Privacy
What we collect, and what we do not
You are letting your children talk to a robot on a server we run. You are owed a straight answer about where that goes. This page is the straight answer, and it describes what the software actually does rather than what we might one day be entitled to do.
Last updated 6 October 2026
If you join the waitlist
This is everything that is stored:
- Your email address. So we can tell you when there is a world to log in to.
- What brought you here, from the list on the form.
- The first thing you said you would ask for, if you filled that in. It is optional, and it is the single most useful thing anybody sends us.
- The date you signed up.
- From your connection: your IP address, an approximate city and country, and the page that sent you to us, if there was one. We use the location to choose where to put servers, and the page to see which links people follow.
Joining the list does not create a password or a world. There is no tracking pixel in the confirmation email. We have never sold a mailing list and are not going to start with this one.
If you use an invited account
We store your account email, invitation and trial status, and the identifiers needed to connect your account to its worlds. Sign-in uses an emailed code and a secure session cookie. We retain session and rate-limit records to run sign-in and protect accounts; signing out ends that browser session.
World records include the name, region, server type, Minecraft Java profile names and profile identifiers you add to the player list, and hosting status. We use Minecraft’s profile service to verify player names. Game data and operational logs are stored on the hosting service; worlds currently run on Fly.io in the selected region. Account settings and application records use Quant.
Billing uses Stripe’s hosted pages. Cubelings stores customer, checkout, subscription and invoice identifiers, payment status and service periods. We do not store full card details. Cog usage records include token identifiers, measured AI usage and credit grants so we can show usage and apply allowances. Features labelled sandbox use test payments.
If you send feedback from your dashboard
We store what you write, its category, your account email and identifier, and when you sent it. If you select a world, we also store its identifier and name. Cubelings administrators can read this to help you and improve the product. It is not a public review.
You can see your submissions, their status and our latest reply in your dashboard. We keep that feedback until it is deleted; it does not expire automatically. You can request deletion at the address below. The feedback form does not automatically attach game chat, server logs or browser diagnostics. Please leave out passwords, sign-in codes and payment details.
If you play
Cog is an AI player. When somebody types a message to it, that message is sent to an AI provider so that a reply can be generated, along with enough about the world — where you are standing, what blocks are nearby, what Cog has built recently — for the answer to make sense. That is how it is able to answer “build it over there” at all.
What that means in practice: what your children type to Cog leaves our server. It is not published, it is not sold, and it is not used to train anybody’s model. But it is processed by a third party, and you should know that before your eight-year-old starts telling a robot about their day.
Who processes it: requests go through OpenRouter, which passes each one to the company that runs the model. Today that is Z.ai (GLM) for chat, with DeepSeek as a backup, and Google (Gemini) for designs, with Anthropic (Claude) as a backup. We ask OpenRouter to send our requests only to providers that keep no copy of them and do not train on them (OpenRouter’s zero data retention setting).
Your world itself — the blocks, the builds, the terrain — stays on the server we run for you. Cog writes down what it changes so that it can be undone. That record is yours and lives with your world.
Children
This product is for families, so this section is not a formality.
The account belongs to an adult. We do not ask children for an email address, a name, an age, or anything else — a child plays by joining a world an adult already set up, with a Minecraft username the adult whitelisted. We do not knowingly collect personal information directly from anyone under 13.
A child does type freely to Cog, and children volunteer things nobody asked for. See the section above for where that goes. Hosting-only world types do not include Cog. On a Paper world, the owner can take Cog out from the world’s settings at any time; Cog then leaves the world and reads no chat until the owner brings them back.
The website
This site uses Google Analytics to count visits and see which pages people read. It tells us that forty people read the pricing page; it does not tell us who they were. If you block it, everything on the site still works — nothing here is gated behind being measured.
What we have never done
- Sold or rented anybody’s details.
- Run advertising, or shared anything with an advertising network.
- Put your world, your builds or your chat on a public list. Your world is whitelisted and appears on no server directory.
Getting rid of it
Email hello@cubelings.com and ask. We will delete your waitlist record, or your account and world, and tell you when it is done. You do not have to give a reason and you will not get a retention offer.
If you are in the UK or the EU, this is your right of erasure under the GDPR, and the rest of those rights — access, correction, portability, objection — go to the same address. If you are in California, the CCPA rights work the same way and the answer to “do you sell my personal information” is no.
If this page changes
6 October 2026: named the AI providers that process what is typed to Cog, and the zero data retention setting.
14 October 2026: every world now uses OpenRouter, so the older AI service is no longer listed; the waitlist section lists everything a signup stores, including what comes from your connection.
1 October 2026: added invited account, session, world, hosting, billing and AI usage records; clarified hosting-only worlds.
30 September 2026: added what is stored when you send dashboard feedback.
The date at the top moves and the change is described here. If we ever start doing something with your data that this page does not describe, we will email you before it happens rather than quietly editing the page.
Cubelings, ABN 95 762 314 963, Queensland, Australia, is responsible for the personal information on this page. Questions about any of this: hello@cubelings.com. A person reads it.