Open Beta · Free to Play

Privacy Policy

Last updated: 2026-05-29

SailMOB is a sailing simulator made by Ventus Optera, LLC. This page explains what data the app and website collect, why, and how to reach us. We will keep it short and concrete.

The current iOS Beta ships without sign-in and without payment surfaces. Everything described below as "in the Beta" applies today. Anything described as "once accounts are enabled" applies to a later release and is included here so you can see where SailMOB is headed.

1. What we collect

In the iOS Beta (today)

Anonymous gameplay events. Race starts and finishes, mode selections, tutorial progress, button taps. No name, no email, no account is required to play, so these events are tied to an anonymous device identifier only.
Session recordings. The Beta uses PostHog session replay to record gameplay sessions. This helps us diagnose bugs and study learning patterns. The Beta has no password fields and no profile fields, so nothing keystroke-sensitive is captured.
Crash and error reports. Stack traces, device model, OS version, and a small breadcrumb trail of the last few in-app actions go to Sentry whenever the app crashes or surfaces an error. No personally identifiable information is attached.
Bug reports you submit. When you tap "Report a bug", we send your description, a snapshot of the current game state (boat positions, race phase, recent inputs), and an idempotency key to Supabase. Your email is included only if you type it.
Page-view and UTM tracking on sailmob.co only. The marketing site uses Google Analytics 4 and stores any utm_* parameters that brought you in. The iOS app does not load the marketing site.
Local storage on your device. The app stores a daily session counter and the date of your last session locally, to manage Beta session limits. Subscription tier is not persisted to local storage in any build.

Once accounts and payments are enabled in a later release

Account information. Email and display name when you sign up via Supabase Auth.
Payment information. Processed by Stripe. We never see card numbers; only a subscription tier and status are stored on our side.
Identified gameplay history. Race results, leaderboard entries, settings, and tutorial progress tied to your account.

2. What we do not collect

Location. The iOS app requests no location permission. The marketing site infers approximate city from IP for analytics only.
Camera, microphone, photos, contacts, motion, or health data. None are requested in Info.plist.
Advertising identifiers (IDFA). We do not show the App Tracking Transparency prompt; we do not track across other apps.
Voice or video.
Data we sell or share with advertising networks. None.

3. Why we collect it

In order of importance: to make the game work for you, to fix bugs, and to learn what helps sailors improve so we can prioritise feature work.

4. Who processes data on our behalf

Service	Purpose	Region
Vercel	Hosting, edge functions, request logs	US (global edge)
Supabase	Database, bug-report storage. Auth when enabled.	US
PostHog	Anonymous product analytics and session replay	US
Sentry	Crash and error reports	US
Google Analytics 4	Marketing-site page views and conversions	US (global)
Upstash Redis	API rate limiting (IP and counters)	US
Stripe	Payment processing once paid tiers are enabled	US (global)
Resend	Transactional email once accounts are enabled	US

Each of the above is bound by its own published privacy commitments. We do not sell personal data. We do not use it for cross-context behavioural advertising.

5. Retention

Anonymous events and session recordings: 12 months (PostHog default).
Crash and error reports: 90 days.
Bug-report game-state snapshots: 12 months from submission.
Server and rate-limit logs: 30 days.
Account and gameplay data, once accounts exist: kept while your account is active; deleted on request as below.

6. Your rights

You can ask for a copy of any data tied to your account, ask us to correct inaccurate data, or ask us to delete it. Email privacy@sailmob.co from the address on your account. We respond within 30 days (45 for complex GDPR or CCPA requests).

If you live in the EU or UK, you have additional rights under GDPR. If you live in California, you have rights under CCPA / CPRA, including the right to opt out of any "share" of personal information; we do not share for advertising purposes, so the opt-out is automatic for SailMOB.

7. Cookies and similar storage

The iOS Beta uses only first-party local storage as described in section 1. The marketing site sets a small number of essential cookies (Supabase auth session, GA4 client ID) and, in EU and UK regions, asks for consent before any non-essential analytics. We do not set advertising cookies.

8. Children

SailMOB is rated 4+ for the App Store, but it is not directed at children under 13 (under 16 in the EU and UK). We do not knowingly collect data from children under those ages. If you believe a child has provided personal data, contact privacy@sailmob.co and we will delete it.

9. International transfers

If you use SailMOB from outside the US, your data is transferred to and processed in the US. For EU and UK transfers, our sub-processors operate under Standard Contractual Clauses and (where applicable) the UK International Data Transfer Addendum.

10. Security

We use TLS in transit, encryption at rest for the database, scoped service-role keys, Row-Level Security on Supabase tables, rate limiting, and audit logging. No system is perfectly secure; we will notify anyone affected by a breach as required by law.

11. Changes

We may update this policy. The "Last updated" date at the top will change. Once accounts exist, material changes will be announced in-app or by email at least 14 days before they take effect.

12. Contact

Privacy questions and rights requests: privacy@sailmob.co

General contact: hello@sailmob.co

Ventus Optera, LLC
United States

End User License Agreement