Ocean Online privacy

Updated October 10, 2026. Ocean Online is a game for adults 18 and older.

Local play

Your local captain and game progress are kept in this browser. Local account passwords are used to derive the key that encrypts progress. We do not receive these passwords. Clearing browser data removes local accounts and progress. Device access can expose locally stored recovery material.

Optional connected accounts and backups

You can choose Google, Discord, Twitch or GitHub to verify your identity. We store the provider name and stable account identifier, an Ocean account identifier, and creation/link dates. Google uses the OpenID sign-in scope, Discord uses identify, and Twitch/GitHub require no additional permission scopes. We do not request email, contacts, repositories, chat or channel permissions, or store provider profile names or email addresses. We never receive your provider password. Provider tokens are used once for verification and are not retained.

While signed in, you can explicitly link another provider so it opens the same Ocean account and backups. We never combine accounts based on a matching email or name. An identity already attached to another Ocean account cannot be moved or merged, and linking never changes your local captain or saved progress.

Connecting a captain stores its name and recovery key encrypted on our Cloudflare D1 database. Choosing “Back up progress” stores an encrypted snapshot of that captain’s saved game, including the game credentials needed for its market and prisoner records. These backups are manual. Signing in alone does not upload progress or restore another captain. Cloudflare processes this data on our behalf; The sign-in provider processes authentication according to its own privacy policy. The server operator can decrypt backups to provide recovery.

Essential, secure HTTP-only session cookies expire after seven days; temporary sign-in cookies expire after ten minutes. We store only hashes of session tokens. Short-lived hashed network identifiers limit abuse. Local rollback data is temporarily retained during restores to recover interrupted writes. Cloud records remain until deletion is requested. To request deletion of your cloud account and backups, contact jayblankenship@outlook.com. Deleting a local captain does not delete its cloud backup.

Analytics and other online features

Optional Google Analytics runs only after consent and can be turned off in Cookie settings. Multiplayer, market, reports and prisoner features retain their existing game records. Date of birth is used to check age on this device and is not stored. The game does not sell your account or backup data.

Return to Ocean Online · Google privacy policy · Discord privacy policy · Twitch privacy policy · GitHub privacy policy