Privacy Policy

Last revised: July 8, 2026

This policy lays out what information Tidepool ("we", "us") gathers on tidepoolplay.com, what we do with it, and the choices available to you. We've tried to keep it as clear as possible.

1. What we collect

Account details. If you sign up: your first name, email address, and a hashed copy of your password. Your actual password is never stored in readable form.
Ad-attribution data. If you land on the Site through an ad, we may capture campaign IDs from the URL (like gclid or UTM tags), the page you landed on, and where you came from, and link that to your account once you register.
Basic technical data. Routine server logs — IP address, browser type, rough country location, and timestamps.

We never collect payment details, since there's nothing on the Site to buy.

2. How we put it to use

To keep the Site running and your session logged in.
To send the emails you signed up for: a verification link, plus updates when new games launch.
To figure out which ads bring in visitors who actually stick around and enjoy the Site, using the attribution data mentioned above.
To keep the Site safe from abuse.

3. Third-party game servers

Some games are streamed in from third-party servers. Launching a game connects your browser directly to those servers, so they'll see your IP address and standard technical info, just like loading any web page. We never pass along your name or email to them.

4. Sharing your data

We never sell your personal information, and we don't hand it to outside companies for their own marketing purposes. The only sharing we do is with the vendors that host our infrastructure and process data on our behalf, or when required by law.

5. California privacy rights (CCPA/CPRA)

California residents have the right to:

Know what personal data we've gathered about you, and get a copy of it.
Delete your personal data.
Correct any data that's inaccurate.
Opt out of sale or sharing. We don't sell your data and we don't share it for cross-context advertising purposes — there's nothing to opt out of right now, but if that ever changes, we'll add a "Do Not Sell or Share My Personal Information" link first.
Equal treatment. You'll never be treated any differently for using these rights.

To use any of these rights, email privacy@tidepoolplay.com from the address tied to your account. We reply within 45 days.

6. Kids and COPPA

This Site is meant for adults 21 and up. We don't knowingly gather information from anyone under 21, and certainly not from children under 13. If you think a minor has given us information, email privacy@tidepoolplay.com and we'll delete it right away.

7. Cookies and browser storage

We rely on a single session cookie to keep you signed in, plus browser local storage to remember ad-attribution details as you move between pages. We don't run any third-party ad or analytics cookies here.

8. How long we keep data

Account information sticks around for as long as your account exists. Ask us to delete your account, and we'll remove that data. Server logs are cleared on a short rotation.

9. Keeping things secure

Passwords are hashed with PBKDF2, sessions are cryptographically signed, and the whole Site runs over HTTPS. No system is bulletproof, but we limit our exposure by simply not holding onto data we don't actually need.

10. Policy updates

If this policy changes, we'll update the date up top, and we'll flag any significant changes on the Site.

11. Get in touch

Privacy questions or requests: privacy@tidepoolplay.com
Anything else: support@tidepoolplay.com