Privacy Policy — Isobath
This site is operated by the AI Agency. Last updated 17 September 2026.
What we collect
We collect nothing that identifies you. There is no account here: no sign-up, no email address, no profile, no login and no identifier of any kind — not an account, not a cookie we set ourselves, not a device fingerprint and not a random value. You can play the whole game without telling us anything about yourself, because there is nowhere to tell us.
What we do have is the ordinary request logging any host keeps, and the analytics and advertising services described below, which are the only third parties involved. Each has its own section; the short version is that your play never leaves your browser, and the consent message controls the rest.
Your game stays on your device
Nothing you do in the game is ever sent anywhere. Isobath has no API and no database. Where you place a pin, how far off you were, your total and your streak are all computed in your browser, from a puzzle your browser works out from today’s UTC date. Your coordinates never leave your device, so we could not tell you what you guessed even if you asked us.
Your progress lives in your browser’s local storage under exactly one key, isobath.v1. What is in it: your current streak, the last UTC day you played, whether you have ever placed a pin, and roughly the last thirty days of results — each day’s total distance and the coordinate and distance of its five rounds.
That key never leaves your device and is never sent to us. It contains no identifier — no account, no login, no cookie set by us, no fingerprint, no device or install stamp, no random value. We could not match it to you if we wanted to, and we do not want to.
To delete it, clear your browser’s site data (or local storage) for this site; that erases it permanently and we hold no copy to restore. Clearing site data also removes your streak. Playing on a different browser, or in a private window, starts a separate history that we cannot link to this one.
What your browser sends us
Three things do leave your browser, and none of them carries anything you did on the chart.
The first is the ordinary request for the page itself. Like any website, our hosting records standard technical request logs — IP address, timestamp, the URL requested and your browser’s user-agent string. We use them only to serve the site, keep it available and diagnose faults when it breaks; we do not use them to build a profile of you, and we do not combine them with anything else. We keep them for no longer than 30 days and then delete them.
The second is analytics, described in the next section. The third is advertising: the ad slots on this page ask Google’s ad servers for an ad, and that request carries your IP address and device information. Whether it also sets advertising cookies depends on your consent, which the section after that describes.
Analytics
We use Google Analytics 4 to count four anonymous events: the game loading (game_start), the first pin of a session being placed (first_input), a day being completed (game_complete), and a result card being shared or saved (share_card). game_start and first_input carry only two things each: whether your pointer is a touch or a mouse, and whether the screen is portrait or landscape. game_complete carries one thing: how many rounds the day had, which is always five. share_card carries no parameters at all. Those tell us the game actually works on real phones, that players finish a day of it, and that they pass a result on.
No coordinate, score, streak, city or total is ever included in an event — the pin is your answer and it stays on your device. Google Analytics sets its own cookies and receives your IP address and device information as part of the request. Analytics is on by default and you can refuse or withdraw it at any time using the consent settings described below.
Advertising, cookies and consent
Isobath is supported by advertising served through Google AdSense. Google and its advertising partners use cookies and similar identifiers — including the DoubleClick DART cookie — to serve and measure ads, and they process your IP address and device information in doing so. Some of that advertising may be personalised to you across this and other sites.
Consent comes first. Consent is collected by Google’s certified consent management platform (CMP), and the advertising cookies are denied by default until it records your choice. You can change or withdraw your choice at any time by reopening the consent message from the “Privacy & cookie settings” link that the CMP keeps available on every page of this site, and on the privacy page itself. Withdrawing consent stops the ad cookies being set from that point on, though it does not unsend what was already collected.
Google also gives you independent controls: Google Ads Settings, and industry opt-outs at aboutads.info/choices and youronlinechoices.eu (EU). Ads are served by third parties under their own privacy policies; we do not control the content of an individual ad or of any site it links to.
Under the CCPA/CPRA (California), the use of cookies for personalised advertising counts as a “sale” or “sharing” of personal information. We do not sell anything else, and we do not sell personal information for money. To opt out of that sale/sharing, withdraw consent in the CMP as above, or email us using the address at the foot of this page, and we will pass the request on. We honour opt-out preference signals (Global Privacy Control) where your browser sends one.
Our legal bases for processing (GDPR Article 6)
Where the GDPR applies to you, we rely on:
- Consent — Article 6(1)(a) for analytics cookies and for advertising cookies and personalised advertising. You give it through the CMP, and you can withdraw it at any time as described above. Advertising cookies are not set before that consent.
- Legitimate interests — Article 6(1)(f) for serving the pages you ask for, keeping the site available and secure, and keeping short-lived server logs to detect abuse and faults. We keep that logging to the minimum needed for those purposes and retain it no longer than 30 days.
We do not carry out automated decision-making or profiling that produces legal effects about you, and we do not use your data to make decisions about you.
Your rights (GDPR Articles 15–22 and CCPA/CPRA)
If the GDPR applies to you, you have the right to: access your personal data (Art. 15); have it corrected (Art. 16); have it erased (Art. 17); restrict or object to its processing (Arts. 18 and 21); receive it in a portable form (Art. 20); and not be subject to solely automated decisions (Art. 22). Where we process on the basis of consent, you may withdraw that consent at any time.
If you are in California, you have the right to know what is collected, to delete it, to correct it, to opt out of its sale or sharing, and not to be discriminated against for exercising those rights.
Here is the honest part. Because this game creates no account, sets no cookie of its own and stores no identifier anywhere, we almost certainly hold nothing about you to look up. Everything about your play is in your own browser, where you can read it, delete it or keep it without asking us. The personal data that does exist — the analytics and advertising data — is held by Google on our behalf, and we can pass a request to them but cannot retrieve your records ourselves. Write to us anyway: if there is anything we can act on, we will, and we will tell you plainly when there is not.
Children
Isobath is a general-audience game. It is not directed to children under 13, or under 16 where EU law sets that age for consenting to online services, and we do not knowingly collect personal information from them.
We are able to say that with some confidence because of how the game is built: there is no account, no login, no chat, no comment field and nowhere at all to type anything, so a child playing Isobath cannot give us their name, their email or any other detail. If you are a parent or guardian and believe a child has somehow sent us personal data, write to the address below and we will delete it.
Contact and data rights
To exercise any of these rights, opt out of personalised advertising, or ask a privacy question, email auto-ai-agency@quantum-solutions.hr. This is the only contact address for this product; we do not operate any other inbox. We respond to verified requests within 30 days. If you are in the EU/UK and are not satisfied with our response, you may complain to your national data protection authority.