Privacy Policy

Short version: you can play without giving us anything; an anonymous account is created automatically. Email is only needed for purchases, a phone number only for gold transfers, and analytics can be switched off in Settings.

Who we are

Ship Busters is a naval combat game developed by Delroy Brown and published by Waygu Games LLC ("we", "us"). You can play it in a web browser at ship-busters.web.app or in our apps for iOS, Android, Mac, and PC as they release. This policy explains what data the game handles, why, and what control you have over it. It applies to the game and to this website.

Questions about anything here? Email us at support@ourinvo.com.

What we collect

When you first launch the game, we automatically create an anonymous account for you using Firebase Authentication. No email, no sign-up form. You just play. You can later choose to register with an email and password, which upgrades that same anonymous account in place so your progress carries over.

Here is everything our servers store, when we collect it, and why:

Data	When we collect it	Why
Account ID (an opaque, random identifier)	Automatically, on first launch	To tell your save apart from everyone else's. It reveals nothing about you.
Email address	Only if you register an account (taken from your verified sign-in)	Sign-in, password reset, and account recovery. Required to make purchases, since it is the key to your INVO gold wallet.
Phone number (international format)	Only if you add one	Required to send or receive gold transfers. INVO routes transfers by phone number and may text it (for example, transfer notifications or PINs).
Display name	Only if you set one	Shown to other players in duels and on gold transfers.
Platform (web / iOS / Android, from your user agent) and created / last-seen timestamps	Automatically	Basic account housekeeping and support.
Game progress, fleet and inventory, wallet balances (silver, energy)	As you play, while signed in	So your game follows your account across devices. Gold balances are held by INVO (see Payments below).
Transaction ledger (every currency grant and spend, append-only)	As currency moves	Financial integrity and audit, so balances can always be verified and disputes resolved.

That's the full list. We do not collect advertising identifiers (no IDFA), we do no ad tracking, and we never sell your data.

One more thing worth knowing: your "Captain ID" (the support code shown in Settings) is derived from your account ID on the fly. We don't store it; it's just a convenient way to identify your account when you email us.

How we use it

To run the game: saving your progress, syncing it between devices, and showing your display name to opponents in duels.
To sign you in: Firebase Authentication handles anonymous and email accounts, and sends password-reset and email-verification emails.
To process purchases and transfers: we share what INVO needs to run your gold wallet (details in the Payments section).
To improve the game: anonymized gameplay analytics, which you can switch off (next section).
To help you: when you contact support, we use your Captain ID to find your account.

We do not use your data for advertising, and we do not sell it to anyone.

Analytics & your opt-out

We use Google Analytics 4 to understand how the game is played: battles started and finished, rewards earned, screen views, and device frame-rate statistics (so we know where performance is poor). The only identifier we attach to these events is your opaque account ID, never your email, name, or phone number. GA4 also sets its own device identifiers and cookies as part of Google's service.

You can turn all of this off. In the game, open Settings → "Disable anonymous telemetry". This stops all analytics immediately, including Google's automatic collection. You can opt back in the same way, any time.

Cookies and local storage

The game itself sets no cookies. It uses your browser's localStorage for:

your save file (key shipbusters.save.v1): progress is saved locally and mirrored to our servers when you're signed in, so the game works offline once loaded;
a local telemetry buffer (capped at 500 events);
a device marker;
a per-account flag noting that a passkey is enrolled on this device.

Two third-party services set their own storage or cookies: Firebase Authentication (to keep you signed in) and Google Analytics 4 (unless you've disabled telemetry, as above).

Payments and the INVO network

Gold is purchased with real money through INVO's hosted checkout, which appears framed inside the game and supports Apple Pay and Google Pay. We never see or store your card number. Payment details go directly to INVO and its payment processors.

What we share with INVO:

your email address, which serves as your gold wallet key;
for gold transfers: the sender's display name, email, and phone number, and the recipient's phone number.

Gold balances and the money ledger are held by INVO; we keep a cached copy for display in the game. Gold transfers between players are approved with a passkey (WebAuthn), meaning a biometric or device credential, and the passkey public keys are held by INVO. INVO may send SMS messages (such as transfer notifications or PINs) to the phone number on file.

This is the complete list of third parties that handle your data:

Service	What it does	What it handles
Google Firebase	Authentication, hosting, analytics	Account credentials and sign-in state; sends password-reset and verification emails; anonymized gameplay events (unless you opt out).
Google Cloud (USA)	Our servers and database (us-east4)	All the account and gameplay data listed above.
INVO Network	Payments, gold wallet, passkeys, SMS	Email (wallet key), transfer details including phone numbers, passkey public keys, and payment details you enter in its checkout.
Google STUN servers	Peer connection setup for duels	Your network address, briefly, to establish a direct connection to your opponent.

We never sell your data. There are no advertisers, no data brokers, and no other third parties.

Where data lives

Our servers and database run on Google Cloud in the United States (us-east4 region). Your data may be processed in the United States, whose privacy laws may differ from those of your home country.

How long we keep it

We keep your gameplay data for as long as your account is active. If you ask us to delete your account, we delete it, with one honest exception: the financial transaction ledger is retained as required for audit and legal compliance, even after a deletion request. It records currency movements, not your gameplay.

Your rights & deletion

You can ask us to access, correct, delete, or export your data, or to object to how we process it (the rights described in laws like the GDPR and CCPA). We honor these requests for everyone, wherever you live.

To make any request, including account deletion, email support@ourinvo.com and include your Captain ID (found in the game's Settings) so we can find your account. There is no in-app delete button today; deletion is by request, and we'll confirm when it's done.

Note: "Reset all progress" in Settings clears the save on that device only. It does not delete your account or the data on our servers. Email us for that.

Children

Ship Busters features real-money purchases and player-to-player gold transfers, and it is not directed at children under 13. We do not knowingly collect personal data from children under 13; if you believe a child has provided us data, contact support@ourinvo.com and we will remove it.

Players under 18 need a parent or guardian's permission to make purchases or send transfers. INVO supports guardian approval on transfers.

Changes to this policy

If we change this policy, we'll update the effective date at the top and, for meaningful changes, tell you in the game. We won't quietly expand what we collect.

Contact

Waygu Games LLC · support@ourinvo.com

See also our Terms of Use and Support page.