Wurldie Privacy Policy

Effective date: September 29, 2026.

Wurldie operates this interactive globe for exploring places, history, weather and games. For privacy questions, including account or child-data requests, contact privacy@wurldie.com.

Browser storage and visits

Wurldie saves settings, age band, game progress, trophies, saved maps and notebook entries in your browser. A selected city or location coordinates may also be saved there. Signed-in features store session tokens in browser storage. Clearing site data removes this browser's saved information, but does not erase information already sent to a service.

Cloudflare hosts the site and handles network requests needed to deliver and protect it. Hosting, security and requested map/data services can receive your IP address, browser information and request details. Kid mode is not an offline service.

From September 29, 2026 forward, Wurldie loads its Cloudflare Web Analytics beacon only when the browser stores a self-reported age of 13 or older and kid mode is off. Unknown-age visits and kid mode do not load that beacon. Switching into kid mode reloads the page so a previously loaded beacon does not continue on the kid page. Cloudflare says its beacon reports page views and performance without cookies, browser storage, cross-site identifiers or fingerprinting for analytics, and discards the source IP at its edge. This does not mean Cloudflare's hosting and security systems keep no network data.

Accounts, leaderboards and rooms

Optional account sign-in uses Supabase and email/password, Google or X. Supabase processes account identifiers, authentication data, session tokens and self-reported age. When you choose Google or X, that provider may supply account information such as your email, name, profile image and provider identifier. Cloudflare Turnstile may check that account creation is being performed by a person.

Leaderboards and play-together rooms require a stored, self-reported age of 13 or older and kid mode off. An opted-in leaderboard or room can use a persistent anonymous Supabase account. A leaderboard profile includes a handle and karma; room features send player identifiers, labels, scores, round status and presence. Room game results can also be stored. An anonymous identifier is still a persistent account, even without an email address.

Children

Age is self-reported, not independently verified. A visitor who enters an age under 13 is directed to kid mode. In the site UI, kid mode does not create or restore Supabase accounts, cannot use Ask AI, leaderboards or play-together rooms, and keeps preferences and game progress in this browser. Some adult content is hidden. The browser age gate is not a server-side guarantee against direct API use or changes to browser storage.

"Device-only" refers to child accounts and progress. Hosting, map assets, requested data feeds and location features still involve network requests as described in this policy. Ask AI is blocked for unknown-age visitors until they report an age of 13 or older, and remains blocked in kid mode. No account or sign-in is needed for an eligible visitor to use Ask AI.

Earlier builds could create persistent anonymous Supabase users for child leaderboard or room features and load the analytics beacon on child visits. The September 29 change stops those site flows going forward; it did not delete earlier records. A parent or guardian can ask us to locate and delete a child's earlier information by emailing privacy@wurldie.com. We may need information that connects the request to the relevant account or browser identifier. Please do not send identity documents or sensitive information unless we explain why it is needed. We will review the request, verify the relationship and record match where necessary, and remove information we identify as the child's unless retention is legally required. Clearing browser data alone does not remove earlier server records.

True Crime case files

Case files are delivered only after the server checks a current, non-anonymous Supabase sign-in and a stored, self-reported age of 13 or older. The site also uses a self-reported 18+ content prompt. This is not independent age verification, and the 18+ prompt is not a server-enforced age restriction. Case data is no longer included in the public page or a public data download. Signing out does not erase a copy someone already saved.

Location

The main nearby-place prompt offers "Use my location," a typed-city option, and a skip. Browser location permission controls access to coordinates. After a saved location choice, later nearby requests can refresh coordinates. Opening Halloween events or trick-or-treat hours can request geolocation. The launch panel can read a location when permission is already granted. An existing browser grant can allow these reads without another permission dialog.

Typed cities are geocoded through OpenStreetMap Nominatim. Nearby or selected-area features can send coordinates or map bounds to the relevant mapping, weather, places and events services. You can decline or revoke browser location permission and keep exploring without it.

Questions, data and media services

Ask AI is a 13+ feature. It uses a self-reported age step, not account sign-in. The question you type, and sometimes selected-place context such as coordinates, goes through Wurldie's Cloudflare proxy Worker to an AI provider for processing. You are interacting with AI, not a person. Wurldie limits AI answers to globe-related exploration, applies input/output screening and rate limits, and offers privacy@wurldie.com for unsafe-answer reports. These safeguards are best-effort and can miss problems; they are not independent age verification or a guarantee that every answer is safe. Do not put personal or sensitive information in questions, handles or shared fields. The AI provider is Anthropic Claude. Anthropic says commercial API inputs and outputs are deleted from its backend within 30 days by default, with exceptions for services with longer retention, other agreed retention, Usage Policy enforcement and legal obligations. Anthropic does not use commercial API inputs or outputs to train models by default, unless the customer opts in or submits material through feedback or another permitted training arrangement. Wurldie uses the standard Messages API, not the Files API or a stored conversation service. The current proxy source does not write questions or answers to a database or question cache. Earlier versions used Google Gemini; information already sent to Google is not deleted by changing providers. Google states that prompts, context and outputs may remain for 55 days for abuse monitoring; other retention or use can depend on the Gemini service tier and applicable terms. It stores rate-limit counts with IP-address-containing keys: minute counters expire after 120 seconds; daily counters expire after 25 hours. This is separate from Anthropic's retention and Cloudflare's network/security processing.

Maps, fonts, images, libraries and live layers contact their source services when loaded. The inspected site includes OpenFreeMap/OpenMapTiles/OpenStreetMap, Nominatim and Overpass, Google Fonts, jsDelivr/unpkg, Wikimedia/Wikidata, GBIF, Open-Meteo, RainViewer, USGS, NASA GIBS/EONET, NOAA/National Weather Service, ADSB.lol/ADSBdb, Where the ISS At, Launch Library/The Space Devs, World Bank, US Census, Native Land and GitHub-hosted data. FRED is called directly; configured relay features can use Geoapify, Ticketmaster, Windy webcams, EIA and National Park Service data. Sports schedules and scores use Wurldie relay services. Optional media and source links contact their own providers when opened or loaded.

Those requests can include network metadata, search text, a selected area or coordinates needed for the feature. Third-party services have their own privacy practices. The site currently has no paid checkout. Wurldie currently does not display third-party advertising or run affiliate click-tracking code in the inspected site. An affiliate-network ownership-verification meta tag is present; it is not itself a visitor-tracking script. Requests to the service providers described above still disclose the information needed for those features. This policy does not label every such disclosure as outside statutory definitions of sale or sharing.

Retention and requests

Local information remains until cleared or replaced. Account, profile and game-result database records are separate from short-lived technical logs. Supabase says anonymous users have no automatic cleanup. No automatic deletion schedule has been verified for account, profile or game-result records. These records can remain until manually deleted. You can request deletion at privacy@wurldie.com; deleting local browser information or signing out does not delete server records.

The current Supabase project is on the Free plan. Its dashboard says scheduled project backups are not included and shows no backups. Log Drains require an upgrade and are not enabled on this Free project. Supabase's published Free-plan limits list one-day API/database log retention and one-hour Auth Audit Logs. These technical-log limits do not delete user/profile records.

Cloudflare's beacon documentation says unsampled data is retained for seven days and then aggregated, with six months available in Web Analytics. The static site Worker currently has Workers Logs/Traces disabled, and its settings do not support Logpush or Tail Workers. Cloudflare's domain/Workers plans are Free; the domain Logpush screen requires an upgrade. Cloudflare's privacy policy does not give one fixed retention period for all network/security information: it describes retention based on the purposes of processing and legal obligations. Wurldie has not established a shorter hosting/security retention period. Wurldie's other relay Workers cache requested public data and search results, including area- or query-based results, to reduce repeated requests. The inspected relay source uses feature-specific cache lifetimes from 15 seconds to 30 days; the NFL scores relay caches public scores for 60 seconds, while the game-schedule relay sends 30-second browser and 60-second shared-cache headers. No persistent cache database is currently bound to the general relay; its optional longer-lived database cache code is not active through a binding. These cache lifetimes are not guarantees about the upstream providers' own retention. The inspected relay settings have Logpush disabled and no Tail consumers. No external log export was identified in those settings.

Contact privacy@wurldie.com to ask about your information or a child's information. Depending on where you live and the law that applies, you may have rights to access, correct or delete information, or object to or limit certain processing. You may also be able to complain to your local privacy authority. Tell us what you want to request and provide enough information to identify the relevant records. We may ask for proportionate verification before disclosing or deleting information. We will explain whether we can fulfill the request, including any legal exception, and respond within the period required by applicable law. There is currently no self-service server-account deletion tool in the site.

Changes

We will update this page and its effective date when this policy changes. For material changes to how we handle personal information, we will post a clear notice on the site and, where required, obtain consent before applying the change. We will not treat continued use as consent where the law requires an affirmative choice.