These Land Owner Terms apply to anyone who operates virtual land through the Platform — whether as owner, manager, or other delegated role. They are additional to the Terms of Service and the Privacy Policy. The Data Processing Addendum (DPA) forms a binding schedule to these Land Owner Terms and sets out the parties’ respective obligations under Articles 26 and 28 GDPR.
1. You are a joint controller
When tenants and visitors interact with your land through the Platform, the Platform processes their personal data on your behalf and for your purposes. Under Article 26 GDPR you act as a joint controller with the Platform for that data. The Platform handles all data subject requests centrally and forwards anything that requires your decision.
2. Allowed uses of visitor data
You may use visitor data only to manage your land. That includes moderation, security, rental management, community interaction, and reasonable customer support. You may not:
- export visitor data off the Platform, except summaries that do not identify individuals;
- use visitor data for marketing without their separate consent;
- cross-reference visitor data with any other dataset you hold, in a way that would re-identify visitors beyond what the Platform reveals to you;
- share visitor data with third parties.
3. Managers and delegated access
You may assign managers to help operate your land. By assigning a manager you confirm that they accept these Land Owner Terms, and you remain responsible for their compliance. You must remove a manager promptly when their delegation ends.
4. You are the visitor’s first contact
When a visitor on your land has a data-protection question or request, you are their natural in-world contact and you act as the intermediary with the Platform:
- Receive the request from the visitor and acknowledge it.
- If it is something you can resolve within your own scope — for example, removing a ban you applied, or correcting a remark you wrote — you may handle it directly.
- If it requires Platform action you cannot perform — account deletion, data export, removal of
records outside your land, anything cross-Platform — forward it promptly by in-world IM to
InworldOnlineSupport using
!contact <your message>. - You may not refuse to forward a request that requires Platform action, nor use the position of intermediary to discourage legitimate exercise of rights.
Visitors who prefer to deal with the Platform directly can also IM InworldOnlineSupport
with the message !forget to receive a one-time erasure link. You are the natural first
contact, but not the exclusive one — the Platform-direct route exists so visitors are never
dependent on a single land owner to exercise their rights.
5. In-world notice to visitors
Because visitors may never come to this website, you are responsible for making them aware in-world that their visit data is being processed. Put a brief notice somewhere visitors will see before they engage with your land — the parcel description, a small sign on the entry, a welcome notecard handed by a greeter, or the group charter / MOTD if you operate via a group. The notice must point visitors at you (the land owner) as their contact — you then act as intermediary with the Platform under section 4 above.
If you have enabled the Discord integration for your land or group, you must disclose that fact in the notice. Without disclosure the visitor cannot know that data is flowing to Discord, cannot identify you as the controller for that flow, and cannot exercise their right to erasure against the copy on Discord. Failing to disclose Discord forwarding is a breach of these Land Owner Terms.
You may copy this short notice as-is, or adapt it to fit the space available:
Privacy notice — while you are on this land, your avatar identifier, name, entry and exit timestamps, and any chat you exchange in the land's groups are recorded for moderation, security, and analytics. This data is visible to the land owner and their managers, kept for at most 24 months as raw records (anonymous per-area counts thereafter), and is never sold or used for marketing. Ban and eject records are retained indefinitely to prevent evasion. For any question or to exercise your data-protection rights, send me an in-world IM.
If you have the Discord integration enabled, append a sentence such as:
In-world chat and visitor identifiers from this land are also forwarded to a Discord channel I operate. Once a message is on Discord it is outside the Platform’s reach — IM me directly if you would like that copy deleted.
If you operate a public group through the Platform, a much shorter line is enough as the group MOTD or in the group charter:
Activity in this group is recorded for moderation. Questions: IM the group owner.
6. Data you push to Discord (or any external integration you enable)
When you enable the Discord integration for your land or your group, in-world chat, visitor avatar identifiers, and notifications start flowing out of the Platform and into Discord. Once a message is in a Discord channel it lives on Discord’s infrastructure and is outside the Platform’s reach. For that copy of the data you are the sole controller — the Platform has no ability to delete, edit, or moderate messages once they are on Discord.
You are responsible for retention and erasure of that data on Discord’s side. The retention windows in the Privacy Policy (chat 6 months, ban / eject indefinite, etc.) apply to data stored on the Platform — they do not, and cannot, apply to messages that have left the Platform and now live in a Discord channel.
In practice:
- Configure your Discord channels (or Discord’s auto-delete feature) to purge old visitor-identifying messages on a schedule consistent with the Privacy Policy’s retention windows.
- When the Platform forwards you a data-subject erasure request — or when a visitor approaches you directly — you must also delete the corresponding messages on Discord that contain the data subject’s avatar identifier or content.
- If you cannot honour the same retention on Discord, disable the Discord integration so that further data stops flowing out.
7. Security and incidents
If you become aware of unauthorised access to your management account, or of a security incident that may
affect visitor data, notify the Platform within 24 hours by in-world IM to
InworldOnlineSupport using !contact.
8. Effect of declining
Accepting these Land Owner Terms is a prerequisite for creating or managing land on the Platform. If you do not accept, you can continue to use the Platform as a visitor, but land creation and management features will remain unavailable.
Version 2026-05-27.