Privacy Policy

Last updated: 14 October 2026

1. Introduction and Scope

1.1 This Privacy Policy explains what information tnysocial LLC collects when you use the Service, why it is collected, how long it is kept, who receives it, and how you can have it deleted.

1.2 This Privacy Policy applies to the Service as defined in Section 2, on the Website and in the App. It should be read together with our Terms of Service.

2. Definitions

In this Privacy Policy, the following terms have the meanings set out below:

• "tnysocial", "we", "us" and "our" mean tnysocial LLC, a Delaware limited liability company, the operator of the Service.
• "Service" means the fishtheweb game made available at fishtheweb.com (the "Website") and through the fishtheweb iOS application ("Fish The Web" on the App Store) for iPhone and iPad (the "App"), together with the game servers and features through which they operate.
• "you" and "your" mean the individual who accesses or uses the Service.
• "Account" means the game profile associated with you and held on our servers, which the Service calls your "save". A "Guest Account" is an Account that is not signed in. A "Signed-In Account" is an Account linked to a Google, Apple or Discord account through the sign-in described in Section 5.
• "Device Token" means the random secret code described in Section 4.1, which connects your device to your Account.
• "Support Code" means the random code described in Section 4.3.
• "Island" means a shared instance of the game world on which players play together.
• "Settings" means the in-game settings menu, opened with the cog button or the Esc key.
• "Personal Data" means any information relating to an identified or identifiable individual.

3. Controller and Contact Details

3.1 The Service is an independent game operated by tnysocial LLC, which is the controller of the Personal Data processed as described in this Privacy Policy.

3.2 If you have any question about your data, or wish to make any request described in this Privacy Policy, email [email protected].

4. Information Stored on Your Device

4.1 Device Token

When you first play, the Service creates a random Device Token and stores it in your browser's local storage. The Device Token is how you "log in": the Service does not use passwords. The Device Token is not linked to your name, email address or anything else about you, and our servers keep only a scrambled (hashed) copy of it. If you clear your browser data or play in another browser, you will start afresh (unless you have signed in, as described in Section 5).

4.2 Settings

Your settings (music, sounds, volume, zoom and chat display) are also stored in your browser's local storage.

4.3 Support Code

The Service also stores a Support Code (for example, K7Q2-MX), which is created at random. If the Service cannot load or connect, it sends us a short report together with that Support Code, containing:

1. what went wrong;
2. whether your browser supports graphics acceleration;
3. your graphics card; and
4. your browser's name and version.

The report contains nothing about you. Its purpose is to allow us to look up the problem if you send us the Support Code. Reports are kept for a short while only.

4.4 Cookies, Advertising and Third-Party Scripts

We use a few short-lived cookies of our own, and only when you do something that needs one:

1. signing in with Google on the Website: one cookie for up to 15 minutes that ties the sign-in to your browser, and one for up to 30 minutes that lets the game show you it worked;
2. linking your Discord account: one cookie for up to 5 minutes while the link finishes;
3. staff signing in to our admin dashboard: a session cookie.

None of them are used for tracking or advertising, and nothing in the Service tracks you across other websites. There is no advertising in the Service, and there are no third-party scripts on the page. If you came to the Website from one of our ads, the ad's click code stays on our server, not on your device (Section 11).

4.5 The App

In the App, you also play as a guest. The Device Token is kept in your device's Keychain (which iCloud Keychain can share with your other Apple devices) and in the App's own storage, so that your Guest Account comes back if you reinstall the App or get a new iPhone or iPad. The App also keeps its Device Code (Section 4.6) in the Keychain, on that device only. Nothing else is kept in the Keychain.

4.6 Device Code

The Service also creates a random Device Code the first time you play and keeps it on your device (in your browser's storage, or in the App's storage and Keychain). It is made at random and is never worked out from your device or its settings. It stays the same when you sign out or start a new Account, and it is sent to our game server when you connect. Our servers keep only a scrambled (hashed) copy of it, for 30 days after you last played, or for as long as a ban or mute on an Account that used it lasts.

We use the Device Code for one purpose only. If an Account is banned or muted, the ban or mute also applies to other Accounts used on the same device while it lasts, and moderators can see that a new Account may belong to the same person. The Device Code is never used for advertising or analytics. Clearing your browser data removes it from that browser. In the App, the Keychain copy can stay on the device after the App is deleted, so that a ban still holds after a reinstall.

5. Optional Sign-In

5.1 Signing In Is Optional

You never have to sign in to use the Service. Signing in is always optional. It lets you keep your Account and use it on other devices.

5.2 Sign In with Google

You may choose to sign in with Google (in Settings) to keep your Account and use it on other devices. If you do, we store your Google account's identifier and email address with your Account. We request only your email address from Google, and nothing else.

5.3 Sign In with Apple or Google in the App

In the App, you may choose to sign in with Apple or Google to keep your Account. If you sign in with Apple, we store:

1. your Apple account's identifier;
2. the email address Apple gives us, which may be a private relay address that Apple creates for you; and
3. a token from Apple that allows us to end your Sign in with Apple for the Service when you delete your Account.

Apple shares nothing else with us.

5.4 How We Use Your Email Address

We use the email address from your sign-in only:

1. to keep your Account linked to your Google or Apple account (and, if you sign in with the other one using the same verified email address, to find the same Account);
2. to email you about your Account or a purchase when there is a reason to, such as a reply to something you asked us, a problem with your Account's security, or an important change to this Privacy Policy or our Terms of Service ("Service Emails"); and
3. to email you now and then about big updates and events in the Service ("Update Emails"), as described in Section 5.5.

We never sell your email address, never give it to anyone for their own marketing, and never show it to other players.

5.5 Update Emails

1. In the UK and the EU, we send Update Emails only if you have said yes to them. Saying yes is never needed to play, and accepting our Terms of Service is not saying yes.
2. Elsewhere, we may send you occasional Update Emails unless you unsubscribe.
3. Every Update Email has an unsubscribe link that works with one click. You can also unsubscribe by emailing [email protected]. Once you unsubscribe, we keep a note of it so that we do not email you again.
4. We never send Update Emails to anyone we know to be under 13.
5. Our emails do not track whether you open them. Their links carry a tag, the same for everyone, saying the visit came from one of our emails, so we can count how many people an email brings back to the game.
6. We send emails through an email delivery provider that acts for us and receives only your email address and the email itself. If you signed in with Apple using a private relay address, Apple forwards our emails to you, and you can also stop them in your Apple account's settings.
7. In the UK and the EU, we rely on your consent, which you can withdraw at any time by unsubscribing. Elsewhere, we rely on our legitimate interest in telling players about the game they play, and you can unsubscribe at any time.

5.6 Playing Inside Discord

You can also play the Service inside Discord, as a Discord Activity. Discord Inc. runs the window the game plays in, under its own terms and privacy policy.

1. Signing in. Inside Discord, the game signs in with your Discord account so that you keep the same Account every time. Discord asks you first. We receive your Discord user ID and store it with your Account. Discord also gives us a short-lived access token, which we pass back to the game window for Discord's own use and do not keep. We do not ask Discord for your email address, your servers or your friends.
2. Your existing Account. If you have linked your Discord account in Settings (Section 6.1), playing inside Discord opens that same Account, which is then signed in with Discord too.
3. Your device. The Device Token (Section 4.1) is kept in the storage of Discord's game window, as it would be in a browser.
4. Discord's servers. Everything the game sends and receives inside Discord passes through Discord's servers. Discord can tell that you are playing, and we see Discord's network address in place of yours, so the location we work out from an address (Section 7) may be Discord's.
5. Purchases. Inside Discord, gems and the Tide Club are bought through Discord's own store (Section 6.3).

6. Information Stored on Our Servers

6.1 Your Account

To keep your progress, our game server stores the following with your Account:

1. the name you choose and your character's look;
2. your gold, gems, XP, level, gear and outfits, and your challenge progress;
3. the fish you have caught (your bag and your Fishdex);
4. your crab pots and the old bridge; your Fishjack coins won and lost (for its leaderboard); which "firsts" you have reached (such as your first cast and first catch); and which Fishdex entries and "What's new" notes you have already seen;
5. when your Account was created, when you last played, and your total time played;
6. players you have starred (so that we can put you on their Island), muted (so that their chat stays hidden for you) or blocked (so that they stay hidden for you);
7. if you turn on notifications: the address your phone or browser gives us for them (a push token or subscription, which says nothing about you), which kinds of notification you want, your time zone (so that 9am means 9am where you are) and when we last sent you one; and
8. if you joined through a friend's link, whose link it was, and the gems either of you received for it (so that each friend is rewarded only once);
9. if you link Discord (optional, in Settings): your Discord user ID only, used to give you roles on our Discord server (Section 8.5) and to open the same Account if you play inside Discord (Section 5.6). We do not keep your Discord access token or anything else from Discord;
10. if you have signed in: whether you have said yes to Update Emails, or unsubscribed from them, and when (Section 5.5);
11. how you first came to the Service: the ad, friend's link, app or website that brought you, by its name only (such as "Instagram" or "google.com"), never the page you came from. Only our internal team sees it, to learn which places bring players who enjoy the game;
12. if you came to the Website from one of our ads: which company's ad it was, when you arrived, the ad's click code (until you answer, and for 7 days at most), whether you are in the UK or the EU (not your country), your choice about ad measurement, and which of the events in Section 11.3 have happened or been sent; and
13. if you send a bug report (in the Service or on our Discord server): what you wrote, your support code, your platform and the Service's version.

The sign-in information described in Section 5 and the anti-cheat records described in Section 9 are also stored with your Account.

When you share your link, the preview that apps such as Messages, WhatsApp or Discord show for it includes your in-game name and your Island's code ("ollie invited you to fish"). To be shown as "A friend" instead, turn off Show my name in the Discord feed in Settings. Nothing else about you is in the preview, and an Account that is banned gets no preview of its own.

6.2 Turning Off Notifications

You may turn notifications off at any time in Settings, or in your phone's or browser's settings.

6.3 Purchases

When you buy gems, we keep a record of the purchase so that we can give you what you paid for, handle refunds and help you if you lose access to your Account: the product, the price and currency, the country, the store (Apple, the Website or Discord), the store's transaction or order number, and a random purchase identifier for your Account (not your name or email address). For a purchase inside Discord, the record is Discord's purchase identifier and your Discord user ID, and the price is the listed price. For a Tide Club membership we also keep when you joined, when what you have paid for runs out, whether it renews and where you joined (the App, the Website or Discord), so that you get the members' rewards; it is removed if you delete your Account. Apple (purchases in the App), RevenueCat, Inc. (our purchase service), Stripe, Inc. (purchases on the Website) and Discord Inc. (purchases inside Discord) process the payment under their own privacy policies, and we never see your card details. Stripe keeps your email address to send your receipt.

7. IP Addresses and Technical Logs

7.1 Purposes

Your IP address is used for four purposes only:

1. to stop one person from opening many connections at once;
2. to detect cheating;
3. to enforce bans, and to help our moderators spot someone dodging a ban or mute (Section 7.3); and
4. for our analytics (Section 10), where it is used to estimate a rough location (country, region and city).

7.2 Handling by Our Game Server

Our game server keeps your IP address in memory only while you are connected. It is not saved with your Account, it is never shown to other players, and it only ever travels over encrypted connections. The exceptions are the hashed codes described in Sections 4.6 and 7.3 and the analytics data kept by PostHog (Section 10.3).

7.3 Bans

A ban applies to the Account, to other Accounts on the same device (using the Device Code in Section 4.6) and to Accounts signed in with the same Google or Apple account. We never ban anyone because of their IP address or network.

We also keep a scrambled network code with each Account for 30 days after it last played. It is made from your IP address and the network it belongs to, and it cannot be turned back into either. It is used only to help our moderators notice when a new Account appears on the same network soon after someone was banned or muted. Many people can share one network (a school or a mobile network, for example), so the network code alone is never used to ban or mute anyone. A moderator always decides.

7.4 Hosting Logs

Like most websites, our hosting provider may keep short-lived technical logs of requests.

8. Chat, Reports and Moderation

8.1 Delivery and Filtering

Chat messages pass through our server to the other players on your Island, and they are automatically filtered: swearing is masked, and hateful, sexual or unsafe messages (such as links, phone numbers, social media handles, or questions like "where do you live") are blocked.

8.2 How Long Chat Is Kept

Every chat message, including blocked messages and their text, is saved in a chat log on our server for 14 days and then deleted automatically. We keep it so that the game's admins can review chat and improve the chat filter, for example by catching messages it missed or letting through ones it stopped by mistake. Only the game's admins can see the chat log. It is never shared with anyone else or used for advertising. Each saved message includes your in-game name and when and where it was sent, and private messages from moderators are saved in it too. When you delete your Account, your messages are deleted from the chat log as well.

Separately, the server holds recent chat (the last 1,000 lines across all Islands) in memory so that our moderators can keep the Service friendly. It is erased whenever the server restarts, and for a blocked message it shows only that it was blocked and why. A new player's first-day record (Section 10.6) also keeps the chat they send and see on their first day, including messages from other players and those players' names, for 30 days.

8.3 Messages from Moderators

Moderators can also send you a private message, which is shown in gold as "Admin".

8.4 Reports and Blocks

When a player reports or blocks another player, we save that report together with the reported message and the Island's recent chat (approximately the last 40 lines), so that a moderator can review what happened. Reports are kept for as long as they are useful for keeping the Service safe.

8.5 Our Discord Server

We run a community server on Discord, which is operated by Discord Inc. under its own terms and privacy policy and is for ages 13 and over. Our Discord bot posts some rare moments from the Service there, such as a mythic or legendary catch, a big milestone or a new top-3 place in the Hall of Fame, together with your in-game name. To be shown as "Someone" instead, turn off Show my name in the Discord feed in Settings; its /profile command then cannot find you either, and your link's preview says "A friend" (Section 6.1). Bug reports sent from the Service are posted there without your name. If you link Discord, we use only your Discord user ID, and only for roles on that server; linking gives nothing in the Service.

8.6 Moderator Applications

If you apply to be a moderator on our Discord server, what you write, together with your in-game name, level, time played and any past moderation actions on your Account, is shown to our moderators and admins so that they can review your application. We keep applications for as long as they are useful for running the moderation team.

9. Fair Play (Anti-Cheat)

9.1 Checks

To prevent cheating, the server checks matters such as how fast you move and how quickly fish are reeled in. If something appears impossible, we log what happened (what was measured, where and when) against your Account.

9.2 Kicks, Bans and Appeals

Repeated cheating leads to a kick or a ban. If that happens, you will be told the reason together with an appeal code. You may email that code to [email protected], and a person will review the evidence.

9.3 Chat and Automatic Bans

Chat is never a reason for an automatic ban.

9.4 New Accounts After a Ban or Mute

A ban or mute applies to the person, not only to one Account. While it lasts it also applies to other Accounts used on the same device (Section 4.6) or signed in with the same Google or Apple account. If you are muted this way, the game tells you so and why when you try to chat. Moderators may also see a note that a new Account could belong to someone who was recently banned or muted. That note is seen only by our moderation team, it is kept for 30 days, and it never decides anything by itself. If you think a ban or mute reached you by mistake, email [email protected] and a person will look at it.

10. Analytics

10.1 What We Record

To understand what players enjoy (and what is broken), the Service records the following:

1. how long a visit lasts, how many fish were caught, which upgrades were bought and how fast the game loaded;
2. how new players get started (for example, how long until their first cast and first catch, and where players stop);
3. whether you play as a guest or signed in;
4. basic device details: browser, screen size, language, time zone, graphics card, number of CPU cores, memory and connection type, and whether you opened the Service inside another app such as Instagram or TikTok;
5. which version of the game (and of the App) you are using;
6. whether you turned notifications on, and whether a notification opened the game;
7. how smoothly the game runs;
8. errors the game or our server runs into: what went wrong and where in our code (never anything you typed); and
9. which website sent you to the Service.

10.2 Analytics Provider

These events are sent through our own server to our analytics provider, PostHog, whose servers are in the United States. Your browser never communicates with PostHog directly, and analytics use no cookies.

10.3 Location

Our server sends your IP address (encrypted) with the events so that PostHog can estimate your country, region and city. PostHog keeps the IP address with that analytics data. We also work out your country from your browser's time zone.

10.4 Hashed Identifiers

Your Account's identifier (and your browser's Support Code) are scrambled (hashed) before they are sent, and no profile of you is built. We never send your name, email address, chat messages or Device Token.

10.5 Purpose and Legal Basis

We use this information to run and improve the Service and to keep it fair, on the basis of our legitimate interests. We do not sell it, share it for advertising, or combine it with data from any other source. (Ad measurement is separate, and described in Section 11.) You may object to our analytics as described in Section 16.

10.6 Your First Day

To make the start of the game better, when a new player starts on the Website (not in the App, and not in the United Kingdom, the European Union or anywhere else we can't place), our server keeps a record of what happens in the game during their first day, for up to 90 minutes of play: where their character walks, their casts, bites and catches, what they sell and buy, the game's menus they open and close, the help shown on screen, how each visit ends, and the chat on their Island: the messages they send and the messages they see from other players (with those players' names, and from moderators), as they appeared after the chat filter, and when a message of theirs was blocked or they were muted (never the blocked message's text, which only the chat log in Section 8.2 keeps). It never includes their own name, anything else they type, or anything outside the game. If you chat on an Island where a new player is being recorded, your messages and name can be part of their record.

This record stays on our own server (it is not sent to PostHog or anyone else), is used only to improve the first minutes of the game, and is deleted after 30 days, or straight away if you delete your Account. You may object to it as described in Section 16.

11. Ad Measurement

11.1 When This Applies

We advertise fishtheweb on other apps and websites. If you come to the Website by tapping one of our ads, our server can tell the company that showed you the ad when you start playing (and when you buy gems on the Website), so that our ads reach more people who would enjoy the game. If you did not come from one of our ads, nothing in this Section applies to you.

Outside the UK and the EU (and the other countries in the next paragraph), if you arrived from one of our ads, we share the events listed in Section 11.3 (making your character, catching your first fish, coming back the next day, and buying gems, with the price) with the company that showed you the ad, unless you switch it off in Settings (Section 11.5) or your browser sends the Global Privacy Control signal, which we treat as switching it off.

In the UK and the EU (and Iceland, Liechtenstein, Norway and Switzerland), we only do it if you tick the box "Share with ad partners" when you make your character. The box is not ticked for you, you can play without ticking it, and it is separate from accepting our Terms. If we cannot tell where you are, we treat you as being in the UK or the EU and ask. We work out where you are from your internet connection's country and your device's time zone when you first arrive; we keep only whether you are in the UK or the EU, not your country or your IP address.

It never applies in the App: the App does not ask, and nothing from the App (or from an Account once it has been played in the App) is ever sent to an advertising company.

Apple's private ad measurement in the App. If you install the App after seeing an ad, Apple may tell that ad's company, without saying who you are or anything that identifies your device, that the ad led to an install, together with a number from 0 to 63 the App sets as you play (for example after your first fish, at levels 3, 5 and 10, or after a purchase). This is Apple's own system (SKAdNetwork and AdAttributionKit), it is sent by Apple a day or more later, and it never includes your Account, your name or any identifier. Apple also sends us a copy, which we count in our analytics. If you installed the App from an Apple search ad, Apple tells us which campaign, ad group and keyword it was, and we record that in our analytics against your anonymous analytics id (Section 10). The App does not use your device's advertising identifier and does not ask to track you.

11.2 Who May Receive It

Only the company whose ad you tapped, which is one of the following:

1. Meta Platforms (Instagram and Facebook), under its privacy policy;
2. TikTok, under its privacy policy;
3. Google (Google Ads and YouTube), under its privacy policy;
4. Snap Inc. (Snapchat), under its privacy policy;
5. X Corp. (X, formerly Twitter), under its privacy policy;
6. Reddit, Inc. (Reddit), under its privacy policy; or
7. Microsoft Corporation (Microsoft Advertising and Bing), under its privacy statement.

11.3 What Is Sent

When it is on, our server (never your browser) sends that company the following, once each (and once for each gem purchase):

1. which of these happened, and when: you made your character, you caught your first fish, you came back the next day, you reached level 3 or level 5, you sent your first chat message (only that you chatted, never what you said), you bought a better rod, you repaired the bridge to the crab pots, or you bought gems on the Website (with which pack and the price you paid);
2. the click code the company added to the ad's link when you tapped it (such as "fbclid", "ttclid", "gclid", "rdt_cid" or "msclkid");
3. a scrambled (hashed) identifier for your Account, which cannot be turned back into your Account; and
4. your IP address and your browser's details (its "user agent"), which the company uses to match the event to the ad. Google receives neither of these, only (a) and (b).

We never send your name, email address, chat messages or Device Token. Google is also told that measurement is allowed for you and that personalised advertising is not.

11.4 What We Keep

The click code is kept with your Account on our server (not on your device). In the UK and the EU it is not sent anywhere until you tick the box, and if you don't tick it, it is deleted when you make your character. If you switch it off, it is deleted straight away. Either way, it is deleted 7 days after you arrived. We keep your choice so that we do not ask again.

11.5 Switching It Off (or On)

You can switch it off or on at any time in Settings (the "Ads" link at the bottom, shown only if you came from one of our ads), which also shows whether it is on now. Your choice is kept with your Account. If your browser sends the Global Privacy Control signal, it stays off. Switching it off stops anything further from being sent. It cannot recall what has already been sent: to have that deleted, use the company's own privacy settings, or email [email protected] and we will help.

11.6 Legal Basis

In the UK and the EU, we do this only with your consent (the box you tick), which you can withdraw at any time (Section 11.5). Elsewhere, we do it unless you switch it off, as this Section explains; you can switch it off at any time. The companies use what they receive to measure and improve our ads, under their own privacy policies above, and may process it outside your country (Section 13).

12. Operational Notifications to tnysocial

12.1 tnysocial receives short notifications about activity in the Service in a private channel on our Discord server (Discord is run by Discord Inc.) that only our administrators can see: when a player joins or leaves (the player's in-game name, level, playtime, number of fish caught, and whether the player is signed in or a guest), big catches, reports and anti-cheat actions.

12.2 These notifications never include your email address, your IP address, or anything else that identifies you outside the Service.

13. International Processing

Our servers and service providers may process data outside your country. In particular, our analytics provider's servers are in the United States (Section 10.2), and so are those of the advertising companies in Section 11.2 (when ad measurement is on for you), of RevenueCat and Stripe (Section 6.3), and of our email delivery provider (Section 5.5).

14. Data Retention

We keep information for the following periods:

1. Guest Accounts are deleted after 30 days without a visit, to keep the game tidy and store as little as possible, subject to the following:
   1. Guest Accounts played in the App (with a character and at least one catch) are kept until you delete them, because the App remembers them;
   2. Guest Accounts that have bought something are kept until you delete them, so that you never lose what you paid for; and
   3. Guest Accounts with no character are deleted after one day.
2. Signed-In Accounts are not deleted for inactivity: your items, gems and progress stay with a Signed-In Account until it is deleted.
3. Chat is kept in the chat log for 14 days and then deleted, or at once when you delete your Account yourself. Recent chat held in memory (the last 1,000 lines) is erased whenever the server restarts (Section 8.2).
4. Reports are kept for as long as they are useful for keeping the Service safe (Section 8.4).
5. Loading and connection reports linked to a Support Code are kept for a short while only (Section 4.3).
6. First-day records (Section 10.6) are deleted after 30 days, even if the Account they belong to was deleted sooner by the clean-ups above, or at once when you delete your Account yourself. The chat in them (Section 8.2) goes with them.
7. IP addresses are kept by our game server in memory only while you are connected and are never used to ban anyone; a scrambled network code is kept for 30 days after you last played, and so is the scrambled Device Code (longer only while a ban or mute it helps enforce lasts); hosting logs are short-lived; and PostHog keeps the IP address with the analytics data, which we will delete if you ask us to (Sections 7, 10.3 and 15.3).
8. Ad click codes (only if you came from one of our ads) are deleted when ad measurement is off for you, and 7 days after you arrived in any case (Section 11.4).
9. Your email address is kept with your Signed-In Account until it is deleted. If you unsubscribe from Update Emails, we keep a note of that so that we do not email you again (Section 5.5).
10. Purchase records are kept for as long as the law requires us to keep accounting records, even if you delete your Account (they are then no longer linked to it) (Section 6.3).
11. Backups: daily backups are kept for 5 days, and a few copies taken before updates are kept until they are replaced.

15. Deleting Your Data

15.1 Deleting Your Account in the Service

In the Service, open Settings (the cog button, or Esc) and choose Delete my save. You will be asked to confirm three times, after which your name, look, progress and fish are removed from the server immediately, and so are your messages in the chat log (Section 8.2). If you signed in with Apple, it also tells Apple to end your Sign in with Apple for the Service. If you linked Discord, the link is removed and your game roles on our Discord server are taken off. You can also unlink Discord on its own in Settings at any time. Records of any purchases are kept, no longer linked to your Account (Section 14).

15.2 Backups

Copies of your Account in our backups disappear as the backups roll over (daily backups are kept for 5 days, and a few copies taken before updates are kept until they are replaced).

15.3 Analytics Data

Analytics events do not include your name, but they do include your IP address and a scrambled (hashed) identifier. To have them deleted, email [email protected] (if you can, before you delete your Account, so that we can find them) and we will delete them too.

15.4 Deletion by Email

If you can no longer get into the Service, or would like us to delete your Account for you, email [email protected] with your in-game name. Accounts are not necessarily tied to an email address, so your in-game name is how we find yours.

16. Your Rights

16.1 Depending on where you live (for example, under the GDPR or the UK GDPR), you have the right to:

1. ask what information we hold about you;
2. ask us to correct it or delete it;
3. object to our analytics;
4. unsubscribe from Update Emails at any time (Section 5.5);
5. withdraw your consent to ad measurement, or opt out of it, at any time (Section 11.5), including with your browser's Global Privacy Control signal; and
6. complain to your local data protection authority.

16.2 "Delete my save" (Section 15.1) deletes your Account immediately. For anything else (such as your analytics data), email [email protected].

17. Children

17.1 fishtheweb is a family-friendly game. There are no ads in the game, and chat is filtered with children in mind: links, social media handles and personal questions are blocked to keep everyone safe on the Island.

17.2 Gems can be bought with real money (see our Terms of Service, Section 9), and players under 18 need a parent's or guardian's permission to buy them. In the App, Apple's Ask to Buy and Screen Time let parents approve or block purchases.

17.3 We do not knowingly collect personal information from children under 13 without a parent's or guardian's consent, and we never send Update Emails to anyone we know to be under 13. If you believe we hold a child's information, email us and we will delete it.

17.4 If you are a parent or guardian and have a concern, email [email protected] and we will help.

18. Changes to this Privacy Policy

If we change what we collect, we will update this Privacy Policy and the "Last updated" date at the top of this page.