Privacy Policy

Last updated: 2026-05-03

The short version

Saltbound is a browser-based game. To make accounts work and to fix bugs, we store a small amount of data tied to your browser. We don't sell it, we don't track you across other sites, and we don't use third-party analytics.

What we store

• A random device identifier kept in a cookie named sb_device. This is how we recognize you on return visits without asking you to sign up.
• A short-lived session token in a cookie named sb_session (24 hours).
• Your account record: an opaque UUID, an auto-generated display name (e.g. "Captain 7A2F"), the time you first played, and the time you last logged in.
• Your ship state: position, hull/cannon/sail tier, hit points, gold, experience, skill choices, ammo type, equipped cosmetic.
• Tester feedback if you submit it through the in-game feedback button.
• Error reports: when the server or your browser encounters an unexpected error, a stack trace is sent to Sentry for diagnosis. Reports include your browser version, the page URL, and the error itself — no game state, no account ID by default.

Cookies

We use exactly two cookies, both first-party, both HttpOnly and SameSite=Lax:

• sb_device — random per-browser identifier, 10-year expiry. Clearing it resets your account; the data we hold for the previous identifier becomes orphaned and is deleted on the next sweep.
• sb_session — short-lived JWT proving you're logged in, 24-hour expiry. Refreshes automatically.

We do not use analytics cookies, ad cookies, or third-party tracking pixels.

How we use your data

• To run the game (your ship, your gold, your progress).
• To diagnose and fix bugs (Sentry error reports).
• To prevent abuse — if we have reason to believe an account is cheating or harassing other players, we may inspect its state.

Who we share it with

Sentry is the only third party that ever sees data from us. They process error reports on our behalf. We do not sell, rent, or license your data to anyone.

Discord linking

If you choose to link a Discord account, we additionally store your Discord user ID and your current Discord display name. We use these so the Discord bot can recognize you, credit raffle entries, and DM you when you win. You can unlink at any time, which clears these fields.

How long we keep it

Account data is kept as long as the account is active. If you haven't played in 12 months we may delete inactive accounts as part of routine cleanup. Sentry error reports are retained for 90 days.

Your rights

You can ask us to export or delete the data tied to your account. Email us (see below) with your in-game display name and we'll respond within a reasonable time.

Children

Saltbound is not directed to children under 13. If you believe a child under 13 has provided data to us, contact us and we'll delete it.

Changes

If we change this policy in a way that meaningfully affects you, we'll update the date at the top and announce it in-game and in our Discord.

Contact

Email: [CONTACT_EMAIL — fill in]