✦ The Woven Realms

Privacy Policy

Effective and last updated: August 7, 2026.

KCW Labs operates The Woven Realms and is the controller of personal data processed through this website when data-protection law uses that term. KCW Labs is based in Tennessee, United States. Privacy questions and data-rights requests can be sent to support@kcwlabs.xyz or through the contact form at kcwlabs.xyz.

1. Who may use this site

The Woven Realms is intended only for adults who are 18 or older. The site does not knowingly request or collect personal data from children. If KCW Labs learns that personal data was submitted by a person under 18 in violation of the site rules, the information may be removed.

2. Information collected

Age confirmation. When you confirm that you are 18 or older, the site stores a first-party cookie containing only a confirmation value. It does not store your birth date, legal name, identification document, biometric information, or exact age.

Reviews. If you leave a review, the site stores the display name you provide, star rating, review text, the character or listing being reviewed, whether the review is approved for display, and the submission timestamp. Reviews are intended to be public after moderation or automatic approval.

Adoptable claims. If you claim an adoptable, the site stores the adoptable identifier, adoption status, adoption timestamp, and any optional profile or creator link you provide. A short-lived server session may also be used to make the adopted image available for download after the claim.

Technical and security data. The web server, hosting infrastructure, and security systems may automatically process standard request information such as IP address, browser and device information, requested URL, referring page, timestamps, and server or error logs. This information is used for delivery, troubleshooting, abuse prevention, and security.

Analytics data. Google Analytics is optional. If you consent, Google Analytics may process information such as page views, approximate location derived from network information, device/browser details, traffic source, session information, and analytics identifiers. The site does not intentionally load Google Analytics before analytics consent.

3. Why information is used and legal bases

Where the GDPR, UK GDPR, or similar law applies, KCW Labs relies on the following legal bases as appropriate:

  • Consent: for optional Google Analytics. You can refuse or withdraw analytics consent at any time without losing access to the site.
  • Performance of requested site functionality and the site Terms: to process a review you choose to submit, record an adoptable claim, and provide the related download workflow.
  • Legitimate interests: to operate and secure the site, prevent abuse and spam, maintain records needed to administer listings, moderate public submissions, troubleshoot errors, and protect the project and its visitors.
  • Legal obligations: when information must be retained, disclosed, or otherwise processed to comply with applicable law or a valid legal request.

4. Cookies and browser storage

The site uses a 24-hour age-confirmation cookie and a cookie that remembers your analytics choice for up to six months. A server-session cookie is created only when session functionality is needed, such as site management or the temporary post-adoption download workflow. Google Analytics cookies are created only after analytics consent and are configured by this site with a browser lifetime of no more than 180 days.

Full cookie details are listed in the Cookie Policy. You can reopen Cookie Preferences from the site footer at any time.

5. Analytics privacy settings

When analytics is allowed, The Woven Realms disables Google Signals and advertising-personalization signals in its Google Analytics configuration and limits the analytics cookie lifetime to 180 days without refreshing that lifetime on each page view. If you later reject analytics, the site instructs Google Analytics to stop collection for this property and removes accessible Google Analytics cookies created for the site.

Standard Google Analytics properties allow event-level user data retention settings of up to 14 months. Aggregated reporting may be retained differently by Google. Google’s own processing is governed by its terms and privacy documentation.

6. Sharing and service providers

KCW Labs does not sell personal information and does not use The Woven Realms to share personal information for cross-context behavioural advertising.

Information may be processed by service providers that help operate the site, including hosting and infrastructure providers. Font Awesome assets are currently delivered through cdnjs, a Cloudflare service, which means Cloudflare may receive ordinary network request information when those assets load. If you consent to analytics, Google processes analytics data as a service provider. Information may also be disclosed when required by law, to protect legal rights or site security, or in connection with a lawful transfer of the project or its operations.

7. External links

Character buttons, creator links, downloads, and other links may take you to third-party websites. Those services receive information directly from your browser when you visit them and are governed by their own privacy policies. KCW Labs does not control their privacy practices.

8. International processing

KCW Labs operates from the United States. If you visit from the European Economic Area, United Kingdom, Switzerland, or another jurisdiction, information may be processed in the United States or other countries where service providers operate. Where applicable law requires safeguards for international transfers, providers may rely on mechanisms such as adequacy decisions, contractual safeguards, or Standard Contractual Clauses.

9. Retention

  • The age-confirmation cookie expires after 24 hours.
  • The cookie-preference record expires after six months, after which the site asks again.
  • The server-session cookie expires when the browser session ends. Server-side session data is temporary and used only for the session feature that created it.
  • Public reviews may remain until they are removed by KCW Labs or a valid deletion request is completed, subject to legal or security reasons that require limited retention.
  • Adoption records may remain while needed to preserve the adopted status of a listing, document the claim, resolve disputes, or administer the project.
  • Server and security logs are retained only for as long as reasonably needed for security, troubleshooting, abuse prevention, and hosting operations.
  • Google Analytics browser identifiers created by this site are configured not to persist longer than 180 days. Google Analytics event-level retention for a standard property does not exceed the retention options made available by Google, currently up to 14 months.

10. Your privacy rights

Depending on where you live, you may have rights to request access to personal data, correction, deletion, restriction of processing, data portability, or objection to certain processing. Where processing is based on consent, you may withdraw that consent at any time. Withdrawing consent does not make earlier lawful processing unlawful.

People in the EEA or United Kingdom may also have the right to lodge a complaint with the data-protection authority in their country or region. U.S. state privacy laws may provide additional rights where their applicability thresholds and conditions are met.

To exercise a privacy right, contact support@kcwlabs.xyz. KCW Labs may need enough information to locate the relevant record and reasonably verify that the request concerns you, but will not ask for more information than necessary for that purpose.

11. Automated decisions

The Woven Realms does not use personal data to make solely automated decisions that produce legal or similarly significant effects about visitors.

12. Security

KCW Labs uses reasonable technical and organisational measures intended to protect information handled by the site, including limited data collection, secure cookie attributes for server-managed cookies, access controls for site management, and HTTPS on the public site. No internet service can guarantee absolute security.

13. Changes to this policy

This policy may be updated when the site’s features, service providers, or legal obligations change. Material changes will be published with a new effective date.

Return to age confirmation