World Engine

Privacy Notice

Last updated: 13 May 2026

1. Who we are

Neil Lawlor ("we", "us") operates World Engine (the "Service") and is the data controller for personal data processed in connection with your use of the Service.

2. What we collect and why

  • Account data (name, email, password hash) — to create and secure your account. Legal basis: contract.
  • Prompts and generated content — to provide the Service and let you retrieve your worlds and scenarios. Legal basis: contract.
  • Usage and telemetry (page views, feature interactions, simulation counts, error logs, device and IP) — to operate, secure and improve the Service. Legal basis: legitimate interests.
  • Support correspondence — to respond to your requests. Legal basis: legitimate interests.
  • Marketing, where applicable — only with your consent, which you can withdraw at any time.

Payment-card data is collected and processed by Paddle as Merchant of Record; we do not store your card details.

3. Who we share data with

  • Service providers / subprocessors — hosting, database, AI inference, analytics and customer support tooling, all under written agreements limiting their use of personal data to providing services to us.
  • Paddle, our Merchant of Record, for sale of subscriptions, payment processing, tax compliance, invoicing and subscription management.
  • Professional advisers (legal, accounting) where necessary.
  • Authorities where required by law or to protect our rights.

4. International transfers

Where personal data is transferred outside the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or applicable adequacy decisions.

5. Retention

We keep account data for as long as your account is active and for a reasonable period afterwards to comply with legal and accounting obligations. Prompts and generated content are kept for as long as you keep them in your library, and are deleted when you delete them or your account.

6. Your rights

Subject to applicable law (including the UK GDPR / EU GDPR where relevant), you have the right to access, rectify, erase, restrict and port your personal data, to object to certain processing, to withdraw consent, and to lodge a complaint with a supervisory authority. We will respond to verified requests within one month.

7. Security

We use appropriate technical and organisational measures including encryption in transit, access controls, audit logging and least-privilege provisioning. No system is perfectly secure; please use a strong, unique password and enable any additional security features we offer.

8. Cookies

We use essential cookies to keep you signed in and to remember your preferences. We may use limited analytics cookies to understand product usage; where required by law we will ask for your consent before setting non-essential cookies.

9. Contact

For privacy questions or to exercise your rights, contact Neil Lawlor at the email address associated with your account.