Legal
This Privacy Policy describes how Crowded Kingdom Studios, Inc. ("CK," "we," "us," or "our") handles personal information in connection with Overworld and your Overworld account (the "Game"). It does not cover: crowdedkingdoms.com (governed by the Website Privacy Policy); data handled through the CK Spatial Fabric API (governed by Section 6 of the CK Spatial Fabric API Terms of Service); or the CK SDK (governed by the SDK Developer Terms). Your use of the Game is also governed by the Game Terms of Service ("Game ToS"). For personal information handled in connection with the Game, CK acts as the controller.
2.1 Account Information. When you create an account, we collect your email address, your username or display name, authentication credentials (stored in hashed form), and your confirmation that you meet the age requirement in Game ToS Section 1.2.
2.2 Gameplay and Technical Data. We collect data generated as you play, including game progress, in-game actions, session and matchmaking data, and technical data such as IP address, device type, operating system, and game client version.
2.3 Communications and User-Generated Content. We collect chat messages and other in-Game communications, and content you create within the Game — such as builds, custom items (where supported), and screenshots ("Your Content," as described in Game ToS Section 5).
2.4 Safety and Moderation Data. We collect reports you submit, reports that concern you, and records of moderation actions relating to your account.
2.5 Purchases and Your Wallet. If you buy virtual currency or items, or fund your player wallet (Game ToS Section 6.8), our payment processor handles your payment details, including any card you save for auto-recharge. CK receives transaction records — such as what was purchased or topped up, the amount, the timestamp, and the compute charges drawn from your wallet — but does not receive or store full payment card numbers.
2.6 Support. If you contact us for support, we receive the information you provide and the contents of your message.
2.7 Modifications You Create or Run. Where the Game supports player modifications ("Mods," Game ToS Section 5.6), we collect the Mod itself, records of who created it and who ran it, and technical records of how it behaved — including resource use, errors, and any security or abuse signals it generates.
2.8 Player-to-Player Transactions. Where you buy, sell, trade, or charge other players under Game ToS Section 4.4, we collect records of the transaction — the items or access involved, the accounts on each side, and the time — together with any dispute, chargeback, fraud, or account-compromise signals arising from it. CK is not a party to those transactions; we hold these records to operate the Game, enforce our terms, and prevent fraud.
2.9 Mods Can See Nearby Players. A client-side Mod you choose to trust runs in your browser and can read the usernames, identifiers, and positions of players on the same grid. Mods other players trust can read yours in the same way when you are on their grid.
2.10 AI Tools. If you use the AI agent in Crowdy Studio, the code, files, screenshots, and game observations it works with are sent through CK's model endpoint to our AI model provider to generate a response. We send these requests with zero-data-retention and no-data-collection settings, and do not route them to providers that cannot honour those settings.
2.11 Recorded Inputs (Replay Logging). A game on the Crowded Kingdoms platform, including Overworld, can turn on replay logging. While it is on, the inputs your client sends to that game are recorded, with the time each arrived and the session it belongs to: your movement and actions, and any chat, voice, or video the game carries. You can read the inputs you sent while you can sign in to that game; if your access to it is suspended or revoked, or you have not accepted the terms we require to sign in, you cannot read them yourself until that is resolved, but you can ask its developer for them (for Overworld, us, at hello@crowdedkingdoms.com). The game's developer can read every input sent to that game. Recording is best-effort, so a recording can have gaps. For Overworld, CK is that developer and this Policy governs the recording. For any other game, the recording is made for that game's developer, whose own privacy notice governs it, and CK handles it for the developer under Section 6 of the CK Spatial Fabric API Terms of Service.
We use the information above to: (a) operate and provide the Game, including accounts, matchmaking, and multiplayer features; (b) enforce the Game ToS and Code of Conduct, including moderation, anti-cheat, and player safety; (c) process purchases; (d) provide support; (e) analyze and improve the Game; (f) operate and secure player modifications and player-to-player transactions, and investigate fraud and abuse arising from them; and (g) comply with applicable legal obligations.
Where the GDPR, UK GDPR, or a comparable law applies to you, our lawful bases are: performance of our contract with you for (a), (c), and (d); our legitimate interests in a safe, secure, working game for (b), (e), and (f); and legal obligation for (g). Where we rely on legitimate interests you may object, and where we ever rely on consent you may withdraw it at any time, in each case at hello@crowdedkingdoms.com.
We also produce de-identified and aggregated data from Game activity — such as population, performance, economy, and world-activity statistics that do not identify, and cannot reasonably be linked to, you or any other individual. We may use that data for any business purpose, including research, benchmarking, and publication, as described in Section 4, and as reflected in Game ToS Section 5.5. We take reasonable measures to ensure that data cannot be associated with you or your household, we maintain and use it in de-identified form, and we do not attempt to re-identify it.
We share information with service providers acting on our behalf — including hosting, payment processing, moderation and anti-cheat, analytics, infrastructure and performance monitoring, AI model providers for Crowdy Studio's agent, and communications providers. A current list is at crowdedkingdoms.com/subprocessors once published, and on request until then. We share information with other players to the extent described in Section 5. We may disclose information where required by law, to enforce our terms, or to protect the rights, safety, and security of CK, our users, or the public, and in connection with a merger, acquisition, or sale of assets. We may disclose the de-identified and aggregated data described in Section 3 to third parties, including in published research and reports; where we disclose it to an identified recipient rather than publishing it, we contractually require that recipient to maintain it in de-identified form and not to attempt re-identification. We do not sell or share personal information.
Overworld is a multiplayer game. Certain information — including your username, presence, in-Game activity, and any chat or Content you share in multiplayer or community features — is visible to other players. Do not share information in these features that you wish to keep private.
CK may monitor, review, and moderate chat, communications, and Content, and may act on player reports, as described in Game ToS Section 4. We may retain communications, Content, and moderation records as reasonably necessary to enforce our terms, maintain player safety, and comply with applicable law.
We retain personal information for as long as reasonably necessary to provide the Game and maintain your account, and thereafter as needed for the purposes described in this Policy or as required by applicable law. In setting retention periods we consider how long we need the information to provide the Game, whether it is needed to enforce our terms or investigate abuse, whether it relates to a payment or transaction record we must keep for tax or accounting purposes, whether a dispute or legal claim is live or reasonably anticipated, and any period the law specifies. Moderation records, transaction records, and security logs are generally kept longer than ordinary gameplay data for those reasons. Recorded inputs (Section 2.11) are kept for the input-log retention period published on CK's Rate Card at crowdedkingdoms.com/pricing, currently 7 days, and are then deleted in the ordinary course, within about an hour of the period's end. The index that lists them (your user ID, when each recorded session ran, and how many inputs of which kinds it held) is deleted about two days after that, and copies of the index in our database backups expire within about two months. When a game's developer looks up or reads another player's recorded inputs, we keep a record of who did so and when, for as long as the game exists on our platform. When you close your account (Game ToS Section 3.3), we delete or de-identify your personal information within a reasonable period, except where continued retention is required for legal, safety, dispute-resolution, or fraud-prevention purposes.
We use commercially reasonable measures to protect personal information handled through the Game. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
CK is a U.S. company and processes Game data on U.S.-based infrastructure. If you are located outside the United States, your information will be transferred to and processed in the United States.
Depending on your location, you may have rights to access, correct, delete, port, or object to the processing of your personal information, including rights under frameworks such as the GDPR and CCPA. To exercise these rights, contact us at hello@crowdedkingdoms.com; we will respond within the period the applicable law allows. While they are kept, you can also read the inputs you sent to a game with replay logging on (Section 2.11) yourself, through the Crowded Kingdoms API with your account, while you can sign in to that game; otherwise, ask as Section 2.11 says. We will not discriminate against you for exercising any of these rights. If you are in the EEA or the UK and believe we have not handled your personal information properly, you may complain to your national data protection authority or, in the UK, to the Information Commissioner's Office. Where we are required to designate an EU or UK representative, their details will be published in this Policy.
Overworld is intended for adults 18 and older (Game ToS Section 1.2). The Game is not directed to, and CK does not knowingly collect personal information from, anyone under 18. If we learn we have collected personal information from someone under 18, we will delete it.
We may update this Policy from time to time. Changes take effect when posted and are reflected by an updated Effective Date at the top of this Policy. We may also notify you in-Game or by email.
Crowded Kingdom Studios, Inc.
2410 Mesa Glen Dr, Arlington, TX 76001
hello@crowdedkingdoms.com
© 2026 Crowded Kingdom Studios, Inc. All rights reserved.