Privacy notice

A quick explanation for younger visitors

You can look around this website without an account. Accounts are available only to people aged 16 or over. If you create one, we need an email address to make sure it belongs to you, a password to protect your account and your truthful confirmation that you are at least 16. If you are under 16, please do not register.

We do not show your email address or password to other visitors, and we do not ask for a parent or guardian's email address. We do not use your account to send advertisements or track you for advertising. You can download your account information or delete your account in the Account panel after confirming your current password. You can also contact us to ask what we hold or request deletion; a parent or guardian may help you exercise your rights where appropriate.

We count daily visits and add up things such as puzzle completions and play time to improve the game. We do not keep a list of what you personally did. The visitor count and the game totals are separate. You can stop these statistics in Privacy & play statistics in the game menu; this does not stop you playing or saving.

Who is responsible

Objective Online Company S.R.L. is the controller of personal data used to operate The Worlds of Origin website and its accounts. CUI: 38481980. Trade Register: J2017019036407. Registered office: Str. Iani Buzoiani nr. 3, bl. 16, sc. B, ap. 73, Sector 1, Bucuresti, 011571, Romania.

For privacy questions and requests, email mail@objective.srl. You do not need to create an account to read this notice or contact us.

Browsing the website

Our hosting service receives information needed to deliver pages, including your IP address, the requested address, request time, browser information and the result of the request. We use operational and security logs to keep the website available, investigate faults and prevent abuse. This supports our legitimate interests in operating a reliable and secure service.

We do not use advertising cookies, social-media pixels, fingerprinting or embedded third-party videos. The limited first-party statistics below are separate from operational and security logs.

Daily visitor estimates

On access to the main page or game, a separate request lets our server estimate distinct network addresses for that day. It converts the connection's IP address into a keyed hash using a fresh random key for each Europe/Bucharest calendar day. Only the current day's hashes and key are kept temporarily in private memory-backed server storage. They are deleted at rollover by a new request or scheduled maintenance, including the midnight cleanup, even if nobody visits. They are not included in the application's disk backups. The persistent statistics contain daily counts, not IP addresses or hashes.

We also estimate country locally using the IP Geolocation by DB-IP database. No visitor address is sent to DB-IP. Only country totals are retained; no country is attached to a gameplay report or account. Unknown locations remain unknown. Shared connections, changing addresses, VPNs and server restarts can merge or inflate estimates, so these figures are not verified unique people or players, and cannot be added across days to count unique people.

Daily hashing reduces retention and cross-day linking, but the temporary IP processing and hashes are still personal-data processing. Our stated basis for this limited audience measurement is our legitimate interest in understanding use of the service while minimising identification. We do not use it for advertising, profiling, sales of data or linking visits to game actions. Accepting our terms is not treated as consent to this processing.

Unlinked gameplay totals

Separately, the game sends small increments of active play time, game starts, progress milestones, puzzle time, move or command counts, puzzle completions and Part 1 completions. When a play session ends, it also sends the highest completion percentage reached; we add these values and their report count to daily totals to calculate a mean reported end progress. Missing reports are excluded, and repeated visits may contribute again: this is not an average for unique people. The server immediately aggregates the reports. These requests do not use the account cookie and contain no account, browser, session, IP-hash or playthrough identifier. We retain no individual event history, exact event timestamps, mouse paths, typed keys or dialogue choices. Country and visitor hashes are not joined to gameplay totals.

Hidden, unfocused and idle time is excluded where the browser can detect it. Repeat play and separate tabs may contribute again, while interrupted or blocked requests may be lost. Milestones mean observed progress during a playthrough, not a profile or average completion percentage for each person. These limited statistics support internal testing and improvement. The separate campaign totals described below also help us measure promotion; neither is used for personalised advertising. Registered players and testers use the same unlinked collector; there is no account-based filter or per-player report. Test and live environments remain separate.

Our stated basis for any transient personal-data processing needed to receive and aggregate these requests is the same limited legitimate interest. Statistics requests are excluded from the application API access log; separate security logs are not used to reconstruct gameplay. The retained aggregate totals are not linked back to individuals. This notice does not make continued use of the site an agreement to optional tracking.

Campaign totals

Some links we publish include a shared campaign label, such as a particular trailer or press campaign. When a recognised label is present in the page address, it travels with same-tab links between this site and the game. We add page entries, demo starts, active play time, progress and puzzle or Part 1 completions to daily totals for that label. This helps us compare promotion with actual play. The label describes the link, not a person: repeated visits and resumed games can contribute again.

We do not save a campaign identifier in a cookie or browser storage, or attach it to accounts, saves, IP addresses, country estimates or visitor hashes. We accept only a small fixed list of labels, not arbitrary query text, advertising click identifiers or referring-page addresses. We keep aggregate campaign totals indefinitely, without individual event records, and do not send them to advertising networks or use them to target people. The same Stop statistics control and browser privacy signals apply. This feature does not establish a person's journey across visits or devices.

Stopping statistics and earlier records

Use Privacy & play statistics in the game menu to stop future statistics requests from this browser. We also honour browser Global Privacy Control and Do Not Track signals, and a previously saved refusal. Only the choice is remembered locally, not an analytics identifier. You can object to processing based on legitimate interests by contacting us, including with a parent or guardian's help. Stopping statistics does not affect play, accounts or saves. Already combined, unlinked totals cannot be separated into your individual contribution; we do not create new identifying records just to do so.

Earlier versions offered separate consent-based, account/session-linked play statistics. New collection into that system has stopped. Those earlier records are not merged into the new totals and keep their original 90-day retention, export and deletion controls. The menu's removal control can remove earlier records tied to the current account or browser session; account deletion also removes account-linked earlier records. Unidentifiable earlier guest sessions expire normally. Withdrawal does not affect the lawfulness of earlier consented processing.

Creating and using an account

When you register, we use your email address, a protected password hash, an internal account identifier, registration and verification times, account status, and records of your terms acceptance and declaration that you are at least 16. We do not currently collect your country, exact age, date of birth or identity document during registration.

We use this information to provide the account you request, verify that you control the email address, sign you in and help recover access. The legal basis is taking steps at your request and performing our account agreement. The email address and password are necessary for an account; you can browse the public pages without providing them.

We also use short-lived session identifiers, verification or password-reset tokens, and limited records of attempts to prevent misuse. Security measures and restricted administrative records support our legitimate interests in protecting accounts. We do not keep your password in readable form or send it to our email provider.

Protecting account information

We use HTTPS to protect connections to the website, restricted access to private account records and one-way password hashing. Our account service and email delivery provider need to process your email address to verify it and deliver necessary messages. Account records are not currently encrypted with a key that only you hold. We limit access to the people and services needed to operate and protect your account.

Game saves and completion

You can play the demo without an account. Saving and loading progress requires an active, email-verified account. When you choose Save, we store your game state, a save label, the room, completion percentage and save time with your account. There are up to 40 separate manual saves; new saves do not replace earlier ones. When you choose to save Part 1 completion, we store that checkpoint and its time. This is not a continuous record of your play and does not introduce automatic saves.

We use these records to provide the save and resume functions you request under our account agreement. Your account download includes your saves and completion checkpoint. Account deletion removes them from active storage. Saves are private account records, not public profiles or player-held-key encrypted files.

Suggestions, bug reports and interest choices

Submitting a report stores the message, whether it is a bug or suggestion, and its time. It is linked to your account if you are signed in; guests can also submit. Please do not include passwords or unnecessary personal details. We use reports to investigate problems and improve the game, based on our legitimate interest in maintaining the service.

The Buy panel can record your current choice to play, or to play and buy when buying becomes available. This is a non-binding preference, not a purchase, preorder, newsletter subscription or permission to send marketing. We keep one current choice per signed-in account or guest session, with its time, to understand expressed interest in development. Guest-session choices are not counts of unique people. Limited session identifiers and submission receipts prevent duplicate submissions and abuse. These functions use our existing session cookie.

Optional end-of-demo questionnaire

After finishing Part 1, you can choose to answer 3, 5 or 10 questions. Every answer is optional. We store only the answers you choose to send, the question-set size and submission time: game ratings, return and purchase interest, an optional nonbinding amount and currency, and any written feedback. Nothing is purchased or charged. Signed-in submissions are linked to your account; guests do not need an account, and no visitor or gameplay-statistics identifier is attached to their answers. Our session cookie, short-lived submission receipts and separate security rate limits protect the form from duplicates and abuse.

We use this voluntary feedback to improve the game and understand interest in its continuation. Administrators can read answers, see summary ratings and export responses privately. Please do not include personal details. These answers are not public reviews or permission to send email. They are retained for up to 365 days; account-linked answers are included in your account download and removed from active storage when you delete that account. Keep the feedback reference if you wish to contact us about a guest submission.

Account emails

Brevo delivers verification, password-reset and other necessary account messages on our behalf. We provide the recipient address and the message content needed for that email. Brevo processes delivery and operational information to deliver messages and protect its service. Account emails can include a shared illustration hosted on our website. If your mail app loads it, our hosting service receives an ordinary image request; the illustration URL has no account identifier.

Registration is not a newsletter subscription. We do not use account verification emails for marketing. We do not use email engagement information to personalise advertising or build player profiles.

If you contact us

We use your address, message and relevant account details to answer you and resolve the matter. The basis is our legitimate interest in responding to enquiries, our account agreement when the request concerns that agreement, or a legal obligation when you exercise a statutory right. Please send only the details necessary for your request.

The site's Contact form is our preferred way to receive enquiries. It stores your subject, message, reply email address and submission time in a private administrator inbox. If you are signed in, it is linked to your account. You may also email us directly. Administrators can mark messages and reports as read or needing action, and export them for private review; this does not publish them.

Optional release updates

You can separately choose to receive email when new Worlds of Origin material is available or playable. This choice is off by default and is not required for an account or play. We record your choice, when it changed and whether you made it during registration or in Account. Its basis is your consent. Administrators can see the preference; changing it in Account withdraws consent to future release-update messages without affecting necessary account emails. This setting does not sign you up for third-party advertising.

Who can receive information

Access is limited to people who need it to operate the service, answer requests or investigate security problems. Google Cloud provides hosting, backups, logs and infrastructure monitoring. Brevo provides transactional email delivery. Our email service processes correspondence you send to our contact address. These providers receive the information required for their respective services.

We do not sell personal information. We may disclose relevant information to professional advisers or authorities when legally required or necessary to establish, exercise or defend legal claims.

Where information is processed

Our main application server is hosted in Google's Belgium region and its scheduled disk backups use European storage. Providers may also process limited information outside the European Economic Area, for example through support and subprocessors. European storage alone does not mean that every operation stays within Europe.

Where a transfer requires safeguards, we rely on the applicable provider agreement and a lawful transfer mechanism, such as an adequacy decision or the European Commission's standard contractual clauses. You can ask us for information about the safeguards relevant to your data and how to obtain a copy, with confidential information protected where necessary.

How long information is kept

• Verified account records: while your account remains open. You may request closure at any time. Limited information may be retained afterwards where a legal obligation or a specific unresolved claim requires it.
• Manual saves, completion checkpoints and account-linked interest choices: while your account remains open. Account deletion removes these active records.
• Daily visitor hashes and key: the current Europe/Bucharest day only, purged at rollover by scheduled maintenance or the next visit. Only daily totals remain; the temporary set is not copied into application disk backups.
• Daily visitor/country and unlinked gameplay totals: retained indefinitely for historical comparisons. They contain no player or account identifiers. There is no automatic age-based deletion of these totals; daily visitor hashes and personal records keep their separate limits.
• Earlier consent-based gameplay records: up to 90 days from their creation, removed sooner using the earlier-record removal control or account deletion where identifiable. No new records are added to that system.
• In-site bug reports, suggestions and Contact messages: up to 365 days. Account-linked entries are removed sooner if that account is deleted. Guest interest choices expire 365 days after their latest update. Submission receipts expire after seven days. Routine maintenance applies these limits.
• Release-update preference: while your account is open, including your latest choice and its time. You can switch it off in Account. Account deletion removes the active preference record.
• Unverified registrations: deleted by routine cleanup after 30 days without email verification.
• Account sessions: expire after 30 minutes without activity or 12 hours from sign-in, whichever comes first.
• Verification links: valid for up to 24 hours; password-reset links are valid for up to one hour. Replaced or used links stop working.
• Abuse-prevention counters: removed during routine cleanup once the relevant limit period has been expired for 24 hours.
• Completed account-email jobs on our server: removed after seven days. Restricted administrative audit records are kept for 90 days.
• Routine web and system logs: removed through the server and hosting service's log rotation. Entries retained separately for a specific security incident or claim are restricted to that purpose and deleted when the investigation or applicable legal retention period ends.
• Brevo transactional delivery records: used for message delivery, troubleshooting, abuse prevention and sender reputation. Provider retention and deletion controls apply; a request to us can include the relevant delivery records held on our behalf.
• Support correspondence: kept while the enquiry remains open and for any continuing account issue, legal obligation or claim that requires the correspondence. We review resolved enquiries and remove information no longer needed for those purposes.
• Routine backups: rotate over 14 days. Information removed from active systems can remain in a restricted recovery copy until that copy expires. Where a specific incident requires a recovery copy to be retained longer, it is kept only for that purpose and reviewed for deletion.

Requests to erase information also cover relevant service providers. If a backup is restored, deletion requests must be applied again before the restored data returns to ordinary use.

Your choices and rights

You can download your account information or delete your account in the Account panel after confirming your current password. The download includes account-linked saves, completion, reports, Contact messages, release-update preferences, interest choices and any earlier account-linked play statistics. Deletion removes those active records, your account, verification/reset links and queued account messages, and ends all sign-in sessions. The new aggregate statistics have no account link. Guest submissions are not automatically linked to an account created later; contact us about a guest submission you want removed. A message already being sent cannot be recalled. Restricted backups, operational logs and email-provider records follow their separate retention periods; contact us for requests covering those records. You can also ask to access or correct your personal data, erase it, restrict its use, or receive a portable copy where the legal conditions apply. You can object to processing based on legitimate interests because of your particular situation. You may withdraw release-update or earlier statistics consent without affecting earlier lawful processing.

Email mail@objective.srl. We may need proportionate information to confirm your identity. We normally respond within one month and without charge. If a lawful extension or exception applies, we will explain it. You may complain to Romania's ANSPDCP or the relevant supervisory authority in your country, and you may seek a judicial remedy.

Children and automated decisions

We do not offer accounts to people under 16. If you believe an account belongs to somebody below that age or that an age declaration is incorrect, contact us so we can investigate, restrict the account and remove information where appropriate. Privacy protections also apply to account holders who are 16 or 17.

We do not use personal data for decisions based solely on automated processing that have legal or similarly significant effects. Automated rate limits can temporarily restrict repeated requests to protect the service; contact us if you believe you have been blocked incorrectly.

Future features

Purchases are not available. Before introducing features that change how personal data is used, we will update this notice and provide any additional information or choices required. External websites you visit through our links have their own privacy practices.