Privacy Policy

Effective date: October 17, 2026 · Realmstride / Worldweft Studio

1. Who we are and what this covers

Worldweft Studio develops and operates Realmstride and is responsible for the data processing described in this policy. This policy covers our website at playrealmstride.com, the browser game at game.playrealmstride.com, and our private online playtests. Realmstride is an experimental game. Online features are available only in builds and tests where they are enabled.

2. Data we handle

• Early access sign-ups: we collect your email address, optional name, selected platform, page language, referral source (the campaign's utm_source value or the referring website's hostname), consent confirmation and registration time. The form does not create a game account or upload character saves. Each sign-up also receives an individual access code and a random identifier used in its unsubscribe link. If you redeem the code in the game, we link your sign-up to that online account and record when you redeemed it; the list panel used by the team shows that date and the account’s last sign-in. For each list email we send, we record its type, language, the sending and delivery status reported by our email provider (sent, delivered, delayed, bounced or marked as spam) and, if sending fails, the error message. If you unsubscribe, we record the date and, where we capture it, how you unsubscribed (unsubscribe page or your email app’s unsubscribe option).
• Local play: character saves, equipment, progression, settings and explored maps are stored in your browser or device. Choosing Local does not upload that character's progress to our online economy. Visiting the website still creates ordinary network requests to our hosting providers.
• Online accounts: signing in by email uses your email address. Signing in with Google provides a Google account identifier and, when supplied by Google, your email address and basic profile information such as name and profile picture. We do not receive your Google password. We request basic sign-in scopes, not access to Gmail, Drive, contacts or other Google content.
• Online play: we associate an account identifier with characters, saves/checkpoints, progression, inventory, economic actions and their results. The browser also keeps local checkpoints, pending actions and session information needed to reconnect.
• Technical diagnostics: online playtests automatically send bounded summaries of actions, results, failure categories, session/build identifiers, timings, connection status and performance. Server logs may include an account identifier, operation outcomes and database/response measurements. Hosting and authentication providers may process IP addresses, browser/network information and security/access logs. Exporting a diagnostic file is a separate action; it is not automatically sent as an entire file.
• Support: when you contact us, we receive your email address, your message and anything you choose to attach. Please do not send passwords, access tokens or unrelated sensitive information.

3. Why we use this data

With your consent, we use early access sign-up data to manage the invitation list, contact you about access and playtests, plan platform support and understand which campaigns or websites bring sign-ups. Signing up is optional and does not guarantee an invitation or an access date.

We use account data to sign you in and associate online progress with the correct account. Gameplay data lets us save and reconcile characters, process online economic actions and recover from interrupted requests. Diagnostics and security logs help us investigate bugs, measure performance, protect accounts and identify abuse. Support correspondence lets us answer requests and exercise data rights.

We process information as needed to provide the service you request, operate and secure it, comply with legal obligations, and, where required, with your consent. Choosing Google sign-in is optional. Local play does not require a Google account. We do not sell personal data, use Google account data for advertising, or use it to train AI models.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We do not request additional Google access silently.

4. Browser storage and cookies

The game uses browser storage for local characters, settings, checkpoints and authentication sessions. Online services use a session cookie to authenticate requests. Clearing site data or changing devices can remove local saves and sign-in information; exported saves are your own copies. Removing a local character does not delete an online account, server records or every retained backup. This website does not use advertising cookies or third-party advertising trackers.

5. Service providers and sharing

We use providers to deliver the game and account services:

• Vercel hosts the public website and public game.
• Supabase stores early access sign-ups and manages online authentication and associated account/session data.
• Cloudflare provides online gameplay/economy infrastructure, storage, technical logs and support-email forwarding.
• Google provides optional Google sign-in and the mailbox receiving support messages.

Resend sends the early access list emails and reports their delivery status to us. Providers process the information needed for these services. Authorized team members may access data to provide support, investigate failures and maintain security. We may disclose information when required by law or to protect legal rights. Infrastructure and support processing may take place outside your country; we do not promise a particular hosting country.

We do not publish your email address, authentication tokens, private saves or raw diagnostics in a leaderboard. The current website's ranking preview uses fictional entries. Any future public player profile or ranking will identify what is visible before it is enabled.

6. Retention and security

We retain early access sign-ups while needed to manage invitations and playtest updates, unless you request deletion. You can leave the list at any time with the “Unsubscribe” link at the bottom of our list emails, with your email app’s unsubscribe option where it offers one, or by contacting support. After you unsubscribe, your sign-up stays recorded as unsubscribed and your address is kept on a suppression list, with no set end date, so that list emails are not sent to it again; addresses with a permanent delivery failure or that marked our messages as spam are added to that list too. To request removal of your sign-up data, contact support. Any records that must remain for legal obligations or security, and provider backups, are assessed separately.

We retain online account and gameplay information while it is needed to provide your account, resolve failures, protect the service or meet legal obligations. Technical logs, support messages and backups have separate retention needs and provider settings. There is no single automatic deletion period for every category in this prototype. When you request deletion, we assess these categories and explain any information that must remain and why.

We use access controls, authenticated online operations and HTTPS on public services. These measures reduce risk but cannot guarantee that data will never be lost or accessed improperly. Keep backup copies of important local saves.

7. Your choices and data rights

To stop receiving invitation and playtest emails, use the “Unsubscribe” link in any of our list emails. To withdraw your early access consent another way or request deletion of your sign-up, email support@playrealmstride.com from the address you registered.

You can play Local without creating an online account, export local saves, and revoke Realmstride's Google access in your Google Account settings. Revoking Google access does not itself erase records already held by Realmstride or its providers.

Contact support@playrealmstride.com to request confirmation of processing, access, correction, deletion, information about sharing, or other rights available under applicable law, including the Brazilian LGPD. Where applicable, this includes portability, objection, restriction, withdrawal of consent and review of automated decisions. We may need proportionate information to verify that the request concerns your account. Requests are handled through support; the game does not currently offer a complete self-service account-deletion screen.

You may also contact the relevant data-protection authority. In Brazil, information is available from the ANPD.

8. Children

Realmstride and its online playtests are not directed at children. Do not create an online account if you are below the age required to consent to online services in your country. If you believe a child's personal data was provided to us improperly, contact support so we can investigate and take appropriate action.

9. Changes and contact

We will update the date on this page when this policy changes. Material changes to how we use personal data will be communicated before they take effect, with additional consent where required. Questions and privacy requests: support@playrealmstride.com.