PRIVACY
Splash Land, the pixel water polo game. Last updated October 2026.
Playing without an account
You can play every mode as a guest. A guest's careers and settings are saved only on your device. Nothing about you is sent anywhere. We show no ads and use no tracking. (On the website, the game's lettering comes from Google Fonts, which sees your device's internet address the way any website does. The App Store and Google Play apps carry their own lettering and don't use Google Fonts.)
Home-screen count (the website only): to count how many people add Splash Land to their home screen and open it from there, the website sends an anonymous note when it is added, opened from the home screen (at most once a day), or when its Add to Home Screen button or instructions are used. The note holds a random id made on your device, the kind of device (iPhone/iPad, Android or computer) and the game version. It never includes your account, name, email or birth year. (Our database provider, Supabase, sees your device's internet address when the note arrives, the way any website does; it is not stored with the count.) The App Store and Google Play apps don't send it.
Playing a friend online (VS FRIEND)
VS FRIEND only starts when both of you type the same 6-character room code. To connect, the two devices swap what a live game needs through our database provider's live channel (Supabase Realtime): a random player id made for the match, the game version and the connection details, which include each device's internet address. A connection helper run by Google (a "STUN" server) tells each device its own internet address so the two can connect directly. During the match the two devices send each other only the match itself. Nothing of it is stored, by us or anyone: there is no chat, no matchmaking with strangers and no history. In the App Store and Google Play apps the other player is shown only as FRIEND; on the website, as the name that player chose.
If you make an account
An account backs your careers up and lets you play them on your other devices. It keeps:
- Your email address and a password, to sign you in, and to email you a link to set a new password if you ask for one. The password is kept only scrambled (as a hash) by the sign-in system: nobody can read it, us included. If you use Sign in with Apple you can hide your email; Apple then gives us a private relay address.
- What your sign-in service shares. With Google, Google shares your email, your name and your profile picture's address; with Apple, your email (or the relay address) and, the first time, your name. The sign-in system stores them with your sign-in; the game itself only uses the email.
- A username you choose. When you play a friend in VS FRIEND, your friend sees it when playing on the website (the apps show every other player only as FRIEND).
- Your birth year, only the year, so the game fits your age. Accounts are for players 13 and older. It is never shown to other players and can't be changed later.
- Your careers' save files (the same data the game keeps on your device), the kind of device that saved them (for example "iPhone"), and a random device code, so we can sync them and tell you when a career was played on two devices.
- Sign-in security records. Like any sign-in system, Supabase Auth records when you sign in, from which internet address and with which browser, to keep accounts safe.
- Sign in with Apple only: a token Apple gives us, kept only so we can tell Apple to end the sign-in when you delete your account.
- Phone notifications, only if you turn them on: your device's push address, its time zone and language, which reminders you want, and the next reminder waiting to be sent. Notifications travel through your device's own push service (Apple's for iPhone and Safari, Google's for Chrome and Android, Mozilla's for Firefox).
We never ask for or keep contacts, location or photos, and we never sell or share your data. Your password is never stored readable, only as a hash.
Where it is kept
Accounts and cloud saves are stored with our database provider, Supabase. Each row can only be read and changed by its own account. Data travels encrypted (HTTPS).
Splash Land has its own Supabase project: its sign-ins and data are not shared with any other app.
How long it is kept
| What | How long |
|---|---|
| Account, username, birth year, cloud saves | Until you delete them (DELETE ACCOUNT, or a career's REMOVE in ACCOUNT). |
| Sign-in (email, password hash, what Apple or Google shared) | Until you delete your account. |
| The age check after deletion | 12 months (see below), then it is removed. |
| Phone notification devices | Until you turn notifications off, sign out on that device, or delete your account. |
| Sign in with Apple token | Until you delete your account (it is used then, and removed). |
| Home-screen count (random id, kind of device, game version; the website only) | Kept as an anonymous count. It can't be linked to you. |
| Sign-in security records | Kept by Supabase Auth for account security, then removed. |
Deleting it
In the game: ACCOUNT → DELETE ACCOUNT. This deletes your account, your username, your birth year, every cloud save, your notification devices and your sign-in, at once. Careers saved on your devices stay there and keep working as guest careers. Signing out keeps your account but removes it from that device.
- The age check: so a deleted account can't be made again with an older birth year, we keep, for 12 months, a scrambled code made from your email (it can't be turned back into the email) and the birth year you gave. Nothing else.
- With Sign in with Apple, deleting your account also tells Apple to end the sign-in. If that can't be done, the game says so, and you can remove Splash Land in your Apple ID settings yourself.
Children
Players under 13 can play everything as guests. We do not create accounts for them or keep their email: if a sign-in was already made when the birth year shows a player is under 13, it is deleted at once.
Questions
Contact: splashland.app@gmail.com. Changes to this page are dated at the top.