Privacy policy
Woods MMO · mmo.trevor-nielsen.com · Effective 17 October 2026
What we store
Exactly these things, and nothing else:
- Your screen name, shown above your character to other players.
- Game data: coins, insight, life experience, your last position in the woods, and the cosmetics you own and wear, and how many boombox song credits you have.
- Your passkey's public key (with its ID and a signature counter), so we can check it's you when you sign in. The matching private key never leaves your device or your password manager, and the public key can't be used to sign in as you.
- Song-credit purchases, if you make any: the Square payment ID, how many credits it granted and when, so a payment is never credited twice.
Boombox songs
Songs you make at the boombox are generated by MiniMax's music model through Cloudflare Workers AI (with zero data retention) from the description and lyrics you type, after the same filter as chat. The song and its description are kept in a shared library that everyone can play, but we don't record who made which song. While a song is being composed we briefly note whose it is, so a failed song can be refunded; that note is deleted when the song finishes or fails. Cloudflare's AI Gateway keeps a log of each request (the description, lyrics and resulting song, tagged only with a random job number), which lets us rescue a song if our server restarts mid-way. The library keeps the newest 40 songs.
Payments
Song credits are optional and sold through Square. You enter your email and card details on Square's checkout page, not ours; Square processes them under its own privacy policy and we never receive them.
What we don't store
No email address, password, IP address, device identifier, location, biometrics, analytics, advertising IDs or tracking cookies.
Face ID, fingerprints and PINs are checked by your own device and never reach us. Sign-in challenges and your session cookie are
cryptographically signed and verified on the fly, so no login history is stored. We set two cookies only to keep you signed in:
s (your session) and c (a five-minute sign-in challenge).
How it's used
Your data is used only to run the game. It is never sold or shared. The game runs on Cloudflare's infrastructure.
Chat
Chat messages (up to 120 characters) are shown above your character to players who are online at that moment, then fade away. They are never stored or logged: the server filters out profanity, passes the message on, and forgets it. There are no private messages, chat history or friend lists.
Other players
Other players can see your screen name, your character's appearance, where it is, and chat messages you send while they are online.
Your controls
From the in-game menu (☰) you can download everything we store about you as a JSON file, or permanently delete your account, which removes your player record, passkey and purchase records from our database immediately. You can then delete the passkey from your device in its password settings.