Pride World
Pride World Pty Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.
We comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
We may collect the following categories of information when you use Pride World:
We receive from Stripe only a transaction confirmation, the amount charged, and a Stripe customer reference. This is used solely to credit your Gem balance and maintain our purchase ledger.
Pride World is for adults. Before you can enter, we ask you to complete an age check run by an independent provider, Didit. The check uses a live selfie to estimate whether you are over 18. A selfie used for automated age estimation is biometric information, which Australian privacy law treats as sensitive information. We collect it only with your consent, which you give by tapping "Verify my age". If the estimate cannot confirm you are over 18 (this is common for people aged 18 to 25), Didit offers a second step using an identity document.
Didit deletes the selfie and any document image when the check finishes, and keeps a record of the check — including the biometric template used to produce the result — for 30 days, after which it is deleted. Didit processes this information in Ireland, in the European Union.
When a check succeeds, your device stores a signed "verified" token for 365 days so you are not asked again on that device. The token contains no image and no personal details. Clearing your browser data or using a private window removes the token, and you will be asked to verify again.
The age check is an automated decision: Didit's software estimates your age from the selfie, and Pride World's system admits or refuses entry on that result without a person reviewing it. If you believe the result is wrong, email hello@prideworld.app and we will look into it with you.
You can play without an account; your game state then stays on your device. If you sign in with your email address, we create an account and store on our servers your Gem balance, game progress, daily-reward and mission status, Invitation records, your player-care settings (spend limits, cooling-off and self-exclusion) and a ledger of Gem movements, so they follow you between devices. Signing in uses a one-time code sent to your email; we do not store a password.
Our database is hosted by Supabase in Sydney, Australia. The website and the small server functions that support it (age check, store, content reports, analytics) are hosted by Vercel and run in the United States.
If you use the Report link to tell us about content, we record the category you choose, any description you type, the time, and a one-way hashed form of your IP address that we use only to prevent abuse of the reporting tool. We review reports weekly and keep report records for five years to meet our obligations under the Online Safety Act industry codes.
We record basic, de-identified usage events — for example that a page was opened, that the age check was shown or passed, that a spin happened, and which game was open — to understand how Pride World is used, which links bring visitors to us, and to keep the game fair. Some of these events are recorded when the page first opens, before the age check.
When you arrive, we also note where your visit came from, using the website that linked to us (for example, bsky.app — never the full address of the page you were on) and any campaign label included in the link you followed. We use these only to sort your visit into a short, fixed list of sources and types (such as "bluesky", "google", "social" or "search") and count them; the referring web address itself is not kept. A campaign label is kept as written only if it is a short code of letters, numbers and simple punctuation; in the daily totals, a label seen in fewer than five visits in a day is counted as "other". We do not use cookies, advertising identifiers or device fingerprints to do this, and none of it is stored on your device.
Each visit is given a random code that exists only while the page is open. Our server scrambles it with a key that is destroyed after 35 days, so these events cannot be linked to you, to your account, or to your other visits. Individual events are deleted after 35 days; after that we keep only daily totals, which cannot identify any individual. Analytics data is never sold or shared for advertising.
Some of the providers we rely on are outside Australia: Didit (Ireland, European Union) for the age check; Stripe (United States and other countries) for payments; and Vercel (United States) for hosting and server functions. Our database is with Supabase in Sydney, Australia, and the information in it stays onshore. We choose providers with strong security and contractual privacy protections, but information held overseas is subject to the laws of those places.
Pride World uses your browser's local storage (not cookies) to save your game state — including your Gem balance, bet preferences, XP and level progress, story chapters unlocked, and voluntary player-care settings — so the game remembers your progress between sessions.
This data is stored only on your device. It is not transmitted to our servers unless you are signed in to a Pride World account. You can clear this data at any time through your browser's site data settings.
We may also use essential session cookies to maintain your login session if you have a registered account. We do not use advertising cookies or third-party tracking cookies.
We use the information we collect to:
We do not sell, rent, trade, or otherwise share your personal information with third parties for their own marketing or commercial purposes.
We may share information with trusted service providers (such as Stripe for payments, and web hosting providers) solely to operate the platform, under confidentiality obligations. We do not permit these providers to use your data for their own purposes beyond the service they provide to us.
We retain your personal information for as long as your account is active or as needed to provide the service. If you request deletion of your account, we will delete or de-identify your personal information within 30 days, except where we are required by law to retain certain records (for example, purchase transaction records for tax purposes).
We take reasonable steps to protect your personal information from unauthorised access, disclosure, alteration, or destruction. Payment data is secured by Stripe's PCI-DSS compliance. Sign-in uses a one-time code sent to your email, so please keep your email account and your device secure.
Under the Australian Privacy Act, you have the right to:
To exercise any of these rights, please contact us at hello@prideworld.app. We will respond within 30 days.
You can ask us to close your account and delete your personal information by emailing hello@prideworld.app from the address on the account. We will do so within 30 days, except for records we are required to keep (content reports for five years; purchase records for seven years), which we keep securely and use for no other purpose. If you delete your account while you are self-excluded or in a cooling-off period, we keep only a one-way coded (hashed) version of your email address, which cannot be turned back into your email address. We keep it permanently so that, if you sign up again with the same email, your self-exclusion, or the rest of your cooling-off period, still applies; once a cooling-off period has ended, it no longer affects you.
If you believe we have mishandled your personal information, email hello@prideworld.app with "Privacy complaint" in the subject line. We will acknowledge your complaint within 7 days and give you a written outcome within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
We do not send marketing email or messages, and we do not use advertising or tracking pixels on Pride World. If we introduce marketing email in future, we will ask for your consent first and every message will include an unsubscribe link. We do not collect personal information through social media platforms, and there is no social-media sign-in. The only automated processing of your personal information is the age check described in section 4; no other artificial-intelligence system processes your personal information.
Pride World is strictly for adults aged 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a person under 18, please contact us immediately and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date and, where appropriate, posting a notice within the platform. Continued use of Pride World after changes constitutes acceptance of the updated policy.
For any privacy enquiries, access or deletion requests, or complaints:
Pride World Pty Ltd
ABN 18 698 379 930 · ACN 698 379 930
Adelaide, South Australia, Australia
hello@prideworld.app