WorldSprout is a collection of animated miniature worlds created by Mark Barta. This page explains the app's privacy practices and provides support information. You do not need to create a separate WorldSprout account.
Information used for protected downloads
When you request content protected by a subscription or an earlier purchase, the app sends Apple-signed app and purchase information, product and purchase identifiers, an app-download identifier, the requested content, and app/device verification information to our download service. We use Apple's App Attest to check that requests come from the app, and we check purchase status with Apple before allowing access.
Our security database stores the app installation's key identifier, public key, verification receipt, security counter, enrollment time and status. It also associates that record with Apple's app-download identifier. Other security records contain session-token hashes, product and original purchase identifiers, request identifiers and hashes, and temporary replay-prevention and rate-limit information. The service checks signed purchase/app transactions and one-use assertions during request handling; it does not save their raw contents as a request history.
Apple's app-download identifier can remain the same for the same App Store account and app across devices and reinstalls. These records can therefore link that account's downloads and purchases across installations. They are not anonymous simply because we do not ask for a name or email address. We do not receive your Apple Account password or payment-card details.
Why we use download information
We use these records to confirm access to the requested content, check subscription changes or revoked purchases, prevent requests from being reused, and limit abuse. We do not use the download-service records for advertising or behavioral analytics.
How long download records remain
App/device enrollment records do not automatically expire. Other security records have short periods in which they can be used: challenges normally last two minutes, sessions and replay-prevention records up to five minutes, and rate-limit buckets one minute. Expiry prevents further use; it is not an immediate deletion time. Old records are removed when later relevant requests run cleanup.
Canceling a subscription, removing downloaded files, or uninstalling WorldSprout does not by itself delete server records. Cloudflare's database recovery history may also retain earlier versions after a live database record is removed. Token validity, live-record cleanup, and provider recovery retention are separate.
Apple and Cloudflare
Apple provides App Store purchase verification and App Attest. Cloudflare hosts the download service, security database, and private content storage. The service does not write request bodies, purchase proofs, or app/device key identifiers to application logs. Our current configuration disables service request/invocation logging and the content bucket's optional R2 Data Access Logs.
That does not prevent Cloudflare's infrastructure from processing network and security information, which may include IP addresses, routing information and information about requests. Provider network processing and recovery copies follow the applicable service arrangements and provider retention practices; they are not erased merely because a download authorization expires. See Cloudflare's privacy policy and Apple's privacy policy.
Apple also handles App Store downloads and may process usage or diagnostic information according to your device settings and Apple's privacy policy. This is separate from the app's local camera and augmented-reality processing.
Camera, captures and augmented reality
On iPhone and iPad, camera access lets the app display your surroundings and place a sprout on a detected surface. Apple's augmented-reality frameworks process camera, motion and surface information on your device. On Apple Vision Pro, system-provided spatial information is used locally to position and display the sprout. The download service does not request camera images, audio recordings or maps of your surroundings, and the app does not upload them to us.
When you choose to capture a photo, Live Photo or video, the app creates the capture on your device and can save it to Photos with your permission. Photos and Live Photo stills are also kept in the app's local album. The capture feature does not record your microphone. Copies saved to Photos, or shared using Apple's controls, are managed by those services and your settings, including any iCloud Photos settings.
You can change camera, spatial and Photos permissions in your device's Settings. AR features need the relevant permission to work.
Data stored on your device
App preferences, such as sound and viewing settings, downloaded content, and the app's capture album are stored on your device. Removing a downloaded set removes its local files; it does not cancel a subscription or delete the service records described above. Deleting the app removes its local app data. Copies already exported to Photos and any device backups are managed separately through your Apple settings.
Your choices and privacy requests
Protected downloads require the verification steps described above. You can manage or cancel your subscription through Apple's subscription settings. Cancellation does not erase records already collected.
For privacy questions or a request concerning access to or deletion of download-service records, email Mark Barta at BartaCeramics@gmail.com. We may need to verify that the request concerns your records. Do not email Apple passwords, full receipts, attestation proofs, private download links or payment details.
Support messages
If you email us, we receive your email address and the information you choose to include. We use it to respond to your request and resolve issues. Our email provider processes these messages to deliver and store them. We retain correspondence only as long as needed for support or legal obligations. You can request deletion by emailing the address below. Support messages are not used for advertising.
Children's privacy
WorldSprout does not require a separate signup or ask players to enter their name or email address to view sprouts. Protected downloads use the app, device and purchase information described above. A parent or guardian may contact us about privacy or information sent voluntarily through support.
This website
This app policy is separate from the Barta Ceramics website policy. Visiting this page or signing up for Studio Notes is covered by our website privacy policy, which explains website analytics and email subscriptions. Website analytics are not included in WorldSprout.
Policy updates
If the app's privacy practices change, this page will be updated to explain the changes.
WorldSprout support
For app help or privacy questions, email Mark Barta at BartaCeramics@gmail.com. Include your device model, operating system version, and a description of the issue. Please avoid sending photos of private surroundings or other sensitive information.
Getting started with AR
Choose a sprout, allow camera access, and slowly scan a well-lit table or floor. Follow the placement prompt, then press Play. Use Adjust to change placement, size, rotation, and sound. Turn Cinematic on or off to change your view, and use Exit to return to the collection.
If placement is not working
Check the app's camera permission in Settings. Try a well-lit, textured surface with space around it, then reopen the AR view.