Privacy

What New World keeps, and why

Last updated 1 October 2026.

Who holds what

  • Sign-in (WorkOS). Your e-mail address, your name if you give one, your password (stored hashed by WorkOS), your sign-in sessions with their IP address and browser, and sign-in events. WorkOS runs the sign-in, sign-up and password-reset pages for us as our processor. This site never sees your password.
  • The game service. Your WorkOS user id, an internal account name made from it, your characters and their game data (names, level, items, position), and an audit trail of account and character changes. It keeps no e-mail address and no name.
  • Logs. The site, the game service and the network proxy log IP addresses and request times for 14 days, to keep the service running and to stop abuse. They never log passwords, tokens, e-mail addresses, download links or what you type into forms.
  • Downloads. When you download the beta client we record your user id, the build and the time.

Why

To let you sign in, to keep your characters, to give invited testers the beta client, and to protect the service. Access to the beta is decided per account by the people running the test.

How long

  • Your account and characters: until you delete them.
  • Logs: 14 days.
  • Backups of the game database roll off within 35 days, so deleted data leaves them within 35 days.

Your choices

  • Export: on your account page, "Export my data" downloads everything the game service and WorkOS hold about you as one JSON file.
  • Delete: "Delete my account" deletes your characters, your game account and your WorkOS user. Afterwards the game service keeps only a one-way hash of your WorkOS user id, so a deleted account can never be restored or re-created by an old sign-in. Signing up again later creates a new, empty account.
  • Password: sign out and use "Forgot password?" on the sign-in page.

Who else processes data

WorkOS (sign-in). Once the site is published through Cloudflare (a tunnel or file storage for downloads), Cloudflare carries the traffic. Nothing is sold or shared for advertising, and the site uses no analytics or tracking cookies: the only cookies are the sign-in session and a short-lived sign-in check.

Contact

Ask the person who invited you, or use the account page to export or delete your data yourself.