Skip to main content

Privacy Policy

Effective and last updated: August 24, 2026

This Privacy Policy explains how Pixel Potion Creative LLC ("Pixel Potion," "we," "us," or "our"), based in Austin, Texas, USA, handles personal information for Main's World on mains.world, mainsworld.org, and Main's World within World App (together, the Service). Contact us at hello@mains.world.

This Policy covers information Pixel Potion handles for the Service. World App, World ID, World Chain, and related World services are provided by other organizations and have their own terms and privacy notices. Review the current World Privacy Notice and the provider notices identified in the World ID legal center.

1. Information we collect​

Depending on the features you use, we may collect:

  • wallet and authentication identifiers, World verification status, profile information, usernames, and connection choices;
  • moments, media, comments, reactions, captions, and related metadata;
  • precise or coarse location and location history when a feature requires it;
  • device, notification, session, browser, and operational information;
  • payment, credit, $MAIN, and transaction records where those features are used;
  • support messages and the information you include in them; and
  • security, moderation, and operational logs.

We may receive information from World or World App when you choose to connect or use the Service through them, and from providers that support authentication, hosting, payments, security, moderation, and operations.

2. How we use information​

We use information to provide and improve the Service; authenticate users; maintain profiles, connections, and chosen sharing settings; show moments and Vibes; provide support; process applicable transactions; protect people and the Service; prevent fraud and abuse; comply with law; and communicate about service matters.

We do not sell or rent personal information. We do not share personal information for cross-context behavioral advertising or use it for targeted advertising.

Depending on the context and applicable law, we process information because it is needed to provide the Service you request, because we have legitimate interests in operating and protecting the Service, with your consent, or to meet legal obligations. Where processing relies on consent, you may withdraw that consent prospectively.

We share information with providers that need it to operate the Service, including Cloudflare for hosting and observability, Supabase for application services, World and World App where relevant, Anthropic for AI-assisted safety, and providers for authentication, payments, security, and support. Each provider handles information under its own agreement and privacy terms.

Mapbox receives coordinates and search terms needed to provide maps, search, and geocoding. The National Weather Service and other public alert providers may receive rounded coordinates needed to return nearby safety alerts.

We may also disclose information when required or reasonably necessary to comply with law, enforce our terms, protect rights and safety, investigate abuse or fraud, or complete a corporate transaction such as a merger, financing, or acquisition.

What you share depends on the audience you choose. SKY is public and can include precise location. Unauthorized LAND viewers may see only a locked, approximately 110-meter location hint without identity or content; authorized LAND viewers receive the full view, including precise location. DEEP provides no location hint to unauthorized viewers. Authorized Vibe viewers and valid special-link holders receive the complete view allowed for that exact content. Public content and profile information may be viewed, copied, or shared by others.

A special link is a bearer secret for a complete read-only view of its exact Moment or Vibe. Depending on the content, that view can include precise location, comments, otherwise non-public Vibe moments, and a privacy-trimmed RunPal route or GPX. A signed-out Vibe-link holder remains a read-only guest. An authenticated holder of an exact Vibe link may automatically join that Vibe after server validation. Except for that exact-link authenticated Vibe auto-join, special links grant no other write access; posting, commenting, reacting, and other actions require the applicable account and authorization.

Special links may last 1 hour, 1 day, 7 days, or 30 days (7 days by default), and a Vibe link cannot last beyond 24 hours after the event ends. Links can be revoked, expire, or be invalidated when the underlying content is deleted. Do not share a special link publicly if its content is sensitive.

4. AI-assisted safety and privacy warnings​

Main's World currently uses Anthropic's Claude for two distinct purposes:

  1. Mandatory SKY moderation. SKY-bound posts, edits, and comments send the submitted text and supported images needed for automated safety review. The system may block public placement when it identifies sexual or explicit material, hate, graphic violence or gore, clearly illegal content, or cannot confidently clear the submission for a broad public-facing audience. The gate also fails closed if the review is unavailable. SKY also rejects provenance-declared or high-confidence AI-generated images, although these signals are imperfect and may miss generated images or flag genuine ones. A refusal is visible in the administrator queue for seven days. Signed access to a quarantine copy of refused SKY media expires after seven days. The underlying quarantine copy is removed by a later administrator cleanup, not necessarily at that seven-day boundary, and refusal records may remain in operational storage after leaving the queue. An administrator may override a false positive for a new post. There is currently no user-facing appeal feature.
  2. Advisory privacy assistant. A transient, downscaled image can be sent to Claude to identify possible privacy concerns such as homes, children, bystanders, screens or documents, license plates, and identity or location exposure. Pixel Potion discards that assist image after the response. The assistant may show strong warnings, but it is advisory and does not block posting.

We do not use facial recognition or biometric profiling, and we do not train Pixel Potion's own general-purpose AI models on user content. Anthropic processes submitted material as our service provider under its applicable terms.

5. Browser storage, analytics, and logs​

We use essential browser storage, including session or local storage, for authentication, settings, and guest-invite handoff. We may use Cloudflare's cookie-free Web Analytics and operational logs to understand performance and protect the Service. You can control some browser storage through your browser settings, though disabling essential storage may affect how the Service works.

6. Retention and deletion​

We keep active account and content information while needed to provide the Service. You can edit or delete content through available features. To request account deletion, email hello@mains.world. We do not maintain a separate archive of deleted content.

Refused SKY items leave the administrator queue after seven days, and signed access to quarantine media expires after seven days. Underlying quarantine copies are removed by a later administrator cleanup, and refusal records may remain in operational storage after leaving the queue. Deletion cannot erase public-blockchain records. Provider backups, fraud and security records, or records required by law may take a limited time to age out or may remain where technically or legally required.

7. Security​

We use reasonable technical and organizational measures intended to protect information. No service or transmission is completely secure, so use care with credentials, special-link secrets, and sensitive content.

8. International users and your choices​

The Service may be used from outside the United States, and information may be processed in the United States or other places where we or our providers operate. Those locations may have different data-protection laws than your home country.

Where applicable, you may request access to, correction of, export of, or deletion of personal information by emailing hello@mains.world. We may need to verify your identity and may limit a request where allowed or required by law. Depending on where you live, you may also have rights to object to or restrict certain processing, withdraw consent, appeal a denied privacy request, or complain to a data-protection authority.

9. Children​

The Service is not for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact hello@mains.world.

10. Changes and contact​

We may update this Privacy Policy as the Service, law, or our practices change. We will post the updated version with a new effective date and provide any additional notice required by law.

Questions or requests? Contact Pixel Potion Creative LLC at hello@mains.world, Austin, Texas, USA.