OPENWORLD
Privacy policy
This is a courtesy translation. The French version is the only legally binding one and prevails in case of difference.
Version of 15 October 2026.
The essentials
- We collect what is needed for your account, online play and security, plus usage statistics that help us improve the game.
- No advertising on the website, no selling of data. The statistics stay with us, on our server in France: no third party receives them.
- Openworld starts with your computer, without a window, to update itself, and then sends a small signal (installation, versions, system). You can turn this off in the launcher: Settings > “Start Openworld with my computer”.
- Only with your consent, the launcher and the game send usage statistics: your computer, your games, your settings, performance, and what you write in the public chat (never your private messages). The launcher asks you once; you can change your mind whenever you like: Settings > “Send usage statistics”.
- A bug report is sent only if you send it yourself.
- A dedicated server sends us statistics about itself, never the
identity of its players or their chat; its operator turns them off
with
--no-telemetry. - The website counts its visits with Google Analytics, without cookies. Its tracking cookies and OpenAI's measurement pixel, only if you accept them, with a single yes; you can change your mind whenever you like (“Cookies” link at the bottom of every page).
- We run ads on ChatGPT. To measure what they bring us (visits, downloads), the website loads OpenAI's advertising measurement pixel, only if you accept the cookies: before your yes, nothing is loaded and nothing is sent to OpenAI. The website itself still shows no ads.
- Without asking you anything, the website, the launcher and the game make an anonymous measurement: the website's page views and the steps up to your first game, under an identifier drawn at random, never linked to your account, your player, your IP address or the usage statistics. Only the usage statistics, which you accept, contain information that is not anonymous.
- If you get your license by subscribing on Patreon, Patreon handles the payment and passes us what we need to send you your code and perks; we never see your card. The name you give to a star in the game's sky is visible to every player.
- Your account, the game and the statistics are hosted in France.
- You can see, correct or delete your data, or object to its use: write to contact@pascard.com.
- Under 15: you play with a player in a parent's account.
1. Who is responsible
The data controller is Tom Pascard EI, entrepreneur individuel (a French sole trader), 95 rue Alexandre Dujardin, 02810 Torcy-en-Valois, France (“Pascard”, “we”). For any question about your data: contact@pascard.com. This policy applies to the website, the “Openworld” update program, the launcher, the game, the server program, Pascard's game servers, the account service and the statistics and bug report service.
2. What we collect
Your account (in the launcher)
- first name, last name, date of birth, email address, country, language;
- your password, stored only in an irreversible encrypted form (a hash): nobody, not even us, can read it;
- optional: phone number, postal address;
- where your account was created (on the website or in the launcher);
- how you heard about Openworld (your answer to the sign-up question, and your own words if you answer “Other”);
- the date and the version of the terms you accepted; the dates of creation, of email verification and of last login (recorded at most once a day); the status of the account and, in the event of a sanction, its reason;
- where applicable, an internal note from our admins about your account or one of your players (follow-up of a request, handing over of a code, report), never published.
Your players
For each player: its username, its identifier, its skin (the file and two images, the head and the body), its status, what paid for it (access code or purchase) and the date of its last login.
Your connected devices
When you log in to the launcher: the name of the device (the one your system gives it, which may contain your first name), a device identifier created by the launcher, the operating system, the launcher version, your IP address, the technical signature of the software (user agent) and the dates. This lets us spot suspicious access and log a device out at your request.
Access codes
The code, its batch or its event, who handed it over, to whom (the recipient's name and email address), an internal note about the handover, the date and the IP address of its use.
The security log
One line per event: sign-up, login, code used, skin uploaded, game joined (which server, when), with the identifiers involved and the IP address.
In the game
A game server keeps, under your player's identifier, your position, your inventory, your equipment, your waypoints and the builds in the world. Chat messages go through the server to reach the other players; the technical log of a Pascard game server also notes the public chat lines and the commands, to trace the origin of a problem. If you have accepted usage statistics, what you write in the public chat is also recorded by the statistics service (see below).
Updates, when your computer starts
The “Openworld” program you download installs and updates the launcher. It registers itself to start on its own, without a window, when your session opens (on macOS, also once a day). It then checks whether there is an update of the launcher and installs it (every update is signed, and verified before it is installed), then starts the launcher, also without a window: the launcher sends the minimal ping described below and closes. To stop this: in the launcher, Settings > “Start Openworld with my computer”.
The minimal ping is sent every time the launcher starts (when your session opens, when you open it yourself, after an update), even if you have turned statistics off. It contains only:
- the installation identifier: a number drawn at random on your computer, used only by the statistics service (it is not the device identifier sent when you log in);
- the launcher version and the installed versions of the game;
- your operating system and its architecture (for example “macOS, Apple silicon” or “Windows 64-bit”);
- what triggered it (your session opening, you opening the launcher, an update) and its time;
- the state of your two settings (start with the computer, statistics).
It contains neither your account, nor your players, nor the description of your computer, and we do not link it to your account. We use it to keep the launcher up to date and secure (knowing which versions are still in use and on which systems, spotting an update that fails) and to count active installations. Since it is sent when your session opens, it also tells us, roughly, when your session opens. We consider it necessary for the update service you use: that is why it does not depend on your answer about statistics. For it to stop entirely, uninstall Openworld (see the terms of use).
Usage statistics (only if you accept them)
The launcher asks you once whether you agree to send usage statistics (“Yes, send statistics” or “No thanks”). Before your yes, none of what follows is sent: only the minimal ping and the anonymous measurement. If you accept, and as long as you do not withdraw your consent, the launcher and the game also send us:
- your computer: operating system and version, processor and number of cores, memory, graphics card and its driver, video memory, screens and their resolution, system language, time zone, free disk space;
- the Openworld accounts signed in on the launcher and their players: their identifiers (proven by a ticket signed by our account service) and when each was last used. If several people sign in on the same launcher, their accounts are thus linked to the same computer;
- the launcher: its starts and stops, its updates, with their times;
- your games: each launch of the game, its duration, how it ended (normally or a crash), the game version and language, the multiplayer or local network servers you join (their address), the name and seed of your single-player worlds, the game mode, your settings, how many times you use each key or action, performance (frames per second, frame times, loaded terrain, memory), the resource packs in use;
- the lines you send in the public chat and the commands you
type, on any server. Never your private messages: of a
private-message command (
/msg,/tell,/w), only its name is sent, without recipient or message.
Each sending also carries the installation identifier, the version, your operating system, the interface language and a number drawn at random each time the program starts. Events are sent in batches, about once a minute; without a connection, they wait on your computer (30 days at most).
We use these statistics to improve the game, its performance and its compatibility with players' computers, to understand how it is played, to prevent abuse and, for the chat, to protect players and to moderate.
To withdraw your consent, at any time: in the launcher, Settings > “Send usage statistics”. None of the above is sent any more, what was waiting on your computer is deleted, and at the next ping your accounts are unlinked from the installation; only the minimal ping and the anonymous measurement remain. Your choice applies to the launcher and the game on this computer, so to every account that signs in on it: if you share the computer, decide together. Withdrawing your consent does not affect what was sent before: what we have already received is kept for the periods given below, unless you ask us to erase it (see your rights).
The anonymous measurement: the website, and your path to your first game
Whatever your answer about statistics, we measure anonymously how the website's visitors become players, from two sources:
- The website. Each page viewed sends our statistics service:
the page and its language, the type of device (phone, tablet,
computer) and its operating system, the window size, the name of the
site you came from, how far you scroll down the page, how long you
stay, the parts of the page you saw, your clicks on its buttons
(download, copy or share the link, installation guide, questions…) and
the campaign parameters of the address (the link in our Instagram,
TikTok or YouTube bio, or in an ad, for example). For this the page
draws a number at random, which lives only as long as the page:
nothing is stored on or read from your device, no cookie, no local
storage (except when you start a purchase or a gift on the website, see
below). Our short links (
play-openworld.com/l/…) count each click the same way: the link, the time, the type of device, the operating system, the browser, the app it comes from. If your browser sends the “Global Privacy Control” or “Do Not Track” signal, the pages send nothing (only a click on a short link is still counted). - The launcher and the game: your path to your first game.
The launcher draws at random an identifier used only for this
measurement, and keeps it on your computer. It is never sent with the
installation identifier, your account, your player or your email
address, and it is never linked to the usage statistics. Only these go
with it: the time and number of each step (launcher opened; sign-up
form shown, started, sent; account created; email confirmed; username
chosen; player created; license activated; click to Patreon; game
installed, game launched; world entered; play time thresholds), the
codes of the errors met, your answer to “How did you hear about
Openworld?”, your operating system, the version and language of the
launcher and the game, and the page of the website you downloaded the
program from: your browser keeps with the downloaded file the address
it came from, which carries the number of that page view (the
ow_dparameter), and the launcher reads it.
None of these measurements keeps your IP address. For the website, it is only used, with your browser, to compute a visitor key from a salt drawn at random every day and erased after 2 days; after that, nobody can link this key to you any more. These measurements are used to measure the website's audience and the path to the first game (what helps people get to the game, where they stop), and to compare versions of the website's pages. They are kept 13 months, on our server in France, like the other statistics.
These analyses are anonymised: nothing in these measurements says who you are, and we never link them to your account, your player, your IP address or the usage statistics. Only the usage statistics, which you accept in the launcher, contain information that is not anonymous (your account, your players, your computer…).
Bug reports
When you report a bug from the game (pause menu or the
/report command), and only then, whether you have accepted
statistics or not, the game sends us:
- the title, the description and the category you write;
- the in-game screenshots you choose to attach. They may show the username, skin or messages of other players, if these were on screen;
- the state of the game at that moment: your username, your position, the world, the server, your settings, performance;
- the description of your computer (as above);
- the end of the game's technical log, which may contain file paths of your computer (and so your user name);
- the last events of your session noted by the statistics (chat lines, commands…), if there are any.
The report is linked to your account and your player; the game shows you its number. We use it to understand and fix the problem.
Game server statistics
A dedicated server (Openworld's server program, whether it is
run by Pascard or by someone else) sends us statistics about itself: its
version, how long it has been running, the number of players
(online, peak, arrivals and departures), the performance of its game
loop, its memory, its network throughput, the operating system,
processor and memory of the machine, its name, its world, its port and
its settings, and a server identifier drawn at random. Never a player's
identity or a chat line: only the number of chat lines. These statistics
are on by default; a notice announces it in the server console at every
start, and the operator turns them off with the
--no-telemetry option or the OW_NO_TELEMETRY=1
environment variable. We use them to keep the server software compatible
and performant.
They concern the server, not its players. But if you run a server on your own computer, they also concern you (your machine, when your server runs, the name you give it): they are then personal data. We process them on the basis of our legitimate interest; you object to it at any time with the option above, and we keep them for 25 months after the server was last seen (its events: 13 months).
The server the game starts for a single-player or local network game sends the same statistics, but only if you have accepted usage statistics. Finally, the games of players who have accepted statistics tell us which servers they join (their address), as described above.
Where the statistics and reports go
To us only: to openworld-data, our own service, on our server at OVH
in France (core.openworld.pascard.com/data), in a database we
run ourselves. No third-party analytics tool, no advertising, no selling,
no advertising profile; we share them with no one (except the
authorities, on a request based on the law). The statistics service
never records your IP address as such: it only keeps, for a few hours, a
fingerprint scrambled with a secret, to limit abuse (too many sendings
from the same address). As for any connection to our servers, the log of
the web server that receives it notes the IP address (see
how long).
Purchases (once sales open)
The amount, the date, the payment reference and the billing country or address. Your card details go directly to Stripe: Pascard never sees them.
Your Patreon subscription and licenses gifted on Instagram
During the alpha, you can get your Openworld license code by subscribing to the game's Patreon page (patreon.com/cw/play_openworld/membership), from €5 a month. Patreon (Patreon, Inc., San Francisco, USA) handles the payment, billing, VAT and your Patreon account, under its own terms and its own privacy policy: Pascard never sees your card details. To deliver your code and your perks, we receive from Patreon, and from the messages you send on Patreon:
- your Patreon display name;
- the email address Patreon shares with creators;
- your tier and the status of your subscription;
- the dates and amounts of your payments (never card data);
- the Openworld username you give us, so the perks are attached to the right player.
Naming a star. Among the perks, you can name a star or another object in the game's sky. The name you choose is shown publicly to every player in the game. You choose it: do not use your real full name unless you want to. You can ask at any time for it to be removed or changed (it is then replaced): write to us.
The global network. The number of Global network (relay) slots depends on your tier: the tier is stored on your player (as a tag) only to set those limits.
Instagram. We may also gift a license on Instagram (@play_openworld) to people who message the owner. Their messages and handle are used to decide to gift a code and to send it; Instagram is run by Meta Platforms Ireland, under its own policy. We do not copy these messages out of Instagram: we keep only the code sent and the Openworld username.
When you write to us
Your email address and the content of your message (question, report, request about your data).
The website
For its security, the server records for each request the IP address, the page or file requested, the date and the browser. The website reads your device's operating system, without recording it, to offer you the right download. Its fonts and images are hosted by us.
Audience measurement (Google Analytics). Without asking you anything, each page viewed sends Google the address of the page, the address you came from, your browser and your operating system, your screen size, your language and an approximate region, derived from your IP address (Google Analytics does not keep the IP address). Nothing is stored on your device: your visits are not linked to one another. If your browser sends the “Global Privacy Control” or “Do Not Track” signal, nothing is measured: your browser still downloads the Google Analytics script from Google (which then sees your IP address and your browser, not the page visited), but no visit is sent to it.
Only with your consent, Google Analytics also sets two cookies that recognize your browser from one visit to the next: they tell whether you come back, how long you stay, which pages you go through and whether you download the game (see Cookies).
The website also has its own audience measurement, which is anonymous: see the anonymous measurement.
Measurement of our ads on ChatGPT (OpenAI
pixel). We run ads on ChatGPT. To find out whether these ads bring
visitors and downloads, the website can load OpenAI's advertising
measurement pixel (its “oaiq” web SDK, loaded from
bzrcdn.openai.com and sending to
bzr.openai.com). Only with your consent: it is the
same pop-up, and the same yes, as for the Google Analytics cookies (see
Cookies). Before your yes, the SDK is not loaded at
all: nothing reaches OpenAI and nothing is stored on your device for it.
If you accept, it sends OpenAI:
- the ad click identifier, added to the link by ChatGPT (when you arrive from one of our ads);
- a randomly drawn browser identifier;
- the pages you view (their address, without the query parameters) and the page you came from;
- two events: “page viewed” and “download link clicked” (counted as a lead);
- what any web request carries: your IP address, your browser and your system.
No name, no email address, no account data is sent. We use this to measure the results of our campaigns on ChatGPT (linking them to the ad you come from, and counting them); it is not used to show you ads on the website, which shows none, and we do not sell any data or build an advertising profile ourselves. OpenAI receives this data and acts on its own account for this measurement (see who has access and outside the European Union). On our side, we keep nothing of what is sent to it. The pixel also sets three cookies and one local storage entry on your device (see Cookies).
What we do not collect
No sensitive data, no geolocation (beyond what an IP address or a time zone reveals), no contacts, no advertising identifier from your system (apart from what OpenAI's pixel sends to OpenAI if you accept it, described just above), none of your personal files, none of your private messages. No screenshot is sent unless you attach it yourself to a bug report.
3. Why, and on what legal basis
| Why | What data | Legal basis (Art. 6 of the GDPR, “RGPD” in French) |
|---|---|---|
| Create and manage your account and your players, log you in, let you play online, display your skin | account, players, devices | performance of the contract (terms of use) |
| Send you the service's emails: verification, password, access code, sanction, inactive account, deletion | email address, first name | performance of the contract |
| Check that the account holder is 15 or older | date of birth | performance of the contract and legal obligation (protection of minors) |
| Protect the service and the players: limit abuse, detect fraud and cheating, trace the origin of a problem | security log, devices, IP addresses | legitimate interest (security) and legal obligation to retain connection data |
| Keep the launcher up to date and secure, count active installations (updates when the computer starts, minimal ping) | installation identifier, versions, operating system, trigger and time, state of the settings | legitimate interest (reliable and secure updates, knowing the number of active installations) |
| Usage statistics: improve the game, its performance and its compatibility, understand how it is played, prevent abuse, protect players and moderate the chat | computer, accounts and players of the launcher, starts, games, servers and worlds, settings, keys, performance, resource packs, public chat and commands | your consent, asked for by the launcher, which you can withdraw whenever you like in its settings |
| Game server statistics: keep the server software compatible and performant | version, uptime, number of players and of chat lines, performance, memory, network throughput, the server's machine, name, world, port, settings, server identifier | dedicated server: legitimate interest (its operator objects with --no-telemetry); server of a single-player or local network game: your consent to usage statistics |
| Receive and handle the bug reports you send, fix the game | the report and its screenshots, the state of the game, your computer, the end of the game's log, the last events, account and player | legitimate interest (fixing the problems reported); you decide whether to send a report |
| Moderate, handle reports, impose sanctions | players, content, messages received, admins' internal notes, recorded chat lines and commands (if you have accepted statistics), bug reports | legal obligation (LCEN, the French law on confidence in the digital economy; DSA, the EU Digital Services Act) and legitimate interest |
| Keep track of how access codes are handed out (which event, who handed them over) | access codes | legitimate interest |
| Internal statistics (number of players, countries, regions, how they heard about Openworld), never published in a way that names anyone | country, address, dates, how you heard about Openworld | legitimate interest |
| Measure the website's audience without cookies: pages viewed, where visitors come from, type of device | page, referring address, browser, operating system, screen, language, approximate region | legitimate interest (knowing what interests the website's visitors) |
| Anonymous measurement: the website's audience, the path to the first game in the launcher and the game, comparing versions of the website's pages | website: page, language, type of device, operating system, browser, window size, referring site, scrolling, duration, parts seen, clicks on the buttons and on the short links, campaign parameters, visitor key derived from a salt erased after 2 days; launcher and game: identifier drawn at random, time and number of each step, error codes, how you heard about Openworld, operating system, versions, language, page of the website the download came from | legitimate interest (understanding what helps visitors become players, without identifying them) |
| Follow the visits of the same browser (returns, duration, path, downloads) with the Google Analytics cookies | random identifier of the cookies, pages viewed, clicks | your consent, which you can withdraw whenever you like |
| Measure the results of our ads on ChatGPT (the visits and downloads they bring) with OpenAI's measurement pixel | ad click identifier, randomly drawn browser identifier, pages viewed (address without query parameters) and referring page, “page viewed” and “download link clicked” events, IP address, browser and system; cookies __oppref, __obref, __oaiq_consent and the oaiq_consent local storage entry | your consent (Art. 6(1)(a) of the GDPR and, for access to your device, Art. 82 of the French data protection act, the loi Informatique et Libertés), which you can withdraw whenever you like |
| Sell, invoice, keep the accounts | purchases, identity, billing address | performance of the contract and legal obligation (accounting) |
| Subscribe through Patreon: deliver your license code and your perks (tier, star name, Global network slots), attached to your player | Patreon display name, email address shared by Patreon, tier, subscription status, payment dates and amounts (no card data), Openworld username | performance of the contract (Art. 6(1)(b)) |
| Keep the billing and accounting records of subscriptions | payment dates and amounts, subscriber's identity | legal obligation (accounting, 10 years) |
| Decide to gift a license on Instagram and send the code | Instagram messages, Instagram handle, Openworld username | legitimate interest (answering people who write to us) and, once the code is handed over, performance of the contract |
| Answer your messages and your requests about your data | email address, message | legitimate interest and legal obligation (GDPR) |
Three processing operations rely on your consent: the website's audience measurement cookies, OpenAI's pixel measuring our ads on ChatGPT (one yes, in the same pop-up, covers these two) and the usage statistics of the launcher and the game (including those of the server it starts for a single-player or local network game). Refusing them changes nothing about the website or the game, and you withdraw your consent as easily as you gave it, at any time; withdrawal does not affect what was done before. The statistics stay with us, for a short time (90 days for the chat), with no advertising or selling, and only our administrators see them. No newsletter, no advertising shown on the website. No fully automated decision affects you significantly: sanctions are decided by a person.
4. Who has access
- Pascard: Tom Pascard and the administrators he appoints, each according to their role, in an administration tool with restricted access in which every action is logged. For the statistics and bug reports, they see there in particular, for an account or a player: its last launcher start, its last game, the computers it was seen on, its game sessions, its recorded chat lines and its reports.
- Our service providers, who process the data only on our
behalf, under contract:
- OVH SAS (Roubaix, France): server, databases, skins, downloads, statistics and bug reports — data hosted in France. The statistics and bug reports go to no other service provider;
- Scaleway SAS (Paris, France): email sending relay (the recipient's address and the content of the email);
- Google Ireland Limited (Dublin, Ireland): audience measurement of the website (Google Analytics). Google does not use it for advertising: no advertising cookies, Google signals and ad personalization turned off, no sharing of the data with Google's other services;
- Stripe Payments Europe, Ltd. (Ireland): payments, once sales open.
- Patreon, Inc. (USA), for your subscription: payment, billing, VAT and Patreon account, under its own policy (privacy.patreon.com). It passes us the data described above.
- Meta Platforms Ireland Limited (Instagram), for the messages exchanged on Instagram about a gifted license, under its own policy.
- OpenAI (USA), only if you accept the cookies, for the measurement of our ads on ChatGPT: its pixel sends it the data described above (see the measurement of our ads). OpenAI acts on its own account for this measurement, under its own policy (openai.com/policies/privacy-policy).
- Other players see your username, your skin, what your player does in the world and your chat messages, as well as the name you gave to a star or another object in the game's sky.
- A game server run by someone else receives, when you join it, your username, your player's identifier, your skin and your IP address. Its operator is responsible for it (see the terms of use).
- YouTube (Google), only if you click a video in a release note: the video then loads from Google, under its own rules.
- The authorities, on a request based on the law.
Nobody else receives your data. It is never sold or rented, and we never use it to show you advertising. The only exception: if you accept the cookies, OpenAI's measurement pixel receives the data described above, to measure our ads on ChatGPT.
5. Outside the European Union
Our servers are in France, statistics and bug reports included. Only Stripe (for a payment), Patreon (for a subscription), OpenAI (its pixel measuring our ads, if you accept it) and Google (audience measurement of the website, or a YouTube video you start) may transfer data to the United States, under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. For Patreon, the transfer relies on the safeguards Patreon provides (Data Privacy Framework or standard contractual clauses): see its privacy policy, privacy.patreon.com. For OpenAI, the transfer is framed by the safeguards the GDPR provides (EU–US Data Privacy Framework or the European Commission's standard contractual clauses): see its privacy policy, openai.com/policies/privacy-policy.
6. How long
| Data | Retention period |
|---|---|
| Account, players, skins | as long as the account exists; deleted within one month of your request. Account never verified: 30 days. Account with no login for 3 years: deleted after one month's notice by email. On deletion, the statistics and bug reports of the account and its players are erased, screenshots included. After the deletion, the security log and the administrators' history keep their lines until the end of their own retention period (below). |
| Connected devices | until logout or expiry (90 days without use), erased at the latest 180 days after |
| Security log (IP addresses included) | 1 year, then deleted |
| Technical logs of the servers (web, game) | 12 months at most |
| Record of an installation (identifier, versions, operating system, computer, accounts seen, pings) | 25 months after this installation was last seen |
| Statistics events (starts, games, settings, performance…) | 13 months |
| Chat lines and commands recorded by the statistics | 90 days |
| Game sessions and activity per account or per player | 25 months |
| Bug reports (screenshots, game log and game state included) | up to 2 years after they are closed |
| Record of a game server (identifier, version, machine, name, world, port, settings) | 25 months after this server was last seen |
| Events of a game server (uptime, number of players, performance…) | 13 months |
| Fingerprint of the IP address (abuse limits of the statistics service) | a few hours |
| Statistics waiting on your computer (without a connection) | 30 days at most; deleted as soon as you withdraw your consent |
| Audience measurement at Google Analytics | 14 months, then deleted |
| Anonymous measurement (the website's page views, clicks on the short links, path in the launcher and the game) | 13 months, then deleted; the salt of the visitor key: 2 days |
| Google Analytics cookies (if you accept them) | 13 months at most |
| Cookies of OpenAI's measurement pixel (if you accept them) | __oppref (ad click identifier): 30 days; __obref (browser identifier): 1 year; __oaiq_consent: 30 days; the oaiq_consent local storage entry (same purpose): until you erase it |
| Data received by OpenAI through its pixel (if you accept it) | with us: nothing is kept; at OpenAI: according to its privacy policy |
| Your choice about these cookies (in your browser) | 6 months, then we ask you again |
| Access codes | the code remains (it says nothing about you); the IP address of its use: 1 year; the recipient's name and email address and the note: 3 years after the handover; everything that concerns you is erased with your account |
| Administrators' actions | 5 years |
| Temporary codes and tokens (email verification, forgotten password, joining a game) | from a few minutes to 48 hours |
| Purchases and invoices (including the dates and amounts of Patreon payments) | 10 years (French Commercial Code, Art. L. 123-22), no longer linked to the account once it is deleted |
| Patreon data linked to a player (display name, email, tier, status, Openworld username, star name) | while the subscription lasts, then 3 years after it ends (to handle claims), then deleted; except accounting records (“Purchases and invoices” row, 10 years) |
| Instagram messages about a gifted license | not copied out of Instagram: we keep only the code sent and the Openworld username |
| Messages and reports you send us | 3 years after the last exchange |
| Data of a world (position, inventory, builds) | as long as the world exists; after the account is deleted, it is no longer linked to anyone |
| Database backups at the hosting provider | erased as they rotate, 30 days at most |
7. Children
You must be 15 to open an account: the date of birth is used to check this. A younger child plays with a player created by a parent in that parent's account: we then know about the child only the username and the skin of their player, and what they do in the game. Usage statistics are sent only with the consent given in the launcher: for a child under 15, it is for the parent to decide, together with the child. If they are accepted, the child's statistics (their games, and what they write in the public chat) and their bug reports are linked to the parent's account; the parent can withdraw this consent at any time (Settings > “Send usage statistics”). The parent exercises the rights described below; the child can also ask us to delete their player. If we learn that an account was opened by a child under 15, we delete it.
8. Security
Encrypted connections (HTTPS), passwords stored with Argon2id, login tokens stored only as a fingerprint (hash), limits against repeated attempts, an administration tool restricted to authorized addresses and logged, hosting in France. Launcher updates are signed and verified before they are installed. The statistics service recognizes an account only through a ticket signed by the account service, records no IP address in clear, and its administration part cannot be reached from the Internet: only our administration tool accesses it. In the event of a data breach presenting a risk, we notify the CNIL (the French data protection authority) within 72 hours and, if the risk is high, the people concerned.
9. Your rights
At any time, you can:
- access your data and receive a copy of it;
- have it corrected;
- have it erased (delete your account);
- restrict its use, or object to a processing operation based on our legitimate interest;
- receive the data you provided to us in a machine-readable format (portability);
- tell us what we should do with your data after your death.
How: write to contact@pascard.com from your account's email address (otherwise, we will ask you for something that shows the account is yours). It is free. We reply within one month, which can be extended by two months for a complex request; we will let you know if so.
Statistics: to withdraw your consent, turn off “Send usage
statistics” in the launcher (Settings), without having to give a reason
and with no consequence for the game. To also have what we have already
received erased (your statistics and your bug reports, screenshots
included), without deleting your account, write to us at the same
address. To object to a processing operation based on our legitimate
interest (the minimal ping, for example), write to us as well: we stop,
unless there are compelling legitimate grounds, which we will explain to
you. If you run a dedicated server, you object to its statistics with the
--no-telemetry option (or OW_NO_TELEMETRY=1),
and you can write to us to have what we have already received
erased.
If you believe your rights are not respected, you can lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés, the French data protection authority): www.cnil.fr/fr/plaintes, or 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France; or with the data protection authority of the country where you live.
10. Cookies and files on your computer
On the website, without your consent, nothing is stored on or read from your device for audience measurement: Google Analytics counts the visits there without cookies (see what we collect), and our anonymous measurement stores and reads nothing there either (see the anonymous measurement). The pixel measuring our ads on ChatGPT (OpenAI) is not loaded either: nothing is sent to OpenAI and nothing is stored for it (see the measurement of our ads).
A small pop-up, the one with the cat, asks whether you accept Google Analytics' cookies. A single yes covers the Google Analytics cookies and OpenAI's measurement pixel; refusing takes one click, is as easy as accepting and changes nothing on the website. If you accept, Google Analytics sets the first two cookies below and OpenAI's pixel the next three (cookies of play-openworld.com, not of another domain), plus one local storage entry:
| Cookie | What it is for | Duration |
|---|---|---|
_ga | recognizing your browser from one visit to the next (a randomly drawn identifier) | 13 months |
_ga_HPWL9FMS4Q | following your current visit (start, pages viewed, duration) | 13 months |
__oppref | OpenAI pixel: keeping the ad click identifier ChatGPT adds to the link (when you arrive from one of our ads) | 30 days |
__obref | OpenAI pixel: recognizing your browser (a randomly drawn identifier) | 1 year |
__oaiq_consent | OpenAI pixel: remembering your consent for the pixel | 30 days |
oaiq_consent (local storage, not a cookie) | OpenAI pixel: same purpose as __oaiq_consent | until you erase it |
If you start a purchase or a gift on the website (the “Buy” and “Gift”
buttons), your browser keeps, without any cookie, the progress of your
purchase in the local storage entry ow-shop: the step, the
reserved username and the reservation and follow-up tokens, the licence
code typed or obtained, and the randomly drawn numbers of the visit and of
the journey. It lets you pick up where you left off (after Patreon, or days
later) and measures the steps of the purchase anonymously; it disappears 30
days after your last action. During the sign-in with Patreon, the page's
anonymous counters stay at most 2 hours in the session storage entry
ow-carry, so that your return continues the same visit. These
entries only serve the service you ask for and the anonymous measurement:
they do not need your consent.
Your choice stays in your browser (local storage
ow-consent, which is not a cookie) for 6 months; after that,
we ask you again. If you had accepted the cookies before 15 October 2026,
we also ask for your choice again: your earlier yes did not cover the
pixel. You can change your mind at any time with the
“Cookies” link at the bottom of every
page: if you withdraw your consent, the cookies (those of Google
Analytics as well as those of the pixel) are deleted. To also
refuse the cookieless counting, turn on “Global Privacy Control” or “Do
Not Track” in your browser: the website's pages then measure nothing at
all (only a click on one of our short links is still counted,
anonymously; see what we collect).
OpenAI's measurement pixel. We run ads on ChatGPT; this pixel (OpenAI's “oaiq” SDK) is used to measure whether they bring visitors and downloads. It loads only after your yes: before that, its script is not loaded, nothing reaches OpenAI and nothing is stored on your device for it. If you withdraw your consent, its cookies are deleted. What it sends to OpenAI is described in the measurement of our ads on ChatGPT.
No cookie is used to show you ads: the website shows none. The only advertising-related cookies are those of OpenAI's measurement pixel, set only if you accept them, to measure our ads on ChatGPT. A release note that contains a video contacts YouTube only if you click on it.
On your computer, the launcher and the game keep: your login tokens (a file that only your user account can read), your settings, your skin, the installed versions, the installation identifier, the random identifier of the anonymous measurement and your two choices (start with the computer, statistics). If you have accepted statistics, there are also the events that could not be sent yet (30 days at most, deleted as soon as you withdraw your consent) and the last known description of your graphics card and screens (so that the launcher, when it starts without a window, can send it).
To start with your session, the update program adds a startup entry: a LaunchAgent on macOS, a value under the “Run” registry key on Windows, an XDG autostart file on Linux. Turning off “Start Openworld with my computer” removes it.
Reading these files and your computer's characteristics, then sending them, means accessing information on your device. The launcher and the game do so for the minimal ping, which we consider necessary for the update service, and for the statistics, only with your consent (see usage statistics). None of this is used for advertising, and none of it goes to OpenAI: its pixel concerns the website only.
11. Changes
This policy may change. The date at the top of the page says when. If a significant change affects your data, we will let you know by email or in the launcher before it applies.