Coastcoil - Privacy Policy
This policy explains what data the Coastcoil app (the "App") and coastcoil.com (the "Website") collect, why we collect it, who processes it, and your choices. Using the App or Website does not require joining our email list.
Summary
Coastcoil is a single-player and co-op arcade game. We do not ask for your real name, email, or phone number in the App. To run online features, purchases, and ads, the App and our service providers collect a limited set of data such as an anonymous player ID, your device advertising identifier, purchase records, and gameplay or usage events. We show personalized ads only if you allow tracking when iOS asks you. The Website collects your email address only when you choose to request launch updates or contact support.
Data we collect and why
| Data | Why | Provider |
|---|---|---|
| Anonymous player ID | Save your progress, run leaderboards | Unity Gaming Services, Apple Game Center |
| Display name you choose | Show your name on leaderboards | Unity Gaming Services |
| Game progress, scores, virtual currency | Cloud save, leaderboards, economy | Unity Gaming Services |
| Purchase records | Deliver and restore in-app purchases | Apple / Google, Unity IAP |
| Advertising identifier, ad interactions, coarse location | Show and measure ads | Unity LevelPlay / ironSource |
| Gameplay and usage events, approximate device info | Understand and improve the game | Unity Analytics |
| Network or connection data during multiplayer | Connect players in co-op matches | Unity Multiplayer / Netcode |
The App does not collect your real name, email address, phone number, contacts, photos, precise GPS location, health data, or browsing history. Website email collection is described separately below.
Website launch updates and support
If you request launch updates, we collect the email address you enter, a consent record including the date and current consent-statement version, the source site, and your confirmation or unsubscribe status. Signup uses Double opt-in: you must follow the confirmation link sent to your inbox before we send studio or game updates.
Supabase stores and processes the subscription record. Resend delivers the automated confirmation and welcome messages. Once a separate, non-public sending workflow is verified, Resend will also deliver future Coastcoil and Dexter Interactive updates. It does not send a separate unsubscribe confirmation message. Cloudflare Turnstile processes limited network, device, browser, and interaction signals to prevent automated abuse. Vercel hosts the Website and may process routine request information while serving it. Cloudflare provides authoritative DNS as well as Turnstile. Google Workspace processes support messages sent to support@coastcoil.com and privacy requests sent to privacy@dexterinteractive.com.
To prevent abuse and preserve consent evidence, Dexter-controlled publishing tables store a keyed hash derived from the request IP address; they do not store the raw address or a visitor user-agent hash. The protected Cloudflare request gateway forwards the raw IP address, but not the visitor's user-agent, to the receiving Supabase Edge Function. The function sends the IP address to Cloudflare Turnstile to verify the short-lived token and intentionally leaves the user-agent hash empty. Cloudflare, Supabase, Vercel, and other infrastructure providers may process request or network metadata in their security logs under their own policies. Dexter's IP hash follows the retention and deletion schedule of the associated subscription and consent record.
Launch updates are intended for people age 16 or older. Confirmation and unsubscribe links open the Dexter Interactive email-preferences page. Simply opening one of these links does not confirm or unsubscribe the address: the visitor must complete a fresh Cloudflare Turnstile check and press the explicit action button. Every future update includes an unsubscribe link, and a completed unsubscribe action stops future marketing messages from that Coastcoil list.
Advertising and tracking
The App uses Unity LevelPlay (ironSource) ad mediation. On iOS, before any tracking, we show Apple's App Tracking Transparency prompt. If you allow tracking, ads may be personalized using your device advertising identifier. If you deny, we and our partners do not use that identifier to track you across other apps, and you will see non-personalized ads. On Android, you can reset or limit your advertising ID in system settings.
Who we share data with
We do not sell your personal data. App data is processed by the providers that power App Store purchases, Google Play purchases, Unity Gaming Services, Unity Analytics, Unity IAP, Apple Game Center, and Unity LevelPlay / ironSource ads. Website subscription and security data is processed by Supabase, Resend, Cloudflare Turnstile, and the hosting providers only for the purposes described above. Vercel hosts the Website; Cloudflare provides DNS and abuse prevention; and Google Workspace processes human support and privacy-request mail.
Children's privacy
Coastcoil is intended for a general audience and is not directed to children under 13, or under 16 in some regions. Launch updates are limited to people age 16 or older. We do not knowingly collect personal data from children; a parent or guardian may contact us to request deletion.
Data retention and deletion
Cloud-saved progress and leaderboard entries are kept while your account or device is active. Unconfirmed and confirming newsletter requests are deleted after 7 days. Confirmed subscription records are kept until you unsubscribe or ask us to delete them. Unsubscribed suppression records are retained for 24 months so we can honor that choice, and newsletter delivery metadata is retained for 90 days. Resend currently retains email data for 30 days across standard plans. Its account data, including email metadata, logs, and API records, remains stored in the United States regardless of the selected sending region. Resend's DPA says customer data is deleted within 90 days after account termination unless continued storage is required or authorized by law.
Newsletter records in the Supabase backend are separate from support correspondence.
Messages sent to support@coastcoil.com and privacy@dexterinteractive.com are handled in Dexter Interactive's Google Workspace. The support route uses a Collaborative Inbox with private Google Groups conversation history enabled. Individual messages in the licensed owner's Gmail mailbox are scheduled for permanent deletion when they are more than 700 days old; later replies and messages have their own age and do not reset an older message's clock. The support Group archive is a separate store that is not removed by the Gmail mailbox rule. A recurring procedure, run at least every 30 days, deletes each support conversation that would reach 700 days before the next review. A missed or unverified review disables the affected route until the archive is back within the retention bound. The archive is also searched and deleted through the privacy-request procedure when an approved request covers it. Limited recovery copies may remain briefly in Google's backup systems after deletion from the active mailbox. A separate record may be retained longer when reasonably necessary for legal obligations, security investigations, fraud or abuse prevention, or dispute resolution. The newsletter backend's purge process does not delete copies held in a support mailbox or Group archive.
To request deletion of App data tied to your anonymous player ID, email privacy@dexterinteractive.com with your Game Center handle or in-game display name and we will delete it within 30 days. You may use the same address to request deletion of Website data. Purchase records may be retained where required for tax, audit, or fraud prevention.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your data, and to opt out of sale or sharing of personal information. We do not sell personal information. Use the unsubscribe link in any update to stop marketing messages, or contact us to exercise another right.
Security and international transfers
We use reasonable technical measures to protect data. Our providers may process data on servers located outside your country, including the United States, under appropriate safeguards.
Changes to this policy
We may update this policy; we will change the effective date above and, for material changes, provide notice in the App, on this page, or in an email when appropriate.
Contact
Questions or privacy requests: privacy@dexterinteractive.com
Game support: support@coastcoil.com
Dexter Interactive.