Privacy & deletion

Effective 8 September 2026. Fish2Shark is operated by Tech Fusion Lab. Contact: contact.techfusionlab@gmail.com.

Learning without an account

Guest lesson progress, practice hands, display settings and reflections are saved on your device. Clearing browser or app storage can remove them. A shared home-game display shows its configured title, chart, timer and chip values; it does not display your account or private notes.

When you create an account

You can use email and password or Google, and Sign in with Apple in the iOS app. Firebase Authentication manages email/password credentials and password reset emails. Passwords are sent securely to Firebase; they are not stored in your learning records, device progress saves or exports.

Firebase Authentication processes your Google identity, including account identifier, name, email address and profile information supplied by Google. We use that identity to connect your saved learning across devices. We do not receive your Google password or request access to Gmail, contacts or Drive.

Sign in with Apple supplies an account identifier and the name/email you choose to share, including an Apple relay address when you use Hide My Email. Firebase uses this identity to save your learning. We do not receive your Apple password.

Firebase Cloud Firestore stores your chosen learning profile, completed lessons, practice answers and hint use, timestamps, saved hands and reflections. Access rules restrict each account’s records to that account. Notes are private account data, but they are not end-to-end encrypted; avoid sensitive personal or financial information.

Service providers and storage

Vercel serves the website and processes technical request data needed to deliver and protect it. Google Firebase provides authentication and cloud data storage. Network requests can expose IP addresses and device/browser information to these providers. The primary learning database is configured in the United States (nam5 multi-region); authentication and provider operations may process information elsewhere.

The iOS Google Sign-In SDK declares collection of name, email, phone number, coarse location, user and device identifiers, usage data and other technical data for authentication, security and SDK analytics. These provider-level declarations do not mean Fish2Shark asks for your phone number or GPS permission. Google may process information associated with your Google account and connection when you sign in. The SDK declares no advertising tracking. See Google’s SDK privacy manifest and Firebase’s privacy information.

Fish2Shark does not include ads, sell personal information or use marketing trackers. We do not operate a separate behavioral analytics service in this release; authentication providers process their own operational and usage data. Essential local storage supports your learning and sign-in. Firebase Authentication keeps logged IP addresses for a few weeks, and provider logs can have separate retention policies.

Retention, export and deletion

Cloud learning data remains until you delete the account or request deletion. In My game, use Export progress to save a JSON copy. Account deletion removes your cloud profile, learning records and Firebase sign-in account. Your current password or a fresh sign-in with your account provider confirms your identity before deletion. For Apple accounts, the iOS app also revokes Apple authorization before completing deletion. Local guest data on other devices is separate and should be reset on those devices.

You can also request account deletion by emailing us from the associated account. We may ask for identity confirmation. Provider logs and backups may persist under their own retention schedules after application data is removed.

Audience and changes

This product is intended for adults. It offers education and simulated practice, with no real-money wagering. We will update this page when data practices change materially.