Wonderby

Wonderby Privacy Policy

Effective October 20, 2026 · Operated by Tiny Echo Limited

This policy explains what Wonderby collects, how we use it, who processes it for us, and how you can delete it.

Scope

This policy covers the Wonderby website (wonderby.momomolo.ai) and the Wonderby apps for iOS and Android (together, the “Service”). All three use the same backend.

Information we collect

How we use it

We do not sell personal information or use it for advertising. The Service includes no third-party analytics, advertising, or crash-reporting SDKs.

What other users can see

Your nickname, avatar, bio, profile background, and any works you make public are visible to other users. Private works and your play history are not shown to other users; platform administrators can view them to handle reports and fix problems.

Data from your Google account

When you sign in with Google, the Service requests only the openid and profile scopes and uses only your Google account’s unique identifier and name: the identifier recognizes your account, and the name becomes your initial nickname, which you can change at any time. We do not use Google user data for advertising, do not sell it, and do not use it to train AI models. Wonderby’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers and international transfers

To run the Service, we share the data needed with these providers:

As a result, your data may be stored and processed outside your country or region.

Storage on your device

The website stores a sign-in token (valid for up to 90 days) and preferences such as interface language, color mode, and sidebar state in your browser. Third-party sign-in uses a one-time HttpOnly cookie to exchange credentials. The apps store a sign-in token, interface preferences, and an image cache on your device. We do not use advertising or cross-site tracking cookies.

Retention

We keep your account details, works, and play history while your account exists. Deleted works are no longer shown to others, but their records remain in version history and backups so that other players' existing saves and works that reference them keep working. Server logs are kept only as long as needed for security and troubleshooting.

Access, correction, and deletion

You can view and edit your profile under Me, and delete your own works under Create.

You can delete your account under Me → Settings → Delete account. Deletion takes effect immediately and cannot be undone: we delete your account details, personas, favorites, saves, and play history, and remove all of your works from the Service. When you delete an account that signs in with Apple from the iOS app, we also revoke Wonderby's Sign in with Apple authorization.

After deletion, the following records are kept in a form that is no longer linked to your profile: copies inside stories other players have already started and inside works that reference yours, coin and usage accounting, and reports you submitted. Uploaded images are stored by their content and may be shared with other works, so the files may remain. Copies in backups expire on the backup schedule.

To get a copy of your data, or to delete an account you can no longer sign in to, email hi@baolieguoshi.com with your nickname and sign-in method. We may ask you to confirm your identity within the Service, and we will act on your request within 30 days.

Children

The Service is not directed to children under 13. We do not knowingly collect their personal information and will delete it if we learn we have.

Security

Data is sent over HTTPS, passwords are stored only as one-way hashes, and internal access is restricted. No system can guarantee absolute security.

Changes

When this policy changes, we will update this page and its effective date.

Contact

Tiny Echo Limited · hi@baolieguoshi.com