Your account. Your privacy.

Information we use.

We store your email address, a securely hashed password, verification status, session records, purchase and subscription references, and the games in your library. Security controls use request information such as IP addresses to limit abuse. Support messages include the information you choose to send us.

How it is used.

We use this information to sign you in, send verification and password-reset emails, confirm purchases, deliver downloads, manage membership choices and renewal, prevent abuse, and answer support requests. Account emails are operational messages, not newsletter sign-ups.

Payments & hosting.

Stripe processes hosted payments and shares payment status and purchase references with us. Truckfish does not receive or store full payment card numbers. Our account service and file storage use AWS infrastructure. These service providers process the information needed to operate their part of the service.

Cookies & local data.

A secure, HttpOnly session cookie keeps you signed in for up to seven days. Signing out clears the current session. This storefront uses no advertising scripts. Game progress is stored by each game on your device and is not automatically copied into your Truckfish account.

Basic statistics and optional detailed analytics.

We use two separate types of first-party measurement to improve the store and prepare a daily report for the owner. Basic statistics measure daily page totals and active time. Where our server policy permits, they start on by default; elsewhere they stay off unless you enable them. The initial notice tells you their status. Detailed analytics stays off unless you choose to enable it.

Basic statistics.

Basic statistics send only the page pathname, its counter start time, a temporary random page ID, cumulative active seconds, and the permission status. They never include visitor or session IDs, account information, cookies, referrers, query strings, URL fragments, form contents, or a device fingerprint. They do not create browsing histories or measure unique visitors or sessions. The page ID exists only in page memory and is independent of all detailed analytics IDs. These requests omit cookies and do not access your signed-in account.

The server uses trusted country and browser privacy signals only to decide whether basic statistics may default on; it does not store the country with these statistics. To prevent duplicate counting, opaque receipts hold a counter and expiry, with no page path or identity. Receipts stop being usable after four hours; physical deletion by the database follows asynchronously. Daily path totals are retained for 90 days. Time counts only while the page is visible, focused, and recently used, with an initial reading window and a four-hour page cap. Basic totals can include visits by the owner because identities are not accessed; the owner can turn them off in their own browser.

Detailed analytics: your choice.

Only if you enable detailed analytics, we use separate random browser, session, and page IDs to measure browsing paths, repeat visits, and active time. Detailed page events include the pathname and referring website hostname, never the query string, URL fragment, form contents, email address, raw IP address, or a device fingerprint. When you are signed in, this optional history can be linked to your account to understand the path from browsing to a purchase.

Detailed consent stores random IDs on this browser and a secure first-party cookie makes the current analytics session available to our account service. Sessions end after 30 minutes of inactivity. Raw detailed analytics records are retained for 30 days and aggregate detailed analytics for 90 days. The owner report shows basic totals separately from the overlapping optional detailed sample; the two are never added together.

Change either choice.

Choose Analytics choices in the footer at any time. Basic statistics and detailed analytics have separate controls, and Turn off all stops both. Preferences last 90 days. Turning off detailed analytics deletes this browser's detailed IDs and cookie; turning off basic statistics discards its temporary page counter. These actions stop future measurement but do not erase records already received. Browser Global Privacy Control and Do Not Track preferences keep both types off. If browser storage is unavailable, both stay off. Shopping, sign-in, and your library work with either choice.

Operational account and commerce records separately record account creation, email verification, purchases, subscription billing periods, membership choices, and authorized download links. A recorded download means a link was issued, not that the file transfer or installation completed. Those necessary records operate regardless of analytics choices. We use no advertising or third-party analytics services and do not sell this information.

Your information.

Contact info@truckfishgames.com for access, correction, or account-deletion requests. We may need to verify account ownership and retain purchase or security records where necessary. Deleting account information can affect access to your library; contact us before deleting an account with purchases.