Privacy Policy

Effective date: July 8, 2026
Last updated: July 8, 2026

This Privacy Policy describes how World Machine Software LLC ("we," "us," or "our") collects, uses, and protects information when you use the World Machine desktop application (the "Software"). This policy applies to the Software itself; it does not cover our website or online store.

By installing or using the Software, you agree to the practices described in this policy.

In Brief

The details below are authoritative, but here is the short version:

Your creative work never leaves your machine. We never collect terrain files, project contents, heightfields, file names, file paths, or rendered output.
License activation sends your license key, a machine identifier, and your email to Reprise Software, the third-party service that validates World Machine licenses.
Telemetry is pseudonymous (keyed to a random installation ID, never your name or license), can be fully disabled in Preferences → Misc → Privacy, and you can inspect exactly what has been recorded on your machine from that same screen.
Crash reports are only sent if you choose to send one when a crash occurs.
Update checks contact our server to find new releases and can be disabled in preferences.
We don't sell your data, use it for advertising, or share it for anyone else's marketing.

1. Information We Collect

1.1 License Activation Data

License activation is handled through Reprise License Management (RLM), a third-party licensing service. When you activate a World Machine license, the Software transmits the following to activation servers operated by Reprise Software on our behalf:

Your license key
A machine identifier derived from hardware characteristics of your computer, used to enforce seat limits
The email address associated with your license
Software version and operating system version
The date and time of activation
Your IP address (received automatically as part of the network request)

1.2 Telemetry and Usage Analytics

The Software collects pseudonymous usage analytics to help us understand how World Machine is used and to prioritize improvements. Telemetry is keyed to a randomly generated installation identifier used only for analytics; it never includes your name, email address, or license key. This includes:

Which features, device types, and nodes are used, and how often
Session information (session length and count, install date, and build activity such as build counts and resolutions)
Performance data (build and responsiveness timings, CPU model and core count, installed RAM, and whether GPU compute is available)
Software version, operating system version, and application settings (such as thread counts and preview-quality settings)
Counters indicating that a crash or error occurred (detailed crash reports are separate — see Section 1.3)
Abandoned search terms from the node quick-add box, recorded only when a search is closed without choosing a node, normalized and capped at 64 characters — this is the only user-typed text ever collected

All dates in telemetry are recorded at day granularity only — the Software deliberately does not keep a fine-grained timeline of your activity.

What we do NOT collect: We never collect your terrain files, project contents, heightfield data, file names, file paths, or any imagery or output you create with the Software. Your creative work never leaves your machine.

You can inspect exactly what has been recorded on your machine at any time via Preferences → Misc → Privacy → "See exactly what we collect," which opens a report of your stored telemetry, including your installation identifier.

When your device transmits telemetry, our servers record the sending IP address and a timestamp in a separate server log used solely for abuse prevention.

1.3 Crash Reports

If World Machine crashes, the Software may offer to send a crash report. Detailed crash reports — which can include stack traces and diagnostic state — are transmitted only through that crash-report dialog, at your choice each time. Routine telemetry contains only counters indicating a crash occurred.

1.4 Software Update Checks

The Software periodically contacts our update server (update.world-machine.com) to check for new versions. An update check transmits your license key (to determine which releases your license is entitled to), the installation identifier, Software version and update channel, operating system and CPU architecture, and edition. As with any network request, our server receives your IP address. Update check-ins (version, platform, edition) are recorded for aggregate usage metrics. Automatic update checks can be disabled in the Software's preferences; a manual check transmits the same information.

1.5 Opting Out of Telemetry

You may disable telemetry at any time in Preferences → Misc → Privacy. Disabling telemetry stops all collection and deletes any locally stored, not-yet-sent telemetry. It does not affect any functionality of the Software. License activation data cannot be disabled, as it is required to validate your license. Crash reports remain optional per-incident (Section 1.3), and update checks are controlled as described in Section 1.4.

2. How We Use Your Information

We use the information described above to:

Validate licenses and prevent unauthorized use of the Software
Provide customer and technical support
Diagnose crashes, errors, and performance problems
Understand which features are used so we can prioritize development
Maintain the security and integrity of our activation infrastructure

We do not sell your personal information, use it for advertising, or share it with third parties for their own marketing purposes.

3. Legal Bases for Processing (EEA/UK Users)

Where the EU or UK General Data Protection Regulation applies, we process your data on the following bases:

Contract performance: License activation data is processed because it is necessary to deliver the Software license you purchased.
Legitimate interests: Pseudonymous telemetry, diagnostics, and update checks are processed under our legitimate interest in improving and securing the Software. You may object by disabling telemetry as described in Section 1.5.
Legal obligation: We may retain certain records where required by law (e.g., tax and transaction records held by our store, covered separately).

We share data only with:

Reprise Software, Inc., which operates the license activation infrastructure (Reprise License Management) used to validate World Machine licenses
Legal authorities, if required by law, court order, or to protect our legal rights
A successor entity, in the event of a merger, acquisition, or sale of assets, in which case this policy will continue to apply to previously collected data

Our servers (including those receiving telemetry and update checks) sit behind Cloudflare, a network security and content-delivery provider, which processes request metadata such as IP addresses in the course of routing traffic.

In addition, telemetry data is stored on rented server infrastructure operated by a cloud hosting provider. The provider does not access, use, or process this data; it simply hosts the systems on which the data resides.

5. Data Retention

Activation records are retained indefinitely. World Machine licenses are perpetual, so these records are required for as long as your license exists in order to validate activations and provide support.
Telemetry data is retained in installation-ID-linked form for no more than one year, after which it is aggregated (with the installation identifier removed) or deleted.
Crash and diagnostic reports are retained for as long as they remain useful for diagnosing and preventing defects in the Software.

6. Data Security

We use industry-standard measures to protect your data, including encrypted transmission (TLS) between the Software and our servers and access controls on our infrastructure. Telemetry is stored separately from customer and licensing records. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your data (note that deleting activation records may prevent future license validation)
Object to or restrict certain processing
Data portability — receive your data in a machine-readable format
Withdraw consent where processing is based on consent

For telemetry, requests are keyed to your installation identifier, which you can find in the Software's transparency report (Preferences → Misc → Privacy).

To exercise any of these rights, contact us at privacy@world-machine.com. We will respond within the timeframe required by applicable law. California residents may exercise equivalent rights under the CCPA/CPRA; we do not sell or share personal information as those terms are defined under California law.

8. International Transfers

License activation is processed by Reprise Software's hosted Activation Pro service, and our telemetry infrastructure is cloud-hosted, both with servers located in the United States. If you use the Software from outside the United States, your activation and telemetry data will be transferred to and processed there. Where required, we rely on appropriate safeguards such as standard contractual clauses.

9. Children's Privacy

The Software is not directed at children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be announced in the Software's update notes and on our website. The "Last updated" date at the top reflects the most recent revision. Continued use of the Software after changes take effect constitutes acceptance of the revised policy.

11. Contact Us

For privacy questions or to exercise your rights:

World Machine Software LLC
3610 61st Ave SW
Seattle, WA 98116
United States
privacy@world-machine.com

If you are in the EEA or UK and believe we have not addressed your concern, you may lodge a complaint with your local data protection authority.