Draft: this text is waiting for legal review and may change before the open beta.
The Tidecaller team runs Tidecaller. This policy says what we keep about you, why, for how long, who helps us run the game, and how to get a copy or have it deleted. Contact: the support address on our store pages.
What we keep
Website sign-in: a salted password hash, if you set a password, and hashed browser session credentials. The website uses a secure, HttpOnly cookie to keep you signed in for up to 30 days. We do not store your password in plain text.
Your account: a random id and a hashed secret for each device you play on. If you sign in with email, Apple, Google, Steam or a passkey, we also keep that sign-in: the email address, the provider's account id, or the passkey's public key.
Your character: its name and look, and everything you do in the game - catches, items, pets, your island, quests, records, friends, crew, market orders, mail and settings kept on our servers.
Chat: zone, party and whisper lines are passed on as you send them and not stored. A crew keeps its last 50 lines for its members. A line someone reports is kept with the report.
Voice chat: passed between players through Cloudflare Realtime while you talk. It is never recorded.
Translation: when you ask for a chat line in your language, its text goes to Cloudflare Workers AI to be translated. It is kept only briefly, in memory, so the same line need not be translated twice.
Play statistics: events such as a catch, a craft or a quest step, tied to your character's id (not your name or email). We use them to balance the game and to spot cheating.
Fair play: how quickly and precisely fights are played, flags our checks raise, and the inputs of fights we need to verify.
Moderation: reports you make or that name you, mutes and bans.
Your connection: Cloudflare sees your IP address in order to carry traffic. We use your continent to choose a nearby game server, and we do not store your IP address.
Why
To run the game you signed up for: your account, your progress and playing with others (contract).
To keep the game fair and safe: anti-cheat, moderation, abuse prevention (legitimate interests).
To improve the game: balance and fixing problems, from pseudonymous statistics (legitimate interests).
When the law requires it (legal obligation).
We do not sell your data, and we do not use it for advertising.
Who helps us
Cloudflare: hosting, storage, voice relay and translation. It runs in many countries; transfers out of the EU and UK rely on standard contractual clauses.
Apple, Google and Valve, when you sign in, buy or receive notifications through them. Their own policies apply.
Cloudflare Email Service, which sends verification, sign-in and account recovery codes. If configured by the operator, Resend can provide the same delivery service.
How long
Your account and character: until you delete them.
When you delete your account: it is removed at once from the live game - its sign-ins, character, friendships and presence, reports that name it, our checks' flags and its stored fight logs. Reports it made keep only what they say about the other player. Backups roll off within 30 days.
Play statistics: up to 90 days, under your character's id only.
Fight logs, ranked fight inputs and closed reports, flags and moderation records: up to 90 days, for fair-play review and appeals.
Your rights
Copy: Account -> Download my data saves everything we keep about your character and account, in JSON.
Delete: Account -> Delete my account erases it.
Correct: rename your character in the game, or contact us.
Object or restrict: contact us. You can also complain to your data protection authority.
Children
Tidecaller is not meant for children under 13. If you are under the age at which you may agree to this policy where you live, a parent or guardian must agree for you.
Changes
We will post changes here and in the game before they take effect. This version: 2026-10-09.