Privacy Policy

This privacy policy explains how WorldsEngineering ("we", "us") processes personal data when you use this platform. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP / DSG) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller

[FULL NAME OR COMPANY NAME], [ADDRESS], Switzerland — reachable at [CONTACT EMAIL]. If we are required to designate an EU representative under Art. 27 GDPR, their details will be listed here.

2. What data we process

Account data

When you sign up we process your email address and, if you sign in with GitHub, the profile data GitHub shares with us (username, display name, avatar URL). We also store your chosen settings such as your accent color. Authentication and the database are provided by Supabase; session tokens are stored in cookies (see the Cookie Policy).

Content you publish

Posts, tags, comments, and votes are stored in our Supabase database. Posts, tags, comments, and your profile (username, display name, bio, avatar) are public by design and visible to anyone on the internet.

Payment data

If you subscribe to Creator Pro, payment is handled by Stripe. We never receive or store your full card details. We store your Stripe customer ID, subscription ID, and subscription status so we can activate your plan. Stripe processes your payment data as described in its own privacy policy.

Technical data

Our hosting and infrastructure providers automatically process technical data such as IP addresses and request logs to deliver the site securely and prevent abuse.

3. Purposes and legal bases

We process data to provide the platform and your account (performance of a contract, Art. 6(1)(b) GDPR), to process subscription payments (contract and legal obligations, Art. 6(1)(b) and (c)), to keep the service secure and prevent abuse (legitimate interests, Art. 6(1)(f)), and, where required, based on your consent (Art. 6(1)(a)). Under the Swiss DSG we rely on the corresponding justification grounds.

4. Recipients and processors

We share data with the following processors, bound by data processing agreements: Supabase (database, authentication, storage, realtime), Stripe (payments), and our hosting provider [e.g. Vercel]. We do not sell personal data and do not use it for third-party advertising.

5. International transfers

Some providers may process data outside Switzerland and the EEA, including in the United States. Where this happens, transfers are protected by recognized safeguards such as the EU Standard Contractual Clauses and, where applicable, the Swiss–U.S. / EU–U.S. Data Privacy Framework. [Verify the regions configured in your Supabase, Stripe, and hosting accounts.]

6. Retention

Account data is kept for as long as your account exists. If you delete your account, your profile, posts, comments, votes, and follows are deleted with it (cascading deletion in our database). Billing records are retained as long as required by statutory bookkeeping obligations (in Switzerland, generally 10 years). Backups expire on a rolling schedule.

7. Your rights

You have the right to access the personal data we hold about you, to have inaccurate data corrected, to request deletion, to receive a copy in a portable format, to object to processing based on legitimate interests, and to withdraw consent at any time with effect for the future. Contact [CONTACT EMAIL] to exercise these rights. You can also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, with your local supervisory authority.

8. Security

Access to data is restricted through row-level security in our database: private data such as subscription records is only readable by you, and direct messages are only readable by their participants. All traffic is encrypted in transit.

9. Changes

We may update this policy as the platform evolves. The current version is always available on this page; material changes will be announced on the platform.