Privacy Policy

1. Who we are

WildOpen (wildopen.com, mcp.wildopen.com, our browser extensions, our Discord bot and our apps for AI assistants such as ChatGPT and Claude — the “Service”) is operated by O'Reilly Systems Corporation, a Massachusetts corporation. Questions or requests: our contact form. We do not sell your personal information or use it for advertising or to train AI models.

2. Website tools

The file and text tools on wildopen.com/tools (image compressor, PDF tools, QR codes, passwords, JSON/CSV, diff and others) run entirely in your browser. Files and text you add are processed on your device and are not uploaded to us. After your first visit the tools can work offline from your browser's cache.

3. Browser games

The games on wildopen.com/games run in your browser. Scores and progress are saved only on your device (browser storage) and are not sent to us.

4. AI connector (mcp.wildopen.com)

• Tool inputs. Inputs to connector tools are processed in memory to produce a result and are not stored or logged.
• Account (optional). If you sign in with an email link (for WildOpen Plus), we store your email address, an account id and your subscription status, plan and renewal date. Sign-in links are single-use and expire after 15 minutes; a sign-in cookie is set on mcp.wildopen.com. When you connect an AI assistant via OAuth we store the connection (client name, scopes and tokens; access tokens last 1 hour, refresh tokens 90 days). You can disconnect it at any time.
• Game state. Single-player games keep a small state (moves, clues, inventory, score) under a random session id, deleted 48 hours after the last move. If you are signed in, a session may be associated with your account to apply plan limits.
• Multiplayer rooms. Rooms store the nicknames players choose and the room's game state and event log. Standard rooms are deleted 24 hours after the last activity (and at most 72 hours after creation); persistent worlds hosted by Plus members after 7 days idle (30 days max); shared expanding worlds after 14 days idle (90 days max). When an expanding world ends, a read-only archive (title, recent events and player-added places with the nicknames that added them) is kept for 2 years.
• Leaderboards. If you submit a score, we store the nickname you choose, your score and a run id for 31 days. Nicknames are shown publicly; don't use your real name or email (we reject email addresses).
• Community worlds. Worlds that Plus members create are stored with their account; worlds submitted for publishing are reviewed by a moderator before being listed publicly.
• Moderation reports. If you report content, we store the report (the item reported and the reason) in a moderation queue. Authors of removed content receive a strike; 3 strikes in 90 days pause their ability to add content for 30 days.
• Suggestions. Ideas sent with the suggestion tool, plus any name or email you choose to include, are emailed to us for review.

5. Discord bot

When you use WildOpen slash commands in Discord, we receive the interaction from Discord, including your Discord user id and display name. We store your Discord user id with your current room (room code and player token) and, if you link it, your WildOpen account. Your display name may be used as your in-game nickname. The bot only responds to slash commands; it does not read or store your Discord messages.

6. WildOpen Plus and payments

Payments are processed by Stripe. We never see your full card number. Stripe shares your customer id, subscription status and billing country/postal code (for tax) with us. We keep billing records as required by tax law.

7. Email and contact forms

Messages you send through our contact form and suggestions submitted on wildopen.com are sent through Cloudflare's email service to our company inbox; both forms are protected by Cloudflare Turnstile. We use what you send, including the email address you give for a reply, only to answer you. Email sent to wildopen.com addresses is forwarded by Cloudflare Email Routing to the same inbox. Sign-in emails are sent through Cloudflare.

8. Analytics, logs and security

The Service runs on Cloudflare. Cloudflare processes your IP address and request details to deliver and protect the Service. We rate-limit by IP address and per-day counters to prevent abuse. Our Cloudflare Workers keep operational logs (time, path, status, errors), sampled for the connector, and Cloudflare provides us with aggregate traffic analytics. We don't log connector tool arguments or results. See Cloudflare's privacy policy.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

10. Your choices and rights

You can use the website tools and games without an account. To access, correct or delete your account and data, use our contact form and choose “My account or data”. The browser extension has its own notice at wildopen.com/privacy/extension.

11. Changes

We will post updates on this page and change the effective date.