bloodtide return to the seas

Privacy Policy

Effective 2026-05-03 · last updated 2026-05-03

Bloodtide is an indie browser game served at bloodtide.io. This page explains what data the site collects, why, where it lives, and what rights you have over it. The site is operated as a hobby project by an individual based in the Netherlands. Contact for privacy matters: [contact email TBD].

Short version: we collect your captain name and run statistics so they can be shown on a public leaderboard. We use cookieless Cloudflare Web Analytics for aggregate traffic. We do not collect your real name, your email, your location, or any tracking identifier. Most game state lives in your own browser.

What we collect

Leaderboard entries

When you finish a run and a score is submitted, the following fields are sent to our database:

  • The captain name you typed in (a public alias, free-form, max 15 characters)
  • Run statistics: level reached, kills, gold, bounty, time survived, ship tier
  • A creation timestamp

These rows are public by design — the leaderboard is a public log book. We do not collect your IP address alongside leaderboard rows, and we do not link captain names to people.

Aggregate site analytics

The site uses Cloudflare Web Analytics, which is cookieless and does not track individual visitors across sites. It records aggregate counts of page views and basic referrers, with no personally identifying information. You can opt out from the privacy settings panel inside the game.

What lives in your browser, not on our servers

Game settings (audio volumes, control bindings, captain name draft, tutorial-completed flag) live in your browser's localStorage. They never leave your device unless you explicitly submit a score.

What we do NOT collect

  • Email addresses, passwords, real names
  • Payment information of any kind (the game is free, no purchases exist)
  • Geolocation data
  • Third-party social tokens (no Discord / Google / Apple sign-in)
  • Browser fingerprinting beacons
  • Cross-site behavioural advertising data

Where the data lives

  • Leaderboard rows: Supabase, EU region.
  • Aggregate analytics: Cloudflare, processed in their global edge with EU compliance commitments.
  • Game settings: your own browser. We don't see them.
  • The site itself: Cloudflare Pages, served from the Cloudflare CDN.

Lawful basis under GDPR

Our processing of your captain name and run statistics is grounded in legitimate interest: the leaderboard is a core part of an arcade-style game and players who post a score are consenting to public display by the act of submitting. You can request erasure at any time (see "Your rights" below).

Cloudflare Web Analytics relies on the legitimate interest of understanding traffic without identifying users; it sets no cookies and stores no individual records. You may still opt out.

Your rights

Under the GDPR, you have the right to:

  • Access — ask what we hold about you
  • Rectification — fix incorrect data
  • Erasure — have your leaderboard entries removed
  • Objection — object to our processing
  • Portability — receive your data in a portable format
  • Restriction — pause processing while a complaint is investigated
  • Lodge a complaint — with the Dutch DPA (Autoriteit Persoonsgegevens) or your local supervisory authority

Send any of these requests to [contact email TBD]. Because we hold very little data per captain, we can usually action requests within a few days. We may ask for the captain name(s) you used and a rough time window so we can find the right rows.

Children

Bloodtide is not directed at users under 16 and we do not knowingly collect data from minors. If you are a parent or guardian and believe your child has submitted a score you would like erased, contact us and we will remove the relevant rows.

Third parties we use

  • Cloudflare Pages — hosting the game's static files
  • Cloudflare Web Analytics — cookieless aggregate site stats (you can opt out)
  • Supabase — leaderboard database and REST API (EU region)

Each provider has their own privacy practices, which apply to the data they handle on our behalf as data processors.

Changes to this policy

Material changes will be reflected in the "last updated" date at the top of this page and listed in the changelog below. Trivial edits (typos, clarifications) may be made silently.


Changelog

  • 2026-05-03 — Initial publication.
Privacy· Cookies· Terms· Back to the game