Privacy Policy
Effective Date: 24 September 2026
Last Updated: 3 October 2026
1. Who We Are
PerpeNaval (available at perpenaval.com) is an independent online browser game developed and operated personally by Hakkı Berat Dalgar as an individual developer residing in Antalya, Türkiye ("we", "us", or "our").
We act as the Data Controller under the EU General Data Protection Regulation (GDPR) and applicable data protection legislation.
Official Contact & Privacy Inquiries: hello@perpenaval.com
2. Personal Data We Collect
We follow a strict principle of data minimization and do not collect passwords or sensitive categories of personal data.
Account Data: Your email address. If you authenticate via Google OAuth, we receive your Google Account ID and the email address verified by Google. We do not receive, process, or store passwords.
Game & Nautical Data: Your chosen Captain Name, insignia/mark, class, rating, ships, voyage routes, in-game treasury balance, standing orders, game settings, and operational logs, plus the calendar days on which you open the game. We look at those days only as totals (how many new captains come back after a day, a week and a month); they are never shown to anyone and leave with your account.
Technical & Connection Data: IP address, browser type, operating system, and access timestamps necessary for routing, server performance, and security monitoring.
Fair-Play Data: to keep money from moving between linked accounts, the game sets a random identifier in your browser and, on each visit, stores a salted hash of that identifier and a salted hash of your IP address against your account for 30 days. The address and the identifier themselves are not stored, and the hashes are used only to detect accounts that share a device or a network.
Push Notifications: If you explicitly opt in, we store the browser push subscription token required to alert you when your ships reach port.
Purchase Data: When you buy the optional "No-Ads" upgrade, our Merchant of Record (Lemon Squeezy) transmits an entitlement confirmation (Order ID and status). We never receive, handle, or store your payment card numbers or financial billing data.
Advertising Identifiers: Google AdSense serves ads on the website. In the EEA, UK, and Switzerland, ad cookies and tracking identifiers are set only if you provide consent through Google's consent interface.
Storage on Your Device: the game keeps a few small entries in your browser (your session, settings, language and the fair-play identifier). Each one is listed in our Cookie & Storage Policy.
Emails: we send only the sign-in links you ask for and, rarely, a message about your account or a purchase. We send no newsletters or marketing email, so there is nothing to unsubscribe from. Push alerts are off until you switch them on, and you can switch them off in Settings at any time.
3. Legal Bases for Processing
We process personal data under GDPR Article 6 on the following grounds:
Performance of a Contract (Art. 6(1)(b)): Authenticating sign-in, saving game progress, calculating fleet movements while offline, and delivering core gameplay.
Legitimate Interests (Art. 6(1)(f)): Preventing multi-accounting, script automation, and cheating; reviewing player misconduct reports; and serving non-personalized display ads to fund free hosting.
Consent (Art. 6(1)(a)): Sending browser push notifications (revocable anytime in Settings) and serving personalized ads. Ads are non-personalized unless you switch on "Personalised ads" in Settings › Privacy; in the EEA, UK and Switzerland Google also asks for your consent through its own consent message.
Legal Compliance (Art. 6(1)(c)): Retaining technical transaction logs and responding to lawful governmental requests.
4. Third-Party Infrastructure Processors
We do not sell personal data. Data is shared solely with infrastructure providers necessary to operate PerpeNaval:
Hosting, CDN & Security: Cloudflare, Inc.
Database & Authentication Server: Supabase, Inc.
Merchant of Record & Payments: Lemon Squeezy, LLC
Advertising: Google LLC (Google AdSense)
Single Sign-On: Google LLC (Google OAuth 2.0)
Support Email: Google LLC (Google Workspace)
Web Fonts: Google LLC (Google Fonts), which receives your IP address when a page loads the fonts
Sign-in Library Delivery: jsDelivr, an open-source content network that delivers the sign-in code to your browser and receives your IP address when it does
5. Public Information by Design
PerpeNaval takes place on an open nautical chart. The following data is visible to all active captains:
Your Captain Name, mark, rank, and class.
Your ships' names and current coordinates on the world map.
Leaderboard scores and historical world records.
Your email address, Google ID, private reports, and transaction details are strictly confidential and never displayed to other players.
6. International Data Transfers
Our infrastructure providers maintain servers globally, including within the European Union and the United States. By creating an account, you acknowledge that your information is processed on servers operated by Supabase, Cloudflare, and Google outside your country of residence under standard contractual safeguards.
7. Account Deletion & Data Retention
Data is stored for as long as your account remains open.
You may permanently delete your account at any time via Settings › Account › Delete Account. Your account, fleet records, and transaction ledgers are purged from the live database immediately. Server backup archives overwrite within thirty (30) days.
Upon deletion, your Captain Name is removed from active leaderboards (historical records may preserve an anonymized entry).
If you cannot sign in any more, write to hello@perpenaval.com from the email address on the account and ask for deletion. We confirm and delete the account within thirty (30) days. A monthly No-Ads plan is cancelled first, so you are never billed for a deleted account.
Fair-play hashes expire after 30 days. Purchase records kept by Lemon Squeezy follow their own legal retention rules for tax.
8. Age Limitation & Protection of Minors
PerpeNaval is not directed at children under the age of thirteen (13). By registering an account on perpenaval.com, players explicitly confirm that they are at least thirteen (13) years of age. We do not knowingly collect personal data from anyone under 13. If you believe a minor under 13 has registered, notify hello@perpenaval.com and the account will be deleted immediately.
Some countries in the EEA set a higher age, up to 16, for consenting to optional processing. Personalised ads are off by default; if you are under 16 and live in the EEA or the UK, leave them off.
9. Your Statutory Rights
Under GDPR (Articles 15–22) and international privacy laws, you have the right to access, rectify, port, or erase your data, and to object to processing based on legitimate interests.
Data Portability: Download your full JSON data record anytime via Settings › Account › Export My Data.
Direct Requests: Contact hello@perpenaval.com. We respond within thirty (30) days without charge.
Player Report Exemption: To prevent retaliation and maintain community safety, the identity of players who file moderation reports is confidential and exempt from third-party data subject access requests pursuant to GDPR Art. 15(4).
Complaints: you may also complain to the data protection authority where you live. In Türkiye this is the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).
10. Changes to This Policy
When this policy changes, the date at the top changes with it. Material changes are announced in the game before they take effect.