Skip to main content

The worlds & privacy

Everything you share on Main's World lives in one of three privacy worlds. The world you choose decides who can see it. That's the whole privacy model, and it's meant to be simple enough to hold in your head.

The three privacy worlds​

  • SKY — public. Anyone on Main's World can see it.
  • LAND — your connections. Only people you've connected with can see it.
  • DEEP — private. It's yours alone… unless you tag someone in.

That's it. No confusing settings, no per-post checkboxes buried in a menu. You pick a world for each moment, and the world tells you who can see it.

Filtering the map​

The current map has independent SKY, LAND, and DEEP filters. Turn each one on or off to decide which privacy worlds appear together on the map and in the moments list. A separate viewing choice can include or exclude moments that arrived from another app. Turning on any filter never gives access to a moment you were not already allowed to open.

Every visible moment keeps its world's color, so a mixed view still makes clear where it lives. Your filter choices are remembered on your device.

SPACE is the connected-app world​

SPACE is confirmed as Main's World's fourth client-facing world. It gathers content from registered external apps, including apps a person chooses to connect, while SKY, LAND, and DEEP remain the only worlds that decide who may see a moment. A RunPal moment can therefore be both SPACE content and a LAND moment: LAND controls who is allowed to open it; SPACE describes where that connected content came from and how it is managed.

Today, the SPACE experience can be opened from the map settings to discover, connect, and manage apps. Authorized app content appears on the Earth map under its SKY, LAND, or DEEP privacy world. Moving between Space and the map does not connect or disconnect an app, change a moment's privacy world, or delete anything already published.

The first fixed four-world rail, nested visibility tree, and fixed SPACE/EARTH switcher were rolled back on August 29, 2026 after live mobile review. That interface is not live while a simpler mobile and desktop presentation is designed. The product decision above remains unchanged.

Tagging opens a door​

Tagging someone you're connected with lets them see a moment they otherwise couldn't — a private (DEEP) moment becomes visible to the people you tag. Tagging never makes something more public than the world you chose; it just invites specific people in.

Ghost dots: seeing that something is there​

The map never shows you a moment you're not allowed to open. But it can show you that something exists. Small, faint dots — each wearing the color of its world — can mark moments that are not in your current map view:

  • Moments in a world you have currently filtered out, including your own — handy for spotting where your moments live across the worlds.
  • Connections-only (LAND) moments from people you haven't connected with yet. These stay dots even when LAND is turned on — they're moments you aren't allowed to open, and no filter changes that.

A ghost dot is deliberately empty. It can't be opened, and it carries no photo, no label, and no name — nothing about who posted or what. For moments you aren't allowed to open, even the spot is softened to a rough area rather than an exact point. And private (DEEP) moments never appear at all, not even as a dot, to anyone who wasn't invited in.

Ghost dots are an invitation: the world is fuller than your slice of it, and connecting with more people — in person, as always — opens more of it up.

Sometimes the person you want to show a moment to isn't on Main's World at all — a parent, a friend abroad, anyone without the app. For that there's the special link.

If you created a moment — or you're a current member of a vibe — you can share it with a special link. The ordinary web link opens only that one thing in any browser. Guests get a read-only window without needing World App or an account, and they don't see anything else of yours.

A Vibe special link can also work as a Vibe invite. It begins as the same read-only window for a guest, including the Vibe's live or sealed moments, media, map and time context, comments, and aggregate reactions. Writing still requires World App sign-in. A signed-in visitor with a valid Vibe invite joins automatically; a guest who signs in returns to the same Vibe and joins then. Only Vibe invite links can do that — Moment links and other special links always stay read-only.

A few things keep this honest:

  • The access boundary follows the thing. Only a moment's creator can make its special link. Any current vibe member can make a Vibe invite, which opens only that vibe.
  • The link itself is read-only. It never authorizes a post, appreciation, or comment. After a valid Vibe invite holder signs in and joins, normal vibe member permissions apply; Main's World never replays an action they started as a guest.
  • You can kill it. Revoke a special link at any time and every copy of it, everywhere, stops working immediately.
  • One thing, not your world. The link opens the single moment or vibe it was made for. The rest of LAND and DEEP stays exactly as walled as before.

Messaging your connections​

There's no messaging inside Main's World at the moment. A button that opened a draft conversation in World Chat — World App's own end-to-end encrypted chat service — was removed in August 2026, because the way it reached World Chat needed rebuilding rather than patching. For now your connections are people you find on the map, not an inbox.

One honest thing to know either way: connecting is what exchanges World App usernames. When two Mains accept each other, each side's app receives the other's username — nothing shows it on screen today, but it is shared between you. That happens only between accepted connections — never for pending requests, never for strangers — and it mirrors what connecting already means here: you met in person and chose each other. To everyone else, you stay anonymous.

Your identity and privacy​

Main's World keeps personal identity out of the app. A World App sign-in proves control of a wallet, not personhood or uniqueness. Recorded verification is a separate status shown on the stats page.

  • We never ask for your name or your email. Ever.
  • You can join by approving a sign-in through World App. This establishes wallet control without revealing your name or email.
  • Orb verification is not required for posting, connections, vibes, or crews; it gates Vault claims. The stats page reports the verification status Main's World has recorded.

That privacy boundary is the foundation the rest of Main's World is built on.

Next: Moments — how you share one.