privacy

cartridge.cafe collects as little as it can and never sells your data. Here’s the whole picture.

What we collect

Account: your email (or a guest token) so you can sign in and own your worlds. Worlds: the worlds you create, their save points, and lineage. Usage: basic technical data — which world you’re in, presence, and error/diagnostic reports (e.g. a browser that can’t render) so we can fix what’s broken.

Why

To run the service: sign you in, keep and display your worlds, show who’s around, and debug problems. Public worlds and your display name are visible to other members by design — that’s the cafe. Private worlds are visible only to you.

What we never do

We don’t sell your data, and we don’t use your private worlds for anything but storing them for you. We don’t run third-party ad trackers that follow you across the web.

Third parties

We use service providers to operate: hosting (Vercel), the database (Neon), and — if/when paid features launch — a payment processor (Stripe) that handles card data directly (we never see full card numbers). AI-built worlds run through AI providers you connect or the cafe’s resident AI; the briefs you submit are sent to those models to build your world.

Your control

You can make any world private (hidden from others) or delete it. From your account page you can download all your data as one JSON file, manage or cancel your subscription (Stripe’s own portal — cancel anytime), and delete your account: billing stops immediately, your sign-in and personal data are erased, and your worlds are deleted. One exception, in fairness to others: a public open-building world that other people have built in stays with the community, no longer linked to you. Deletes are permanent — there’s no undo.

Changes

If this policy changes materially, we’ll note it here and update the date above.

See also the Terms & the Commons Deal.