Privacy Policy

01 The short version

We collect the least amount of data the game actually needs to run, we never sell it, and we don’t watch how you play in order to build an advertising profile of you. Play as a guest and none of this applies to you at all — nothing personal ever leaves your device. Make an account and the whole list is: an email, a name you chose, and your save.

02 What we collect, and why

• Email address — sign-in only, so a magic link can reach you. Never shown to other players.
• Display name — the name other pilots see, on leaderboards and on any Ledger card you choose to share.
• Region code (optional) — guessed once from your browser’s own locale setting, editable any time, used only to show sensible number and currency formats. Never derived from your IP address or GPS.
• Save data — your drone, your Ledger, your currencies, your progress. The game itself.
• Purchase records — once purchases exist (they don’t yet): what you bought and when, for receipts and for honoring refunds.

That is the complete list. No behavioural tracking, no device fingerprinting, and no location data beyond the one-time locale guess above.

03 Guest play needs none of this

You can play the entire game today with no account and without giving us anything. A guest save lives only in your own browser’s storage (IndexedDB) — we never see it, never receive a copy of it, and can’t recover it for you if you clear your browser data yourself. If you sign up later, that local save is folded into your new account; it is merged, never discarded.

04 Who processes it

• Supabase — accounts, sign-in, and your cloud save. This is where your email, display name, region code, and save row actually live.
• Vercel — hosts this website and serves the game. Standard web server logs only, the kind any host keeps; no analytics profile built on top.
• Stripe — payments, once purchases exist. We never see or store your card number ourselves; Stripe handles that end entirely.

We run no other data processor today, and we do not run our own ad SDKs.

05What we don’t do

• We do not sell your data, to anyone, ever.
• We do not build a behavioural profile of how you play in order to target ads.
• We do not run ad SDKs today. If that ever changes — a rewarded-video partner for portal builds, for instance — we will ask first, plainly, before any such SDK loads on your device, not bury it in an update note.
• We do not use IP-based geolocation. The region field above is a one-time guess from your own browser locale, and you can change or clear it whenever you like.

06 Children

Bathysia is built to be family-friendly, and we know some players will be young. We run no behavioural profiling on anyone, and guest mode needs zero personal information to fully play the game. We do not knowingly collect personal data from children under 13 without a parent or guardian’s consent. If you believe a child has created an account without that consent, contact us below and we’ll remove it.

07 Security

Row-level security means your save can only ever be read or written by you — not by other players, and not by us browsing a database by hand. We never hold your password: sign-in is handled entirely by Supabase, through a one-time magic link or Google/Apple sign-in, so there is no password of yours for us to lose in the first place.

08Your rights: delete & export

Both of these are real, working controls inside the game — not a request you have to email in for and wait on.

Deletion is irreversible, and the control says so before you confirm — export a copy first if you want one. Purchase records are kept only as long as tax and accounting law actually requires, and by then they are anonymized: no name or email attached to them.

09Cookies & local storage

We don’t show a cookie banner, and here is the honest reasoning: a guest save’s use of your browser’s storage is strictly functional — it runs the game and nothing else — which is exempt from consent requirements the way a shopping cart is. If we ever add anything non-essential — analytics, ads — that reasoning stops holding, and a proper consent banner goes up before that ships, not after.

10 Changes to this policy

If this policy changes in a way that matters, we’ll post the update here with a new date and flag it in the news log. We won’t quietly loosen anything promised above.

11 Contact

Questions about this policy, or about your data specifically, go to privacy@bathysia.com.