Legal
Privacy Policy
The short version. Playing the game collects nothing — your progress stays in your browser and never reaches us. Opening a shop account is different: to deliver physical orders we collect your name, email, mobile number and delivery address, and we store them on our server. Payments are handled entirely by Razorpay; we never see your card or UPI details.
This policy explains what happens to information when you use worldboardgame.com and the World Game apps ("World Game", "the Service"). It is written by and applies to Nuvo Energy Global Private Limited ("we", "us", "our"), the operator of World Game.
1. What we collect
World Game has two quite different halves, and it matters which one you are using.
Playing the game collects nothing. The game, the avatars and the sign-in shown in the site header all run entirely in your browser. Your progress, your chosen avatar and your Google profile details are written into your own browser's local storage and are never transmitted to us. You can play the whole free game, as a guest, without giving us anything.
The shop is a real account system. To sell and deliver physical merchandise we need to know who you are and where to send it, so creating a shop account and placing an order does send personal information to our server, where it is stored. That is the part of the Service this policy is mostly about.
Information handled by the Service falls into these categories:
| What | Where it goes | Why |
|---|---|---|
| Game progress — saves, stats, in-game gems, leaderboard entries, chosen avatar, theme | Your browser only | So your game is still there when you come back |
| Guest name (e.g. "Guest 4821") | Your browser only | A throwaway label so you can play without signing in |
| Google profile shown in the game header — name, email, picture | Your browser only | To greet you by name and show your avatar |
| Shop account — name, email address, mobile number, password | Our server | To create and secure your account |
| Delivery address and order history | Our server | To deliver your orders and let you see past ones |
| Payment details (card, UPI) | Razorpay only — never us | We receive a payment reference, never your payment credentials |
| Custom artwork you upload for personalised products | Sent with your order | To print the item you ordered |
| Standard web server logs (IP address, browser, page, timestamp) | Our hosting provider | Serving the site, security, diagnosing faults |
We do not run advertising networks, behavioural tracking, or cross-site profiling. We do not sell personal information, and we never have.
2. Signing in with Google
"Continue with Google" uses Google Identity Services. Google asks you to confirm, then hands
your browser a signed token containing your basic profile — name, email address, profile picture
and a Google account identifier. We request only the basic openid, email
and profile scopes. We never ask for access to your Gmail, Drive, Contacts or
Calendar, and we cannot post anything on your behalf.
What happens next depends on where you signed in:
- In the game — your browser reads the token and saves the profile locally so the header can greet you. Nothing is sent to us.
- In the shop — signing in creates or opens your shop account, so your name and email address are sent to our server and stored there, exactly as if you had filled in the sign-up form. It simply saves you choosing a password.
Signing in is optional — "Continue as guest" gives you the full free game. Google's own handling of your sign-in is governed by the Google Privacy Policy, and you can review or revoke World Game's access at myaccount.google.com/permissions.
3. Where your data actually lives
Game data is kept in your browser's local storage rather than in tracking cookies. Local storage is a private notepad only worldboardgame.com can read; it never travels to other websites and is not shared between devices or browsers.
Your game progress does not follow you between devices. A game started on your phone will not appear on your laptop, and signing in with the same Google account on a second device will not restore it. To erase it, sign out and clear site data for worldboardgame.com — there is nothing on our side to delete.
Shop account data — your name, email, mobile number, password, delivery address and order history — is different. It is stored on our server so that it is there when you sign in again, on any device. It is transmitted over an encrypted HTTPS connection, and you can ask us to delete it at any time (see section 9).
4. How information is used
Information is used only to run the Service: to keep your game progress and preferences, to create and secure your shop account, to take payment, to deliver and support your orders, to contact you about an order, and to keep the site secure and working.
We do not use it for advertising, profiling, automated decision-making, or credit or eligibility scoring, and we do not train machine-learning models on it. We will only send you marketing email if you have asked for it, and every such email has an unsubscribe link.
Where the law requires a lawful basis (for example under the EU/UK GDPR), ours is performance of a contract with you for your account and orders, our legitimate interest in operating and securing the site, consent for optional marketing, and legal obligation for tax records.
5. Who else is involved
These third parties are part of delivering the Service. Each has its own privacy policy.
- Razorpay — processes payments. You enter card or UPI details on Razorpay's own secure page, never on this site. We receive a payment reference and status, never your payment credentials.
- Google — Google Identity Services for sign-in, Google Fonts for typefaces, and Google Play for app distribution and Gold purchases.
- YouTube — embedded trailers on the site, which may set their own cookies when a video loads.
- Our hosting provider — serves the website, stores the shop database, and keeps standard access logs.
- Delivery partners — receive your name, address and phone number so they can deliver your order. Nothing more.
We do not sell or rent your information to anyone. We may disclose it where legally required, or to establish or defend legal claims.
6. The shop, accounts and payments
To buy personalised merchandise you create an account with your name, email address, mobile number and a password, or sign in with Google (which skips the password). We use these to identify you, secure your account, confirm your order and contact you about it.
At checkout you provide a delivery address. We keep your address and order history so you do not have to re-enter them and so you can see what you have ordered.
Payment is handled entirely by Razorpay on its own page. We never see, receive or store your card number, CVV or UPI PIN.
Where you upload custom artwork, we use it solely to produce and deliver your order. We may decline orders containing unlawful or infringing material.
World Game Gold in the app is sold through Google Play; that transaction is between you and Google, and we receive confirmation of the purchase, not your payment details.
7. The Android apps
The World Game apps on Google Play store game progress on your device. Google Play handles installation, purchases and refunds, and provides us with aggregate, non-identifying statistics such as install and crash counts. The Data Safety section on each app's Play Store listing describes that app's specific data handling, and is the authoritative source for the apps.
8. Children
World Game is a family game and children are welcome to play it. Playing collects no personal information at all, so a child can play the whole free game as a guest without anything reaching us.
Shop accounts are different. You must be 18 or older to create one, or be a parent or guardian creating it on a child's behalf and supervising its use. We do not knowingly create accounts for children acting on their own, and we do not knowingly collect personal information from a child under 13.
If you believe a child has created an account without a parent's involvement, contact us at nuvoenergyglobal@gmail.com and we will delete the account and its data.
9. Your rights and choices
You may have rights to access, correct, delete, port or restrict the processing of your personal information, to object to processing, and to withdraw consent — under India's Digital Personal Data Protection Act, 2023, the EU and UK GDPR, and US state laws such as the CCPA/CPRA.
Game data you control yourself: sign out, or clear site data for worldboardgame.com, and it is gone.
Shop account data is held by us, so to exercise a right over it — to get a copy, correct it, or have your account and its data deleted — email nuvoenergyglobal@gmail.com from the address on your account. We will respond within 30 days. We will delete your account and saved address on request; invoice records for past orders are kept for the eight financial years Indian tax law requires, as explained in section 10.
You can revoke Google sign-in access at any time at myaccount.google.com/permissions. We do not sell or share personal information, so there is nothing to opt out of. We will not discriminate against you for exercising any of these rights. If you are in the EU or UK you may also complain to your local supervisory authority.
10. Retention and security
Game data in your browser stays until you clear it.
Shop accounts are kept until you ask us to close your account, after which the account and its saved delivery address are deleted.
Order and invoice records are kept for eight financial years, which is the period Indian company and tax law requires us to retain books of account, and are deleted after that. This means that if you close your account we will still hold the invoice records for past orders until that period expires; we will not use them for anything else.
Server logs are kept for a short period for security and diagnostics.
How your account is protected
The site is served over HTTPS, so everything you submit is encrypted in transit. Your password is never stored in a readable form. It is put through a one-way hash (bcrypt) before it is saved, which means nobody — including us — can read it or recover it from our database; when you sign in, the password you type is hashed again and the two hashes are compared. Database queries use prepared statements, and our server configuration blocks direct web access to the application's internal files and configuration.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password, and never reuse a password from another site.
Nuvo Energy Global Private Limited is based in India and your data is stored there. The third-party services named above may process data in other countries under their own safeguards.
11. Changes to this policy
We may update this policy as the Service changes. The effective date at the top always reflects the current version. If a change materially affects how your information is handled — in particular if we begin collecting a new category of data — we will say so prominently on the site before the change takes effect.
12. Contact us
Questions, requests or complaints about privacy:
Nuvo Energy Global Private Limited
Email: nuvoenergyglobal@gmail.com
Website: worldboardgame.com
World Game is an independent game. It is not affiliated with, endorsed by, or sponsored by Google LLC. Google Play and the Google Play logo are trademarks of Google LLC.