Privacy Policy
Version 2026-10-22 · Effective October 22, 2026
This policy explains what the World of Goshen Community Recorder ("we") collects, why, and what you can do about it. Short version: we collect what we need to run accounts, stop abuse and use your footage to build the game. We never sell your data, and we never publish your precise location.
What we collect
| Data | Why | How long |
|---|---|---|
| Username, password (stored only as a salted one-way hash), optional email, the date you accepted the Terms and confirmed your age | Your account | Until you delete the account |
| Photos and videos you upload, the optional "where was this recorded" text, the recording time and length | Reviewing and using footage for the game | Unreviewed: up to 30 days. Rejected: deleted immediately. Approved: until you delete it or we stop needing it |
| Location (GPS): only if you choose "Single location" or "Record my route" and tick the consent box. Latitude, longitude, accuracy, time, and where your device reports them altitude, heading and speed | Placing your footage on the map of the game world | Kept with the upload; removed when the upload is deleted |
| Your internet (IP) address, a random device identifier saved in your browser, a fingerprint of browser settings (screen size, language, time zone, platform) and your browser's user-agent | Security, rate limits, stopping spam and enforcing bans | Up to 90 days after your last upload or sign-in for deleted and rejected items; while your account exists otherwise |
| Messages you send through the contact form | Answering you | Up to 1 year |
Photos are re-encoded in your browser and our server removes embedded EXIF / XMP / IPTC data (which can include the phone's own GPS position, camera serial numbers and owner names) from every photo. Videos you pick from your phone's gallery can contain the place they were filmed inside the file; we warn you before you upload one and do not extract it.
Location
Location sharing is off by default and is never required. Camera permission is never treated as location permission. Route tracking runs only while a video is recording and stops when you stop, discard, switch it off, or the recording fails. You can review and remove location data before uploading. Precise coordinates are visible only to the people who review uploads and are never published on this site.
Cookies and local storage
We use one sign-in cookie (needed to keep you signed in) and store a random device identifier in your browser. We do not use advertising or tracking cookies. Cloudflare's bot check (Turnstile) may process technical data to tell people from bots.
Who processes the data
Cloudflare, Inc. hosts the Service, its database and the upload storage. Approved uploads and their metadata are copied to Google Drive (Google LLC) for the game team. We do not sell or rent personal data and do not share it for advertising. We disclose data when the law requires it, to protect people from harm, or to report illegal material (see the Terms, section 6).
Your choices and rights
- Delete any upload, and its location data, from "My uploads", or with the receipt code you got when you uploaded it.
- Delete your whole account (and all your uploads) from "My account".
- Ask for a copy of your data or ask a question through the contact form. Depending on where you live you may have further rights (for example under the GDPR or US state privacy laws); we honour them.
Children
The Service is not for children under 13 and we do not knowingly collect their data. Users aged 13 to 17 need a parent's or guardian's permission. If you believe a child under 13 has an account, tell us and we will delete it.
Security
Traffic is encrypted (HTTPS). Passwords are hashed with PBKDF2. Uploads sit in private storage that only reviewers can open. No system is perfectly secure; tell us at once if you notice a problem.
Changes and contact
When we change this policy we update the version above and ask you to accept it again. Contact us through the contact form.