Last updated: July 30, 2026 · Effective version v7
1Scope and who is responsible
This Policy explains how Tierworld handles information when you use the website, an account, cloud publishing, templates, feedback, subscriptions or Google Drive backup. Tierworld is operated from Malaysia by Loh Qi Sheng, trading under the name Tierworld and also known online as Pandora. Contact: pandora.va7@gmail.com; +60 17-398 9981 (017-398 9981 within Malaysia).
Your local workspace and your Tierworld cloud account are separate. Signing in does not automatically upload local projects, Library cards or media.
2Sources of data and optional information
We receive data directly from you; from Google when you use Google sign-in or connect Google Drive; from Stripe when you start or manage a payment; from your browser and device; from hosting, security and performance providers; and from users who submit content reports or support information.
Providing an email address and authentication data is voluntary, but Tierworld cannot create or operate a cloud account without it. You can still use the local editor without signing in.
Payment information is required only if you purchase Supporter. Google Drive access is optional, but Drive backup and restore will not work without it. Optional profile fields, feedback attachments and diagnostic reports are not required to use the core local editor.
3Data kept in your browser
Projects, cards, images, tags, reviews, Library data, versions and local trash are stored mainly in IndexedDB. Preferences, cached entitlements and sign-in session tokens may be stored in localStorage. This data stays on the device unless you initiate a cloud feature.
A local event journal records limited action names, times and counts for up to 30 days or 1,000 events. It does not record the text or images in your projects. It is sent to Tierworld only if you choose to attach a diagnostic report to feedback.
You control local data through Tierworld's delete and export tools or your browser's site-data controls. Local project and Library trash is normally retained for 30 days before permanent deletion.
4Data processed by Tierworld's cloud services
Account data includes your user ID, email address, sign-in provider, display name, avatar, account preferences, subscription tier, account timestamps and authentication sessions.
Cloud content includes rankings, templates, card names and images, descriptions, tags, license and visibility settings, version and storage metadata, download counts, reports and moderation records that you choose to publish or upload.
Feedback data includes the category and message you submit, processing status, optional screenshots and, only if you choose to attach it, a diagnostic report containing app and browser environment details, storage totals and recent local action metadata.
Billing data includes Stripe customer, checkout, subscription and invoice identifiers; plan, payment and entitlement status; refund requests; and refund or dispute outcomes. Tierworld does not receive or store your full payment-card number.
Google Drive connection data includes your Google account ID, email, display name, avatar, connection time and an encrypted refresh token. Backup files are stored in Tierworld's private application-data folder in your Google Drive when you request a backup.
Technical data may include request time, route, browser or device characteristics, performance measurements such as Core Web Vitals, and network identifiers processed for hosting, security, fraud prevention and rate limiting.
5Why we use this data
We use data to provide the feature you request, authenticate accounts, save settings, publish and deliver cloud content, process templates and backups, manage subscriptions, respond to feedback and support requests, enforce quotas, prevent abuse, secure the Service and improve reliability and performance.
Where privacy law requires a legal basis, these activities are carried out as necessary to provide the Service or take steps you request, for legitimate interests such as security and product reliability, to meet legal obligations, or with consent where required. You may withdraw consent for an optional feature without affecting earlier processing.
Tierworld does not sell personal information and does not use Google Drive data, local workspace content or account data for third-party advertising or to train general-purpose AI models.
6Service providers and public sharing
Supabase provides authentication and the cloud database. Cloudflare provides R2 object storage and Turnstile security checks. Vercel hosts the website and provides Speed Insights performance measurement. These providers process technical or stored data needed to deliver their services.
Google processes data when you use Google sign-in or connect Drive. Stripe processes payment details and provides checkout, subscriptions, invoices, refunds and dispute handling. Their own privacy policies also apply to information they receive directly from you.
Public rankings and templates can be seen by anyone and may be copied or shared outside Tierworld. Unlisted content can be seen by anyone with its link. A template download transfers the content selected by its publisher to the recipient's browser.
We may disclose limited information if reasonably necessary to comply with law, protect users or the Service, or investigate abuse. We do not give private workspace content to other users unless you choose to publish or share it.
7Storage technologies
Tierworld uses IndexedDB and localStorage for the local workspace, preferences, caches, offline entitlement and authentication sessions. These are necessary for local-first, account and offline behavior rather than advertising.
Cloud providers may use essential cookies or similar technologies for authentication, security, checkout and service delivery. Tierworld does not currently include third-party advertising trackers or a behavioral advertising system.
8Retention and deletion
Local workspace data remains in your browser until you delete it, it expires from local trash, or browser storage is cleared. Tierworld cannot recover local data that was never uploaded.
Cloud account and content data is generally retained while your account or publication is active. Deleted or expired content may remain for a limited period while deletion jobs, security review, backups or dispute handling are completed. Some billing, moderation and security records may be retained longer where reasonably necessary or legally required.
A Google Drive connection and its encrypted authorization token are removed when you disconnect it or Google revokes access. Backups already stored in Google Drive remain until you delete them from Tierworld's Drive controls or Google Drive.
Feedback and its attachments are retained while needed to investigate the report, improve the Service and maintain an appropriate support record. You may ask us to delete personal information that is no longer required.
9Security and international processing
We use measures such as encrypted connections, scoped access tokens, row-level database controls, private storage for non-public files, encrypted Google refresh tokens and access checks. No service can guarantee perfect security, so please keep independent backups and avoid submitting unnecessary sensitive information.
Tierworld is operated from Malaysia. Depending on provider configuration and network routing, Supabase, Cloudflare, Vercel, Google and Stripe may process data in Malaysia, the United States, the European Union, Singapore and other locations where they or their subprocessors operate.
Tierworld uses provider contracts, access controls, encryption and applicable transfer mechanisms to protect data processed across borders. Infrastructure locations may change, so this Policy identifies the main expected regions rather than promising that each record stays in one country.
If a personal data breach is likely to cause significant harm, Tierworld will investigate, limit further exposure, preserve an incident record, and notify the relevant authority and affected individuals where required by applicable law.
10Your choices and rights
You can edit profile details and visibility settings, delete local items, remove publications or templates through available controls, disconnect Google Drive, manage or cancel a subscription through Stripe, and sign out to remove the active account session from a browser.
Account deletion is not yet available as a completed self-service feature. To request access, correction, deletion, restriction, objection or a portable copy where applicable, email pandora.va7@gmail.com. We may ask you to verify the account and may retain information that must be kept for legal, security or billing reasons.
You may also revoke Tierworld's Google access in your Google Account. Clearing browser site data removes local information on that browser but does not delete cloud content or Google Drive backups.
11Google API data
Tierworld uses the Google Drive appDataFolder scope only to create, list, restore and delete Tierworld backup files at your direction. It does not request access to the rest of your Drive files.
Tierworld's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google API data is not sold, used for advertising, or used to train generalized AI or machine-learning models.
12Policy changes and contact
We may update this Policy when Tierworld's features or data practices change. The date at the top identifies the current version, and material changes will be communicated in a reasonable way when required.
For privacy questions or requests, email pandora.va7@gmail.com or call +60 17-398 9981 (017-398 9981 within Malaysia). The Feedback page is available for product issues, but direct contact is better for requests containing private account information.