Privacy Policy

Last updated July 2026

World Aquarium is a browser-based social aquarium where people paint fish, release them onto a shared world map, view fish in local aquarium scenes, feed fish, save favorites, and share fish cards.

Quick Summary

We use account data to let you sign in, release fish, save fish, and keep your tanks synced.
Fish you release can be public because World Aquarium is a shared map and aquarium experience.
We do not sell your personal information.
We use limited analytics, logs, and rate-limit data to keep the map, aquarium, security, and performance working.
You can contact us to ask about your account, content, or deletion requests as the product grows.

Information We Collect

Account information from Google sign-in, such as your Google account identifier, email address, and profile name or avatar when Google provides it.
Profile information, such as your World Aquarium display name, unique tagline, profile image, account status, warnings, and moderation state.
Fish content you create, including fish name, artwork, message, release identity setting, release location coordinates, size, likes, and share-card information.
Activity information, such as fish you release, save, open, report, delete, feed, point to other fish, and view in personal or world aquariums.
Super Feed information, such as your balance, daily rewards, gifts, spending, and future purchase records needed to maintain a reliable ledger.
Reminder information when you set a fish reminder, including the fish, reminder time, delivery status, and the verified account email used for that one-time message.
Technical information, such as device/browser details, error logs, and basic request metadata used for security, debugging, and performance.
Purchase and support information if paid features are added later, such as transaction identifiers and support messages. Payment card details should be handled by the payment provider, not directly by World Aquarium.

How We Use Information

To create and maintain your World Aquarium account.
To let you release fish, save fish, keep personal tanks, and return to your aquarium activity later.
To display fish on the world map, generate local aquarium scenes, and show share previews.
To deliver one-time fish reminder emails that you request.
To maintain Super Feed balances, daily rewards, gifts, and future purchase fulfillment.
To measure high-level product health, such as sessions, major feature use, sharing, retention, and performance.
To prevent spam, abuse, security issues, and technical problems.

Google User Data

We use Google sign-in only to authenticate you and create or access your World Aquarium account. We do not request access to Gmail, Drive, Calendar, Contacts, or other Google services. World Aquarium's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and Local Storage

We may use cookies, browser local storage, and similar technologies to keep you signed in, remember interface state, improve performance, reduce repeated loading, and protect the service from abuse. Some map, tank, or preview data may be cached on your device so the app feels faster.

Location and Coordinates

Released fish are tied to map coordinates because location is part of the World Aquarium experience. If you use the "center on my location" feature, your browser asks for permission and uses that location to move the map. We do not need your device location to display the map, and we do not treat the location button as a fish release unless you choose to release a fish there.

Sharing and Storage

Fish you release may be visible to other visitors on the world map, in aquarium scenes, in profile tanks, in fish passports, and in share previews. Public releases may show your World Aquarium display name and tagline. Anonymous releases hide your public display identity from other users, but we still keep private account records needed for safety, moderation, support, and abuse prevention. We do not sell your personal information or use it for cross-context behavioral advertising.

Service Providers

We use service providers to run World Aquarium, including hosting, database, authentication, file storage, maps, rate limiting, email delivery, security, internal analytics, uptime monitoring, and future payment processing. Current providers include Vercel, Supabase, Cloudflare/R2, Upstash, Resend, Google sign-in, UptimeRobot, and OpenFreeMap/OpenMapTiles with OpenStreetMap data. If paid features are enabled, Stripe may process payment information. These providers process information only as needed to provide their services to us.

How Long We Keep Information

We keep account, fish, and aquarium information for as long as needed to operate World Aquarium, maintain public fish links, prevent abuse, comply with legal obligations, resolve disputes, and improve the service. When a creator deletes a fish, it disappears from public and account-facing experiences immediately. We may privately retain the deleted fish record and artwork for up to 30 days so we can recover it at the creator's verified request, protect against accidental deletion, and complete backup processing. After that recovery period, the content is scheduled for deletion or anonymization unless a longer period is required for security, abuse prevention, legal compliance, or dispute resolution.

Safety and Security

We use reasonable technical and organizational safeguards, but no internet service can be guaranteed to be perfectly secure. Please use a trusted device and tell us if you believe your account or fish content has been misused.

Your Choices

You can choose whether your release identity appears public or anonymous for fish you release. You can delete your own fish from public views inside the app, cancel fish reminders where available, sign out, and contact us to request account or content deletion as the product grows.

Contact

Questions or requests can be sent to support@worldaquarium.world.