Privacy Policy

To preserve your voyage across sessions without requiring sign-in, Barnacle Bay stores gameplay progress locally in your browser or mobile WebView localStorage:

• barnacle-bay-voyage-v1: Stores charted island indices, collected chest IDs, recovered treasure map IDs, discovered hidden isles, best score, gold balance, fitted hull and cannon upgrade levels, and your optional captain alias (up to 24 characters). This data stays on your device unless you choose to sign the public leaderboard.
• barnacle-bay-ledger-v2: Created only after you explicitly tap Inscribe on the leaderboard. Stores your leaderboard row ID and a random 256-bit write token so later island discoveries on the same device update your existing score row rather than creating duplicate entries.
• base44_analytics_denied: Records your preference if you turn off first-party route-view logging below.

Barnacle Bay never creates a leaderboard record automatically. When you enter a captain alias (1 to 24 characters) and submit it on the Pirate's Ledger, our server validates your charted islands and upgrade bounds and stores a PirateScore record containing:

• Publicly visible fields: Captain display alias (captain_name), server-calculated score, islands_discovered count, discovered_islands names, validated gold, upgrades levels, and timestamps. Use a fictional pirate moniker rather than your real full name or personal info.
• Restricted verification digest: A one-way SHA-256 hash of your device write token (voyage_token_hash), hidden from all public and client reads via field-level Row-Level Security (read: false), used solely to authorize updates or self-service deletion from the originating browser.

When you inscribe, sync, or delete a leaderboard entry, our server function reads Cloudflare's cf-connecting-ip header transiently in volatile Worker memory (60-second sliding window) solely to block automated spam and abuse. Client IP addresses are never written to PirateScore records.

Base44's hosting runtime logs basic aggregate route views (Home, leaderboard, privacy, terms) and unhandled server error diagnostics to keep the service reliable. You can disable route-view logging on this device at any time in Section 6 below.

Barnacle Bay does not request or access Camera, Microphone, Contacts, Photo Library, Precise or Coarse Location, Bluetooth, Calendar, SMS, Push Notifications, or mobile advertising identifiers (Apple IDFA or Google AAID). Cannon broadside sound effects are synthesized locally in memory through the standard Web Audio API without recording audio.

Infrastructure providers: Barnacle Bay runs on Base44 and Cloudflare Workers over HTTPS, and loads the open-source Geist and Geist Mono type families from Google Fonts. We do not embed third-party ad SDKs, cross-app tracking pixels, or data-broker scripts, and we never sell or share personal information for behavioral advertising.

Data retention: Local progress stays in your browser until cleared. Inscribed leaderboard rows remain active until you erase them using the control below or request removal. Deleted Base44 database rows may remain in platform recovery backups for up to 30 days before permanent purge.

Children's privacy: Barnacle Bay is a general-audience naval arcade game with no chat, free-text messaging, user profiles, or personal contact collection. Players under 13 (or their parents and guardians) should never enter a real name in the optional 24-character captain alias box and can erase both local and server-side voyage data immediately below.

Barnacle Bay is published by Abstrekkt LLC (Grayslake, Lake County, Illinois, United States) via abstrekkt.com and chaosclub.co. If you cleared your browser storage before erasing an inscribed leaderboard row and need manual removal of a captain entry, submit the captain alias and approximate inscription date through the contact channel on abstrekkt.com.