Privacy Policy

Last updated: October 23, 2026

Most privacy policies are written to be unreadable. This one isn't. Here is what we collect, why we collect it, and the things we refuse to do with your data.

Who we are

Re:Worlds is run by OmniBrain Studios. Questions and data requests go to reworlds@zohomail.com.

Age

Re:Worlds is for people 16 and older. We don't ask for ID and we don't run age checks. The verification steps below exist to stop bots and spam farms, not to certify who you are. If we find out an account belongs to someone under 16, we close it.

What we collect

Your account: a username, an email address, a password we store only as a hash (we can't read it back), and a phone number if you choose to add one. Plus whatever you put in your profile yourself: a picture, some text, preferences.

Your writing. Worlds, scenes, characters, messages, notes. This is the product. It stays yours.

Verification and security records. That your email or phone was verified, and when. A short append-only log of account events like registration and login, kept for security and anti-abuse. No passwords in it, no codes, no contact details in plain text.

Session and operational data. Enough to keep you signed in and the service running. Your story text does not go into our logs.

That's the list. We don't ask for your real name, your birthday, your location, or a single document.

Email and phone

We verify your email, and your phone if you gave us one, for one reason: spam accounts cost real money to serve, and bots ruin communities. Nothing else.

Your phone number sends one-time codes. That is its entire job. We will not text you a promotion, we will not call you, and we will not hand the number to anyone except the provider that delivers the code. Codes expire in minutes, we store them protected rather than in plain text, and they never reach our logs.

This is not identity verification. We have no interest in who you are. We only check that a person, not a script, controls the inbox or the line.

Payments

We never see your card. Payments run through authorized third-party platforms that handle your payment details under their own terms. What we keep is the receipt-level truth: which plan you're on, your credit balance and when each credit expires, and the fact that a payment cleared.

Your writing and AI

We do not train models on your stories, your roleplay messages, or anything else you keep private. Your content gets processed for one reason: to give you continuity, retrieval and generation when you ask for them. Your story exists to continue your world, not to become our dataset.

Turn on an AI feature and the relevant text goes to an AI provider so it can answer you. Contractually, they process it for that response and nothing else. Leave AI off and your writing never leaves us.

We are not in the business of reading your worlds. Private content stays between you and whoever you invite.

Public stays safe-for-work

Two spaces, two rulebooks.

Public surfaces (profiles, published templates, actor images, world covers, anything a stranger can see) are always safe-for-work, at a PEGI 16 / ESRB T standard. Graphic sex, gore or extreme imagery don't belong there. No exceptions.

Private spaces (your worlds, your scenes, your direct chats) are the only place unrestricted content is allowed, shared by consent between the people in the room. What happens in a private world stays in a private world. It never surfaces publicly.

Say the searchable word once: what other platforms call NSFW lives here only behind that private door, for users 16 and up, with everyone respecting each other's limits.

What we share

We don't sell personal data. We don't share it with advertisers. Four categories of provider see anything at all: the cloud infrastructure that hosts Re:Worlds, AI providers when you invoke them, the payment platform for your transaction, and the delivery service that carries your verification code.

Outside that list, user data leaves us in exactly one situation: a valid court order naming specific information, where the platform itself is legally implicated.

Cookies and tracking

No ad cookies. No cross-site trackers. No third-party analytics profiles of you. The storage on your device keeps your session alive and remembers your language. That's it.

Keeping and deleting

Your content lives as long as your account. Archiving is not deleting; archived worlds come back.

Export everything whenever you want, in a format you can actually read. Delete a world, or delete your account and the worlds go with it.

After deletion we keep the bare minimum security and legal record, for example that a verification happened. Your contact details don't get reused for anything.

Security

Passwords are salted hashes. Codes are stored protected. Emails, phones, passwords, tokens and codes never appear in application logs. Production access is restricted and credentialed. No system is perfectly secure; we act like your data matters, because it does.

Your rights

Wherever you live: ask what we hold about you, correct it, export it, delete it. Write to reworlds@zohomail.com.

Changes

If this policy changes in a way that matters to you, we tell you in the product before it takes effect. Not in a changelog nobody reads, and not afterwards.