Privacy Policy
Last updated: February 14, 2026
For the purposes of this document, the term listed below shall have the following meaning:
The Company (we or us) refers to Create Worlds (a DBA of Robot Invader, Inc.), 10080 N. Wolfe Rd., Suite SW3-200, Cupertino, CA 95014, USA.
Introduction
The Company develops, markets and sells web-based graphics software and tools that can be used to develop web-based graphics software.
We describe here
- what data we collect,
- when and why we collect it,
- how your data is used,
- how long we keep it, and
- your rights regarding your data.
1. Collected Data
Website visits
When you use the website without an account, we collect anonymous page visit events via web server logs and Google Analytics. This helps us understand how our website is used and improve it.
Account data
If you decide to use our account function, we collect — either from the Google account you sign up with, or from your input — your email address, first name, and last name. You may optionally provide the name of the company or institution you work for. We store this data so you can access your account from the Wonderland Editor application.
Login and usage data
When you log in to your account from Wonderland Editor or the website, we store a timestamp, operating system name, and architecture. We also log an anonymous unique identifier generated when you first start the editor. This helps us identify issues with our sign-up process and protect against abuse.
Crash reports
When the editor crashes, we use a third-party service called Sentry to collect the stack trace (location of the crash in the code), operating system name and architecture, GPU vendor, and GPU model name. This helps us fix crashes as quickly as possible.
Marketing emails
If you opt in to marketing communications, we use your email address to send you news about releases, community updates, and learning material. You can unsubscribe at any time via your account settings or the unsubscribe link in any email.
Project data (scenes, assets, code) created in Wonderland Editor is stored locally on your device and is not transmitted to us.
2. Why We Collect This Data
- Account management and authentication — so you can access Wonderland Engine and your account.
- Transactional emails — verification, password reset, and notifications about changes to our EULA or this policy.
- Marketing emails (opt-in only) — product updates, community news, learning material.
- Analytics — understanding how our website and products are used.
- Crash reporting — improving editor stability.
- Security and abuse prevention — protecting our services and users.
3. Data Retention
| Data type | Retention |
|---|---|
| Account data (name, email, company) | Until you request deletion |
| Login/usage logs | Limited retention; after account deletion, remaining records are non-identifiable |
| Crash reports | 90 days |
| Web server logs | 90 days |
| Google Analytics data | 2 months |
4. Third-Party Services
We use the following third-party services to operate Wonderland Engine:
| Service | Purpose | Location |
|---|---|---|
| Uberspace | Hosting for account/licensing backend | Mainz, Germany |
| Cloudflare | DNS, CDN, and web application firewall | Global |
| Sentry | Crash and error reporting | Frankfurt, Germany |
| Mailgun | Transactional email delivery | Frankfurt, Germany |
| Google (OAuth) | Sign-in with Google | Global |
| Google Analytics | Website analytics | Global |
5. International Data Transfers
The Company is based in the United States. Our primary hosting infrastructure is in the EU (Germany). Some third-party services (Google, Cloudflare) operate globally and may process data outside the EEA. Where personal data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or the EU-US Data Privacy Framework.
6. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS/HTTPS), restricted administrative access, multi-factor authentication for internal systems, and code review processes.
7. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate personal data
- Delete your personal data
- Restrict processing of your personal data
- Export your data in a structured, machine-readable format
- Object to processing of your personal data
- Withdraw consent for marketing at any time
To exercise any of these rights, contact [email protected]. We will respond within 30 days.
Account deletion: You can request deletion of your account and associated data by contacting [email protected]. Deletion will be completed within 30 days.
If you are in the EU, you also have the right to lodge a complaint with your local data protection authority. You can find yours at edpb.europa.eu.
8. Children Under the Age of 13
Our website is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are under 13, please do not provide any information on this website.
9. Mailing Policy
We send transactional emails for verifying your email address, password resets, and notifying you about changes to the EULA or this policy.
Optional marketing emails — which you can opt in to on the account page or by signing up for the newsletter — include information about product updates, community news, new learning material, and requests for feedback. You can unsubscribe at any time.
10. Cookie Policy
See how we handle cookies in our Cookie Policy.
11. Transfers of Business
We will not sell, rent, swap, or authorise any third party to use your personal data without your permission. In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change.
12. Dispute Resolution
If you have any concerns regarding this policy or our compliance with it, please contact us. We will investigate and attempt to resolve complaints and disputes regarding use and disclosure of personal information in accordance with this policy.
13. Notification of Changes
If you have an account, we will notify you of material changes to this policy via email (see also Mailing Policy). Changes may be necessary to reflect legal requirements. The “last updated” date at the top of this page will always reflect the most recent revision.
14. Contact Information
If you have any questions regarding this policy, please contact [email protected].