Last updated: September 1, 2026
Sandbox Simulator ("the Service," "we," "our," or "us") is a simulation platform available at sandboxsimulator.com and through related web, desktop, account, and cloud-sync features.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have. By using the Service, you agree to the practices described here.
If you create an account, we collect information such as your email address, authentication details, username, avatar, profile settings, account status, and sign-in provider information. If you sign in with a third-party provider such as Google or Discord, we receive the information that provider shares with us, such as your email address and basic profile details.
The Service stores simulation saves, player saves, worlds, maps, settings, generated histories, imports, and related gameplay or project data. Local saves are stored on your device using browser storage or desktop app storage. If you use cloud sync, your saves are stored on our hosted backend so they can be restored and synced across devices.
If you upload, import, edit, publish, or share content, we process that content and related metadata so the Service can store it, validate it, display it, and make it available through the features you choose to use.
If you make a payment, our payment provider processes your payment details. We do not store your full card number. We may receive limited payment metadata such as amount, currency, billing country, status, receipt details, and the last four digits of a payment card.
We collect usage and technical data such as pages viewed, approximate location, browser and device type, operating system, performance metrics, error states, referral URLs, and general interaction patterns. This helps us operate, debug, secure, and improve the Service.
We use cookies, localStorage, IndexedDB, and similar technologies to keep you signed in, remember preferences, save local work, support cloud sync, prevent abuse, measure performance, and display ads where enabled.
Where laws such as the GDPR apply, we process personal data based on performance of a contract (providing the Service), legitimate interests (security, improvement, analytics, support), consent (where required for cookies, ads, or marketing), and compliance with legal obligations.
We use service providers to run the product. We do not sell your personal data. Providers may include:
Where ads are enabled, Google and other advertising partners may place or read cookies in your browser, or use web beacons, IP addresses, and other identifiers to serve, personalize, and measure advertising. Learn more about how Google uses information from partner sites and apps.
You can manage personalized ad settings through your browser and through Google Ads Settings. Blocking cookies may affect sign-in, local saves, preferences, or other functionality.
We and our providers may process and store information in Canada, the United States, the European Union, and other countries. Where required, providers rely on recognized transfer safeguards such as Standard Contractual Clauses or equivalent mechanisms.
We keep account data and cloud saves while your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize personal data within a reasonable period, except where retention is required for legal, tax, accounting, security, backup, or dispute purposes. Local saves remain on your device until you delete them through the app or your browser/device tools.
We use reasonable technical and organizational measures to protect information, including reputable infrastructure providers, encryption in transit, authentication controls, and access restrictions. No system is perfectly secure. Use a strong password, protect your sign-in providers, and keep your own backups of important saves or exports.
Depending on where you live, you may have rights to:
You can manage much of your data in account settings, by exporting saves, by clearing local browser data, or through your payment/OAuth providers. To exercise other rights, contact us at [email protected].
The Service is not intended for children under 13, and you must be at least 13 to create an account. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will take appropriate steps to delete it.
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Continued use after changes take effect means you accept the updated policy.
Questions about this Privacy Policy or our data practices can be sent to [email protected].
