PRIVACY
Privacy Notice
This notice explains how Multiversal handles personal information collected through playmultiversal.com and the Multiversal development-updates list.
Effective October 1, 2026.
WHO CONTROLS THE DATA
Multiversal
Multiversal is operated from the United States and is the controller for personal information collected through this website and its mailing-list signup. Privacy questions or requests can be sent to cybalicist.jt@gmail.com.
WHAT WE COLLECT
Only what we need for the site, signup, and security.
When you join the mailing list, we collect your email address. You may also choose to provide your name and interests in Play, Run, Create, or Explore. Those optional interests are used to understand which parts of Multiversal you care about and to help make updates more relevant.
Our hosting and signup systems also process technical information needed to deliver and protect the service, such as IP address, request information, timestamps, and security logs. The signup backend uses an IP address temporarily for abuse and rate limiting; its in-memory rate-limit window is about 10 minutes.
We also maintain a first-party aggregate page-view count for the Multiversal home page. When the home page loads, it sends a minimal request to the counter service. The counter stores only an aggregate integer representing total page views; it does not create a visitor profile, store a persistent visitor identifier, use cookies, or fingerprint your device. Ordinary hosting and security logs may still process technical request information as described above.
Buttondown may also process subscription status, confirmation timestamps, delivery information, and email engagement information as part of providing newsletter services.
WHY WE USE IT
Development updates, basic site operation, and service protection.
We use your email address, and any optional name or interests you provide, to send Multiversal development updates, playtesting opportunities, release announcements, and occasional promotional emails. For people whose data is covered by the GDPR or similar laws, the legal basis for that mailing-list processing is your consent.
We maintain the aggregate home-page count to understand the total number of page loads shown publicly on the site. The counter itself is not used to identify, profile, or track individual visitors.
We process limited technical and security information to operate the website, prevent abuse, diagnose failures, and protect the signup and counter services. Where GDPR applies, we rely on our legitimate interests in operating and securing the service for that processing, balanced against your privacy rights.
We may also process information when necessary to comply with applicable legal obligations.
CONFIRMING YOUR SUBSCRIPTION
Double opt-in is enabled.
Submitting the Join Multiversal form does not immediately make you an active subscriber. Buttondown sends a confirmation message to the address you entered. You become an active subscriber only after using the confirmation link. If you did not request the signup, you can ignore that message.
WHO HELPS US PROCESS IT
Render and Buttondown.
We use Render to host the public site and related first-party services, including the signup and page-view counter services, and Buttondown to manage newsletter subscriptions and email delivery. These providers process personal information on our behalf as needed to provide their services. We do not sell mailing-list personal information or share it with third parties for unrelated advertising.
INTERNATIONAL TRANSFERS
Processing may occur in the United States.
Multiversal and these service providers operate in the United States, so personal information may be transferred to and processed in the United States. Where European or UK data-protection law requires transfer safeguards, the providers’ data-processing terms provide mechanisms including the European Commission’s Standard Contractual Clauses and related lawful transfer safeguards. Buttondown’s Data Processing Agreement and Render’s Data Processing Addendum describe their current transfer terms.
HOW LONG WE KEEP IT
For as long as needed for the service and legal obligations.
We keep active subscriber information while you remain subscribed and as reasonably necessary to operate the mailing list. If you unsubscribe or ask us to delete your information, we will delete or de-identify information we no longer need, subject to limited records that may be retained when necessary to honor an opt-out, maintain security, resolve disputes, prevent abuse, or comply with law.
The home-page counter retains an aggregate total while Multiversal maintains that feature. Because the counter stores an aggregate integer rather than a visitor record, there is no individual page-view profile to retain or delete from that counter.
Unconfirmed subscription records are retained only as needed to complete or manage the confirmation process and according to the newsletter provider’s applicable retention practices. Short-lived in-memory rate-limit records expire after roughly 10 minutes. Hosting and security logs are retained according to the hosting provider’s operational and security retention practices.
YOUR CHOICES AND RIGHTS
You stay in control of the subscription.
You can withdraw your consent at any time by using the unsubscribe link in a Multiversal email. Withdrawing consent does not affect processing that was lawful before withdrawal.
Depending on where you live, you may also have rights to access your personal information, request rectification of inaccurate information, request erasure, request restriction of processing, object to certain processing, and request data portability. You may contact us at cybalicist.jt@gmail.com to exercise applicable rights.
If GDPR applies to you, you also have the right to lodge a complaint with the supervisory authority in your country or region. You are not required to provide your optional name or interests to join the mailing list; an email address is required because it is necessary to deliver the requested updates.
COOKIES AND AUTOMATED DECISIONS
No advertising profile is being built here.
We do not currently use advertising or analytics cookies on playmultiversal.com. The aggregate page-view counter does not set cookies or use persistent visitor identifiers. Service providers may process technical request information necessary to host, secure, and deliver the site and mailing-list services.
We do not use the information collected through this signup for automated decision-making that produces legal or similarly significant effects. Optional interest selections may be used to organize or tailor newsletter content, but they do not determine access to Multiversal.
YOUNGER USERS
Use the signup only when you can legally consent.
If you are below the age at which you can legally consent to this processing in your country, do not join the mailing list without authorization from a parent or legal guardian.
CHANGES
We will keep this notice current.
If our data practices materially change, we will update this page and its effective date. If a change requires new consent, we will ask for it before using your information for the new purpose.