Privacy

Commonwild Privacy Policy

Commonwild is made and sold by Meredosia Tech LLC. Effective 16 October 2026. Questions: [email protected].

Who we are

In this policy, "Commonwild" means Commonwild, the game made and sold by Meredosia Tech LLC ("we"). This policy covers the game, the guest world, hosted worlds, the Commonwild pages of the Meredosia website, the checkout and the creator marketplace. Contact: [email protected].

What we collect and why

Children

Commonwild is for ages 10 and up. Children under 13 do not create accounts; a parent or guardian creates a child profile inside their own family account and gives consent first. From a child we collect only a generated username, an avatar made from game parts, game progress, worlds and builds. We never collect a child's real name, email, phone, address, photo, voice or precise location. Children have no open chat by default and nothing a child makes is sold. Parents can review or delete their child's information and revoke consent at any time in the family account or by writing to [email protected]; we complete deletion within 30 days. We do not disclose children's information to third parties except the service providers listed below that run the game for us.

The guest world

You can play a guest world from a link with no account. We collect no personal information there and use no advertising or analytics identifiers; a temporary session identifier keeps the game running and secure and is deleted when the session ends.

What we never do

We show no ads. We do not sell or share personal information for advertising. We use no third-party analytics or advertising trackers. We do not use your worlds or chats to train AI models.

Who we share with

Only service providers that help us run Commonwild, under contracts that limit them to that job: Stripe (payments, tax calculation, creator payouts), Cloudflare (network delivery and protection), Resend (sending email). We also disclose information when the law requires it or to protect a player from harm.

Where data lives and how long we keep it

Game services and records run on Meredosia's own servers in the United States, encrypted at rest. We keep account and order records for as long as your account is open and then for 7 years where tax law requires it. Game data is kept while your account is active and deleted 12 months after your last sign-in unless you ask us to keep it. A child's profile data is deleted 12 months after the last sign-in or at once when a parent asks. Waitlist emails are deleted when you unsubscribe.

Security

We encrypt stored data (AES-256-GCM), limit access to people who need it, review risks every year, and tell affected users (and parents, for children) within 72 hours of discovering a breach that affects them.

Your rights

Anyone may ask to see, correct, download or delete their information, or to stop marketing email, by writing to [email protected]. If you live in the EU, the UK, California or another place with privacy laws, you also have the rights those laws give you, including to complain to your data protection authority. We do not discriminate against anyone for using these rights. Our legal bases in the EU and UK are the contract with you, our legitimate interest in running a safe service, consent (for the newsletter and for children's profiles) and legal obligations.

Changes

We post any change here with a new effective date and email account holders before a material change takes effect. For children, we ask parents for new consent before any change in what we collect.