2. 10.2

   We do not knowingly collect personal data from children below the age at which consent can be given in the country where they live.

3. 10.3

   If we find that we have collected a child's personal data without the necessary consent, we will delete it as quickly as we can. Parents and guardians who spot such a case can reach us at [email protected].

11.Changes to this policy

1. 11.1

   We may update this policy as the business or the law changes. Updates are published on this page, and the version number and effective date at the top are updated with them.

2. 11.2

   Where the purpose of processing, the way we process, or the categories of data we collect materially change, we will tell you separately — in the Console or by email — before it takes effect, and ask for your consent again where that is needed.

12.Contact us

1. 12.1

   For questions, comments, or complaints about this policy, or to exercise your rights, email [email protected] or open a ticket in the Console. We will look into it and reply as soon as we can.

2. 12.2

   The controller is 四川天府新区成都片区万安空岛灵境信息技术服务工作室, registered at 四川省成都市天府新区万福寺路636号 / No. 636 Wanfusi Road, Tianfu New Area, Chengdu, Sichuan 610213. The same address and mailbox handle personal data questions; we have not appointed a separate data protection officer, and the operator answers those requests directly.

3. 12.3

   If you believe our processing has harmed your rights and we can't resolve it between us, you may complain to the authority for your market — the Personal Information Protection Commission in Japan, the Personal Information Protection Commission in Korea, or the Personal Data Protection Commission in Taiwan — or, elsewhere, to the data protection authority where you live. You may also bring the matter before a court with jurisdiction.