Last updated: 6 September 2026
Bubblebound accounts and saves
Bubblebound can be played without signing in. Optional Google sign-in creates a BiteLah game account with a Google account identifier and basic profile information such as an email address. Google Firebase provides authentication and cloud storage. We use this information to restrict access to your own save, not for advertising.
Cloud storage holds your game progress, a previous save revision and an update time. Unlike the separate encrypted arcade backup, Bubblebound saves are not end-to-end encrypted. Automatic uploads are optional and run while the game is open. Cloud progress is not a verified competitive score.
In Progress & account, use Delete cloud save or Delete BiteLah game account. Deletion requires Google reauthentication and removes the active cloud save and its previous revision. It does not erase downloaded files, device progress or your Google account. Other signed-in devices can upload again, so sign out on those devices. Provider operational logs and backups may follow provider retention schedules.
Signing out leaves device progress and recovery copies on that device. Clear this site's browser data to remove those local copies, after downloading anything you want to keep. Do not use a shared browser for private play.
Optional interactive map
The forecast map loads OpenStreetMap tiles only after you choose to load it. The tile provider receives normal network information, including your IP address, browser information, website referrer and the map tiles requested. Saved-water IDs remain in local browser storage and are not sent to the tile provider. The map does not request your device location, provide navigation or confirm fishing access. Hiding the map stops further tile loading. See the OpenStreetMap Foundation privacy policy. Tiles are not downloaded for offline use.
Anonymous product diagnostics
Product totals include coarse page loads, supported game starts, tutorial completions and sampled script-loading or execution errors. Error reports contain only a page category, error category and small-screen, large-screen or installed-app label, not error messages, stack traces, room codes or personal input. Each error category is counted at most once per page load. These counts do not identify unique visitors or track an individual journey. Collection respects the product-analytics opt-out, Do Not Track and Global Privacy Control. Daily totals older than 90 days are removed when collection next runs; private automated report artifacts expire after 30 days.
What stays on your device
Saved spots, your last selected location, theme choice, accessibility preferences, fish-buddy settings, most minigame results, and private trip-validation records are stored in your browser on your own device. Saved-water comparisons, the fish buddy and minigames run in the browser, and calendar or trip-log export creates a local file. Except for an optional public leaderboard, private room or encrypted progress backup described below, BiteLah does not upload those records or settings. You can clear local game history, delete the trip log inside BiteLah, or remove all stored preferences by clearing this site’s browser data.
Optional encrypted progress backup
You can create a private backup of selected arcade progress without opening an account. The browser encrypts the backup with AES-GCM before it is uploaded. BiteLah stores the encrypted data, its encryption nonce and update time. Your recovery key is sent over HTTPS only to authenticate backup requests, converted to a one-way keyed hash and not stored in raw form. BiteLah cannot restore or read the backup without that key. You can restore it on another device, delete the cloud copy with the “Keep local only” control, or avoid the feature entirely. Losing the recovery key means the backup cannot be recovered.
Offline app cache
If you install or revisit BiteLah, its service worker may cache BiteLah pages, styles, scripts, the manifest and app icon so the interface can open offline. It does not permanently cache third-party weather API responses.
Installed iOS and Android apps
The installed BiteLah apps bundle the interface and games on the device. Saved waters, game progress, private trip records, theme and accessibility preferences remain in the app’s local storage unless you explicitly enable the encrypted progress backup described above. Version 1 of the installed apps does not display web advertising and does not connect to or display public game leaderboards; scores remain on that device. Forecast requests, optional private-room or backup requests and a small allowlist of aggregate product events are sent securely to BiteLah’s API. The product events identify only a broad action and context, such as opening a game or loading a coastal forecast, and do not include a device identifier, account, precise location, saved-water name, note or game result.
BiteLah Fish Buddy browser extension
Fish Buddy displays an optional companion on websites you allow. Companion names, species, size, movement and quiet preferences, adoption date, memories, reef discoveries, focus-session progress, remembered position and excluded website hostnames are stored locally in your Chrome profile. The extension checks the current website address to apply access and hide settings. It detects pointer movement, focus and keyboard activity transiently to avoid interrupting you; it does not record typed content or transmit these signals.
The extension does not read webpage text, form values, passwords, cookies or browsing history. It contains no analytics, advertising or remote executable code and does not send companion data to BiteLah. Opening a link to the BiteLah website is separate and is covered by the website policies above. Exporting creates a local JSON backup containing your companion details and progress; restoring reads the file you choose. Backups do not contain website permissions or excluded-site names. Keep exported files private and delete them separately when no longer needed.
You can pause the buddy, hide it on a website, revoke website access, or reset companion progress in the popup. Reset keeps permissions and site preferences; uninstalling removes extension-local data but not exported backups. The use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Forecast providers
On the hosted site, BiteLah’s Cloudflare function may request and temporarily cache weather and marine information from Open-Meteo. Supplementary Singapore short-range weather information may be requested from data.gov.sg. If the Cloudflare function is unavailable, the browser may contact those providers directly. The services may receive normal connection information such as your IP address and the coordinates of the predefined forecast area you selected. BiteLah does not request your device’s precise location.
Tracking, campaign links and ads
Google Ads measurement
The public website loads the Google Ads tag (AW-18482256623) on every page to measure advertising performance. Google may use advertising cookies and receive page URLs, IP addresses, browser information and advertising interaction data. The website does not currently present a Google Ads consent prompt or set denied-consent defaults. We do not explicitly send game saves, account email addresses or private trip records through this tag. Native app builds exclude the tag.
BiteLah currently includes the Google AdSense site-verification loader on selected pages but has not activated visible ad placements. Loading that script may send Google normal connection information such as your IP address, browser details and the page URL. Cloudflare Web Analytics measures aggregate visits and page performance without placing analytics cookies or accessing browser storage. BiteLah also counts a small allowlist of product actions as daily totals, such as a broad water type being loaded, a forecast section being viewed, a game being opened or a daily challenge being completed. Campaign links may include short source, medium and campaign labels. BiteLah stores the latest labels on your device and counts the combined label as an aggregate daily visit so it can tell whether a shared card or campaign was useful. It does not attach the label to an account, device identifier, precise location, saved-water name, score, nickname or browsing history. You can turn these BiteLah product totals off from the Arcade progress section.
Future forecast notifications
The forecast-alert interest control only stores a preference on your device. It does not request notification permission, create a push subscription or send a saved-water selection to BiteLah. Before Web Push is enabled, BiteLah will add a separate opt-in flow explaining what is sent, how to unsubscribe and how long a subscription is retained.
Public game leaderboard
On the website, if you choose to join a public game board, BiteLah submits the nickname you enter, verified game statistics and submission time. Daily boards are available for selected skill games, while Makan Fin-ish Line remains a private random decision tool with no leaderboard. Do not use your real name or other personal information. One-way keyed hashes derived from normal connection information and a random local player identifier are retained with the score to limit duplicate or automated submissions. BiteLah does not store the raw IP address or raw local identifier in the leaderboard database. Invalid, duplicate, excessive and inappropriate submissions may be rejected or removed. Local play continues to work when an online board is unavailable. Public boards are disabled in the installed iOS and Android apps for their initial release.
Private friend rooms
Cast Together Lah can create an optional private room for up to four people. BiteLah temporarily stores the room code, the nickname each participant chooses, a random player identifier, live round status and catch totals so invited devices can stay in sync. A random room token is stored on each participant’s device and is required to read or update that room. Rooms do not include chat, public discovery, accounts or precise location. Rooms become inaccessible after two hours, with expired records cleaned up during subsequent room requests. If the host leaves, another participant becomes host; an empty room closes. Use a nickname rather than personal information.
Private validation, not public feedback
The optional Trip Mode and trip validation log record the selected predefined water, forecast score, model version, broad forecast signals, session time and the result you enter. BiteLah may compare those records on your device to show private forecast-agreement and personal tide-pattern summaries. These records and summaries remain in local browser storage until you delete them; they are not transmitted to BiteLah, used to train a public model or displayed publicly. Exporting the log downloads a CSV file to your device.
Security and sensitive information
Do not store sensitive personal information in BiteLah. Saved spots are selections from BiteLah’s predefined public water list, not private coordinates or account records.
If this changes
Before visible or personalised advertising is enabled, BiteLah should add the appropriate consent controls and update this notice with the final advertising behaviour. Future paid features or changes to account and community data handling will require another update.