Pre-launch version. Rule the Seven Seas is in development and is not on Google Play yet. This describes how the game and this website are designed to work. I will re-check it against the released game, and update the date, before launch.
1. Who I am
Rule the Seven Seas is published by an independent developer trading as Tidemark Labs (“I”, “we”, “us” all mean that developer). I am the controller of personal data described here. Contact for privacy requests and complaints: sj@passthebot.dev. Identity and postal address details are available on request to data protection authorities, app stores and platform partners that are entitled to them.
2. The short version
- This website has no analytics, advertising pixels, tracking cookies or third-party fonts.
- If you join the early-access list I store your email and your answers.
- When the game is released it is designed to work with a guest account or an email account, plus a cloud save. It is not designed to collect health, location or contact data.
- I do not sell personal data and do not share it for advertising.
3. This website
Our host, Cloudflare, processes technical request data such as IP address and browser details to deliver and protect the site, under its own policy. I do not use it to identify you. I do not respond differently to “Do Not Track” because I do not track.
4. The early-access list
If you join the list I store your email address, the platform you would play on (Android, iPhone/iPad or Windows PC), whether you want to join playtests, whether you would spend on cosmetics or a Supporter Pack, the consent version and the time. I use it to email you about playtests and launch and to decide what is worth building. It is stored in Cloudflare’s key-value storage, is never sold or shared for advertising, and holds no payment details because none is collected. It is kept until you ask me to delete it or 12 months after you joined, whichever is first. Every email tells you how to opt out, or write to sj@passthebot.dev from that address.
5. The game, when it is released
| Data | Why | Basis (GDPR / UK GDPR) |
|---|---|---|
| Account: an anonymous guest id, or an email address and sign-in details if you add them (Supabase Authentication) | Sign you in and attach your save to you | Contract |
| Cloud save: your game progress | Restore progress on a new device | Contract |
| Entitlements: what you own, your Pieces of Eight balance and purchase tokens | Give you what you bought and restore it | Contract |
| Game settings on your device | Play the game | Contract |
Game settings and progress also exist on your device. Server records are protected by access rules so that a player can read and write only their own records.
6. Purchases
When purchases open they will be made through Google Play, which handles your payment details. I receive the purchase status and a purchase token to verify and restore what you bought, not your card number.
7. Ads
The game is designed so that ads are never forced. If rewarded ads are added they will be opt-in, an age check will come first, and before release this policy will name the ad provider and say what it receives. Until then the game contains no advertising.
8. Analytics and crash reports
Before release this policy will state exactly which analytics or crash-reporting tools, if any, the game uses and what they collect.
9. Who processes data for me
| Provider | Role |
|---|---|
| Supabase | Accounts and cloud save (when the game is released) |
| Google Play | Distribution and billing (when available) |
| Cloudflare | Website hosting, security and early-access list storage |
They act under their own standard data-processing terms. I may also disclose data if the law requires it. Providers may process data in several countries, and where required I rely on safeguards such as standard contractual clauses.
10. How long I keep data
- Early-access list: until you ask me to delete it, or 12 months after you join.
- Account and cloud save (when released): while your account exists, then deleted when you delete it.
- Website request logs: a short rolling period at the host.
11. Security
Only I can access the server and database, access rules limit each player to their own records, and data is sent over encrypted connections. No system is perfectly secure. If a breach affects your data I will tell you and the authorities as the law requires.
12. Your rights
Depending on where you live you may have the right to access, correct, delete, restrict or port your data, to object to processing, to withdraw consent, and to complain to your data protection authority. In California and other US states you may ask to know, access, correct and delete personal information; I do not sell or share it for cross-context advertising. In India you have rights of access, correction, erasure and grievance redress. Email sj@passthebot.dev. I may need to verify it is you and I aim to reply within 30 days.
13. Children
The game is not directed at children under 13, or under the age of digital consent where you live. If I learn that a child has given me personal data I will delete it.
14. Changes and contact
I will post changes here with a new date and version, and re-check this policy against the released game. Contact: sj@passthebot.dev.