Privacy Policy

Effective 2026-10-17

Gullhaven (gullhaven.io) is a small independent game. We keep only what it takes to run the game and keep it fair. We don't sell your data, we don't show ads, and we don't use analytics or tracking cookies.

Playing as a guest

You can play without an account. When you pick a name, the game makes an anonymous guest login and a session cookie so it can remember your diver in this browser. We don't ask who you are. A guest diver that hasn't been played for 30 days is deleted, along with its guest login.

Saving your diver

If you save your diver, we store:

• your email address, used to sign you in;
• your password, stored only as a scrypt hash (we never see or keep the password itself);
• for each signed-in session, the IP address and browser (user agent) it started from.

Accounts are handled by the open-source Better Auth library running on our own server. We don't currently send you email.

Game data

For each diver we store what the game needs: its name and look, where it is, its gold, inventory and bank, skills, collections and progress. Some interface preferences (like which tab was open last) are kept in your browser's local storage and never leave your device.

Cookies

One cookie: the session cookie that keeps you signed in. It's marked secure and HTTP-only. There are no advertising, analytics or third-party cookies.

Server logs

The server keeps a log for 30 days, then deletes it. Lines are tied to your account id and diver name, never your email address. It covers:

• chat messages, so we can deal with abuse;
• sign-ins, with your IP address;
• what you do in the game that moves items or gold or involves other players: shop purchases and sales, looting, building projects, drownings and wrecks, the Salvage Office, gates and rigs, and party invites and changes;
• moderation actions (mutes, bans, kicks) and the reason given;
• the IP address of connections we refuse or rate-limit.

We use this to catch cheating and abuse and to fix bugs. The log never contains passwords or session tokens. A record of moderation actions (who acted, on whom, when and why) is also kept in the game's database, and stays there even after an account is deleted.

Chat and name screening

To keep chat safe, the game sends chat messages (public and party), new diver names and party names to OpenAI's moderation service, which checks them for things like hate, harassment, threats and sexual content. Only the text itself is sent: not your email, IP address or account id. OpenAI processes it under the data usage policies for its API.

A message that breaks the chat rules isn't delivered, and a name that does can't be used. Sending several blocked messages in a short time mutes you from chat for a few minutes automatically. So that moderators can review them, we keep a copy of:

• each blocked message or name;
• each new diver name that went through unchecked because the service couldn't be reached.

Each copy is kept with your account id, diver name, where in the game it was said and the service's scores. These copies are deleted after 90 days.

Error reports

If the game hits an error in your browser, it sends us a short report: the time, the game version, your account id (if you're signed in), what kind of error it was, the error message and stack trace, the page address (without any query string), your browser's user agent, and sometimes how many times it repeated. We don't store your IP address with it. Error reports are kept for 14 days.

Backups

The database is backed up regularly. Backups on the server are kept for up to 14 days. A daily copy is encrypted and stored offsite, and kept for 30 days.

Where it's hosted

The game runs on a server at DigitalOcean. Traffic to the site may pass through Cloudflare, which handles your IP address to deliver the site and protect it from attacks, and which also stores the encrypted offsite backups. Apart from the chat screening described above, we don't share your data with anyone else, except if the law requires it.

Deleting your account

You can delete your account in the game: open the menu, choose Account, then Delete account. You can also email us at [email protected] from the address on the account and we'll do it for you.

Deleting removes your account and your diver, with everything it owns, straight away. Server logs, error reports and backups aren't edited, but they age out on their normal schedule: error reports within 14 days, logs and backups within 30 days. The moderation record described above is kept, and copies kept from chat screening are deleted on their 90-day schedule.

Children

Gullhaven isn't directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has saved an account, email us and we'll delete it.

Changes to this policy

If we change what we collect or how we use it, we'll update this page and its effective date.

Contact

Questions or requests: [email protected].