Privacy Policy

Last Updated: 20 July 2026

Welcome to the "Worlds Within Itself" promotional web application. This Privacy Policy explains how we collect, use, and protect your personal information when you interact with Paulina's digital ecosystem.

1. Information We Collect

• Email Address: Collected to securely authenticate your account via magic links and for communication.
• Age: Collected strictly to verify you meet our minimum age requirement of 16 years.
• Location (Country and City): Collected to understand global audience demographics and inform future tour or release planning.
• Username: Collected to display your digital identity on the global community plant feed.
• In-App Data: We track your virtual inventory (water, fertiliser, tokens), completed tasks, viewed gifts, and plant customisations to facilitate the game experience.

2. Marketing Communications

• If you explicitly opt-in via the consent checkbox during sign-up, we will use your email address to send you promotional updates regarding Paulina's music, upcoming tours, and merchandise.
• You can withdraw your consent at any time by clicking the "unsubscribe" link at the bottom of any promotional email, or by updating your preferences in your account profile.
• Unsubscribing from marketing emails will not affect your ability to log into the "Worlds Within Itself" application via magic links.

3. How We Use Cookies

• We use a single JSON Web Token (JWT) cookie.
• This cookie is strictly necessary to keep you securely logged in as you navigate the app.
• We do not use tracking, advertising, or third-party analytics cookies.

4. Third-Party Data Processors

• We utilise Supabase as our primary cloud database and authentication provider. Your data is securely encrypted and stored on their infrastructure.
• We utilise Vercel to host our application logic and route web traffic securely.

5. Data Retention and Your Right to Erasure

• You have complete control over your data. You can instantly and permanently delete your account, including all associated plant data and customisations, using the "Delete Account" button on your profile page.

6. Children's Privacy

• This application is strictly restricted to users aged 16 and over. If we become aware that we have collected personal data from anyone under the age of 16, we will delete that information immediately.