Privacy Policy

Last updated: 2026-09-13

Boundless Deep 3D is built to be data-minimal on purpose: no accounts, no cookies, no tracking, no ads. This page explains what happens technically when you visit and what stays local on your device.

Controller

The controller is Ankarina OÜ, Sepapaja tn 6, Lasnamäe linnaosa, 15551 Tallinn, Estonia, represented by Anna Lippmann. Contact for privacy requests: [email protected].

No collection of personal data

The app and this website have no accounts, no forms, no newsletters and no payment features. We do not collect, store or transmit personal data for our own purposes. There is no tracking, no analytics service and no ad network.

Local storage in your browser

Game progress, settings (for example sound, graphics quality, VR comfort), the chosen language and anonymous local usage counters live exclusively in your browser's local storage (localStorage). This data never leaves your device and is not visible to us. You can delete it at any time via your browser data or the in-app reset.

Hosting server logs

When pages are requested, the hosting provider processes technically necessary connection data (IP address, time, requested file, browser identifier) to deliver the content and keep the service secure (Art. 6(1)(f) GDPR). These logs are not merged with other data and are not used for profiling.

No third-party services

No external fonts, no embedded videos and no third-party scripts are loaded. All content is served from our own server.

Multiplayer presence

Showing other divers works locally on the same device by default (BroadcastChannel between tabs), without any server. Only if a session link explicitly contains a room server are the submarine's callsign, color and position sent to that server. Without such a link, nothing is transmitted.

VR and sensors

In VR mode (WebXR) your browser processes the headset's motion and pose data exclusively on the device so the rendering works. This data is not transmitted to us or to third parties.

Children

This experience is also made for children. That is exactly why there are no accounts, no data collection, no ads and no contact with strangers unless a session link is explicitly shared.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection, plus the right to complain to a data protection authority. Since we do not store personal data ourselves, requests usually only concern the hosting server logs.

Changes

This policy is updated whenever the service changes technically. The version published here applies.