Legal

Privacy Policy

Effective 29 October 2026

This Privacy Policy explains how Artisan Gameworks Inc. ("Artisan Gameworks", "we", "us" or "our") collects, uses, shares and protects personal information in connection with WorldPlane: this website, the control panel at app.worldplane.net, Atlas, the WorldPlane API, the worldplane command-line tool and the WorldPlane plugin (together, the "Service"). Artisan Gameworks is a Canadian corporation and handles personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other privacy laws that apply to us.

1. Information we collect

Account information. When you register, we collect your name, email address and password. We store passwords only in hashed form. If you turn on two-factor sign-in, we store the secret your authenticator app uses.

Organisation information. The names of your organisation, projects and environments; the members you invite, with their email addresses and roles; API keys you create; and your settings, budgets and spend limits.

Billing information. Payments are handled by Stripe. Stripe collects your card or other payment details; we do not receive or store full card numbers. We receive and keep your billing name, email and address, any tax ID you provide, your subscription status and your invoices.

Usage and technical information. Records of the servers and zones you run and for how long, which we use for billing; an audit log of actions taken in your organisation; sign-in events; IP addresses; and logs and telemetry produced by the Service and by your running zones, such as server performance and the positions and handoffs of entities in a zone.

Your content. The game server builds and configuration you upload. We use these only to run your game on the Service.

Player information. If your game uses WorldPlane's optional player accounts, or player data otherwise passes through the Service, we process that information on your behalf. See section 5.

Communications. What you send us when you contact us, and our replies.

This website. worldplane.net sets no cookies and uses no analytics or advertising trackers. Like any website, our hosting provider receives your IP address and basic request details when you visit. The site loads its fonts from Google Fonts, so Google also receives your IP address when you view it.

2. How we use information

• to provide, operate and secure the Service, including signing you in, running your zones and showing them in Atlas;
• to meter usage, bill you and collect payment;
• to send you service email, such as invitations, password resets, security notices, billing notices and notice of changes to the Service or our terms;
• to respond to your requests and provide support;
• to detect, investigate and prevent fraud, abuse and security incidents;
• to understand how the Service performs and improve it; and
• to meet our legal obligations and enforce our terms.

We do not sell personal information, and we do not use it for advertising.

3. Cookies

The control panel uses a session cookie to keep you signed in. It is necessary for the panel to work and is not used for tracking. This website uses no cookies.

4. Service providers and sharing

We share personal information only with service providers that help us run the Service, under contracts that limit their use of it to providing their services to us:

• Amazon Web Services, which hosts the Service and your zones and sends our email;
• Cloudflare, which provides our network, DNS, website hosting and email forwarding;
• Stripe, which processes payments and manages subscriptions and invoices; and
• Google, which serves the fonts used on this website.

We may also disclose information when required by law or legal process, to protect the rights, property or safety of our customers, players, the public or Artisan Gameworks, or as part of a merger, acquisition or sale of our business, in which case the information will remain subject to this policy.

5. Player information we process for studios

When a studio uses the Service, information about that studio's players, such as player account details, sign-in tokens and in-game activity in a zone, is processed by us on the studio's behalf and according to its instructions. The studio is responsible for that information and for its own privacy notice. Players who have questions about their information should contact the studio that runs their game. We will help studios respond to requests from their players.

6. Where information is stored

The Service is hosted in the United States, in Amazon Web Services' US East (Ohio) region, and our service providers may process information in other countries. When information is stored or processed outside Canada, it is subject to the laws of that country, and authorities there may be able to access it under those laws. We use contracts and other safeguards to protect information that is transferred.

7. How long we keep information

• Account and organisation information is kept while your account is active.
• When you close your account, we delete your account information and your content within 30 days, except as noted below.
• Backups of the Service's records are kept for up to 30 days, after which they expire.
• Billing and tax records are kept for as long as the law requires.
• Logs and telemetry are kept only as long as needed to operate and secure the Service.

8. Security

We protect personal information with safeguards appropriate to its sensitivity, including encryption in transit, hashed passwords, limits on repeated failed sign-ins, optional two-factor sign-in, role-based access within organisations, and an audit log of administrative actions. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the relevant authorities of a breach as the law requires.

9. Your rights

You may ask to access the personal information we hold about you, to correct it, or to have it deleted, and you may withdraw your consent to uses of it that are not necessary to provide the Service. Depending on where you live, you may have additional rights, such as to object to or restrict certain processing or to receive a copy of your information in a portable format. To make a request, contact us at info@artisangameworks.com. We will respond within the time the law requires and may need to verify your identity first.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada or to the privacy regulator where you live.

10. Children

The Service is intended for businesses and professional developers. It is not directed to children, and we do not knowingly collect personal information from anyone under 16 as a customer of the Service.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here with its effective date and, for material changes, notify you by email or in the control panel before they take effect.

Contact

For questions about this policy or our handling of personal information, contact our privacy officer:

Artisan Gameworks Inc.
info@artisangameworks.com
artisangameworks.com