Privacy policy — Atlas World Model
By Atlas World Model EditorialUpdated 4 min read
Effective 2026-09-29. Previous version: 2026-09-03.
Who we are
atlasworldmodel.com (“we”, “the site”) is an independent website about World Labs’ Atlas and Marble world models, with a world generator that runs on the Marble World API. We are not affiliated with World Labs. We are the controller of the personal data described here. Contact: hello@atlasworldmodel.com.
What we collect and why
Your account
- Email address, and whether it is verified. Used to sign you in, to find your purchases, and to reply when you write to us.
- If you sign in with Google: your name, email address and profile picture URL, plus the sign-in tokens Google returns. We request only the basic
openid,emailandprofilescopes and do not read anything else from your Google account. - If you sign in with email and password: your password, stored only as a salted hash (never in plain text), plus one-time links for verifying your email address (valid for 24 hours) and resetting your password (valid for 1 hour). Accounts created before September 2026 with an email link keep working: set a password with “Forgot password” or continue with Google.
- Sessions. A session cookie keeps you signed in for up to 30 days. For each session we store the IP address and browser user agent it was created from, to spot misuse of your account.
- Abuse limits. To stop the sign-in forms being used to send mass email, we count verification and password-reset emails per address and per IP address. These counters expire within an hour.
Worlds you generate
- Prompts and settings. The text you type, the quality you choose and the input type are stored with the generation so you can see your history and so we can bill the right amount.
- Uploaded photos and videos go from your browser directly to World Labs through a signed upload link; they do not pass through or stay on our servers. We keep the file name and type.
- Results. Finished worlds (splat files and preview images) are hosted by World Labs. We store the links. These links are not protected by a password: anyone who has a link can open the file. We do not publish your worlds on the site, but do not generate anything you would not want someone with the link to see. World Labs decides how long the files stay available.
- Credits. A ledger of free credits, purchases, holds and charges, so your balance is correct.
Payments
Payments are handled by Stripe. We never see or store your card details. We send Stripe your email address and account ID, and store the payment ID, the pack you bought, the amount, the currency and any refund. Stripe processes your payment details under its own privacy policy.
The former waitlist
Before generation opened, the site ran an email list. For people on it we still hold the email address, the page they signed up from, any UTM parameters in that page’s URL, and the confirmation time. The list is closed to new signups. We will only use it to tell you if Atlas access widens beyond World Labs’ partners. Reply to any email from us, or write to hello@atlasworldmodel.com, and we will remove you.
Analytics and logs
- Analytics. We use Cloudflare Web Analytics, which sets no cookies, and Google Analytics 4 with IP anonymisation, which sets cookies, to see which pages are useful. You can block Google Analytics cookies in your browser without losing any feature of the site.
- Server logs. Cloudflare, our host, keeps short-lived request logs (IP address, user agent, URL) and our application logs (for example which payment event was processed) for security and debugging.
We do not sell personal data, and we do not use your prompts, uploads or worlds to train models.
Who processes your data
| Provider | What for | Data involved |
|---|---|---|
| Cloudflare | Hosting, database, email delivery, analytics, logs | Everything stored by the site |
| World Labs | Generating worlds (Marble World API) | Prompts, uploaded files, generated worlds |
| Stripe | Payments and refunds | Email, account ID, payment details |
| Google sign-in (if you use it), Google Analytics | Sign-in identity; analytics events and cookies |
World Labs processes your prompts and uploads under its own terms and privacy policy, which you can find on worldlabs.ai. Some of these providers process data in the United States.
Legal basis
- Contract: your account, generations, credits and payments, which we need to provide the service you signed up for.
- Legitimate interest: security logs, abuse limits and analytics.
- Consent: the former waitlist, which you confirmed by email.
- Legal obligation: keeping payment records.
How long we keep it
- Account, generation history and credit ledger: while your account exists. When you ask us to delete your account we delete these within 30 days.
- Payment records: as long as tax and accounting law requires, even after account deletion.
- Sessions: until you sign out or 30 days pass. Sign-in tokens: 15 minutes.
- Waitlist records: until you ask to be removed.
- Analytics: according to the retention setting of each analytics service.
Your rights
You can ask for a copy of your data, its correction, or its deletion, and you can object to analytics, by emailing hello@atlasworldmodel.com from the address on your account. There is no self-service delete button yet; we handle requests by hand. Deleting your account removes our copy of your data; generated files hosted by World Labs may remain reachable through their links until World Labs removes them. EU and UK residents can also complain to their data protection authority.
Children
The site is not directed at children under 16, and we do not knowingly collect their data.
Changes
When this policy changes we update the effective date above and note material changes in the changelog.