Privacy Policy

Last updated: 26 July 2026

Controller and contact

The controller is the person or business named in the Imprint. For privacy questions or requests, contact: contact@miniwelt.me.

Data we process

We process the data needed to run, secure and improve Miniwelt:

• Account data. When you sign in with Google, we receive and store your Google subject identifier, verified email address, display name and profile image URL. You choose a username and confirm that you are at least 16. We also store account creation, update and last-login times.
• World and community data. We store the worlds, thumbnails, world names, descriptions, privacy settings and backups you save. We also store upvotes, reports and report details, as well as limited moderation and security records.
• Public content. Your username, public profile and any world you mark public may be visible to anyone. Unlisted worlds are available to people with their link. Private cloud worlds are available only to their owner; peer-to-peer multiplayer can share the current world directly with invited players.
• Usage and security data. We count site visits using a random visitor cookie and a daily hashed identifier. We count a world visit after its file loads successfully. We use short-lived hashed technical identifiers for rate limiting and abuse prevention. Our hosting provider also processes normal connection information, such as IP address, browser and request data, to deliver and protect the site.
• Device settings. Your graphics and control preferences are stored locally in your browser and are not sent to Miniwelt.

Why we use data

We use this data to provide accounts and saved worlds, display public worlds, enable multiplayer, maintain security, prevent abuse, enforce our rules, respond to reports, understand aggregate usage and meet legal obligations.

Cookies and browser storage

Miniwelt uses essential cookies for sign-in, CSRF protection and login verification. The session cookie lasts up to 30 days; temporary login cookies last up to 10 minutes. A random visitor cookie lasts up to one year and supports basic visit counting and rate limiting. You can remove cookies in your browser, but sign-in and visit counting may then not work as intended.

Retention

• Account data and saved worlds are kept while your account exists.
• We keep the current saved world and up to two earlier revisions for backup purposes. Deleting an account removes its account record, sessions and worlds, and schedules deletion of its world files and thumbnails.
• Daily hashed site visit records are deleted after 45 days. Save-rate records are deleted after 24 hours, and rate-limit records expire automatically.
• Reports, moderation records and limited audit records may be kept longer where needed to resolve abuse, protect Miniwelt or comply with legal obligations.

Service providers and sharing

We do not sell personal data. We use the following providers to operate the service:

• Cloudflare provides hosting, serverless functions, database and object storage. Saved world files are configured for EU-jurisdiction object storage. Cloudflare may process connection data to deliver and secure the service.
• Google provides the optional Sign in with Google service. Google processes your use of that service under its own policies; Miniwelt receives the account data listed above to create and maintain your account.
• Multiplayer providers. Optional peer-to-peer multiplayer uses WebRTC, a signalling service at noel-friedrich.de and STUN/TURN services including Metered, Google and FreeTURN. These services process connection data needed to establish a session. Depending on network conditions, other players may be able to see your IP address through a direct peer-to-peer connection. Do not use multiplayer if you are not comfortable with that.

These providers may process data outside Switzerland. Their own privacy notices apply to their processing: Cloudflare and Google.

Your choices and rights

You can download your account data and delete your account from your profile. You can make worlds private, unlisted or public, and you can remove public worlds. To request access, correction, deletion or information about your data, contact us at the address above. We may need to verify your identity before acting on a request.

Changes

We may update this policy when Miniwelt or applicable requirements change. The current version is always published on this page.