Privacy Policy

Effective October 26, 2026 · Phoenix Strategies LLC

Tankruption is an aquarium arcade game for mobile devices. Campaign, Forge, bundled challenges and AI practice work offline without an account. Online features (friend and ranked matches, the Daily Riptide, the online Reef), optional analytics, purchases and feedback use the services below. Online data is processed by Google Firebase and Google Cloud (Authentication, Cloud Firestore, Cloud Functions, Cloud Storage and Cloud Run).

Local saves and settings

Progress, current runs, Forge creations, settings and a bounded diagnostic log are stored on your device, without automatic cloud save. The game does not request camera, microphone, contacts, photos or location access. Reset progress is in Settings. Uninstalling may erase local data.

Optional usage and diagnostics

When Anonymous analytics is enabled, PostHog receives gameplay interactions, progression and purchase-flow events, app/build information, device/platform characteristics, performance measurements and crash/error diagnostics, associated with a random installation identifier. These records help improve gameplay and diagnose failures. They are pseudonymous: the identifier links events from one installation. We do not send your online display name or feedback message in these events. There is no advertising, IDFA collection, advertising tracking or cross-app tracking. Turn off Anonymous analytics in Settings to stop optional analytics and clear pending events. Events may be queued locally while offline. IP addresses are processed to deliver network requests; analytics geolocation enrichment is disabled. Infrastructure providers may keep operational logs.

Online account and optional linking

Crosscurrent, the Daily Riptide and the Reef share one online account. Using an online feature creates an anonymous guest identifier; no email or password is needed. You may choose a public display name (3–16 letters, checked against a blocklist and shown with a four-digit tag, such as Coral#0420).

You choose who sees that name. In Settings → Privacy & online data you can hide it from Daily Riptide leaderboards and from match opponents; they then see "Anonymous diver" instead. You can also review and clear the players you have blocked there.

Where available, ranked matches and Daily Riptide rankings require linking Sign in with Apple. Apple linking and public ranked play are unavailable in the initial Android build; guest/private online features and Daily practice remain available. We request neither your name nor your email from Apple. We store only the account identifier Apple provides for this app, linked to your guest identifier, so your rank and results can follow you. Deleting your online account also revokes the Apple link.

On Android, you may also sign in to an existing provisioned account with an email address and password. Firebase Authentication processes these credentials; we use the account identifier and an opaque purchase identifier to associate access with the right account. Passwords are not placed in game saves, analytics or feedback. Account progress on this device is separate from guest progress; signing out returns to the original guest. This does not add automatic cloud saves.

Crosscurrent matches

Private matches are invite-only by code. Ranked matches pair you with another linked player; to do so we process your rank, approximate network latency and server region. For both kinds we store your identifier, display name, lobby membership, loadouts, gameplay inputs, match outcomes, rank changes and service/security records to run, verify and protect matches. Your opponent sees your display name (or "Guest", or "Anonymous diver" if you hide it) and the shared game state.

After an online match you can report your opponent (offensive name, harassment, cheating, griefing or other) and block them. Reports store the match, both account identifiers and the reason for moderation; the reported player is not told. A block is stored privately on your account and keeps the two of you out of each other's ranked matches and private rooms.

Daily Riptide

When you submit a Daily Riptide run, a compressed replay of your inputs and results is uploaded so our servers can verify the score. Verified results appear on a public daily leaderboard with your display name, clears and time, or as "Anonymous diver" if you hide your name. Other linked players can report a leaderboard entry; reports and their reasons are stored for moderation. Replay jobs are kept for 30 days, or up to 90 days while a report is under investigation.

The online Reef

The Reef lets players browse, play, rate and report challenges made in the Forge. It uses the same online account as above, so your Reef progress is kept with it. Reef names and titles are chosen from fixed word lists, never typed, so the Reef contains no free text.

• Publishing (full game) uploads the challenge, its tank and any custom creatures and props, your chosen creator name and title, and your own clearing replay. Published challenges, with creator name and title, are public to all players. Unpublish one from its page at any time; it leaves the Reef immediately and its files are deleted from our server within about an hour.
• Playing stores attempt counts, and a clear of a curated or community challenge stores your best time, taps and medal on your account (after our server verifies the replay) so badges and statistics can be awarded. Your clears are private to you; clear times are not shown to other players.
• Ratings and reports store your star rating or report reason. A reported challenge is hidden from you, and challenges with enough reports are hidden for everyone. "Hide this creator" is saved privately to your account.
• Profile: your Reef profile and badges are private unless you turn on "Show my badges publicly".

Deleting online data

Open Settings → Privacy & online data → Delete online account and confirm while connected. This deletes your guest or personal account identifier, optional sign-in email and authentication record, display name, profile, privacy choices, blocked-player list, linked Apple identifier, reports you filed and pending Daily jobs; removes you from the Daily leaderboard; deletes your Reef profile, clears, badges, ratings and clear times; takes down every challenge you published (their files are deleted within about an hour); and deletes Daily replay files within seven days. Shared match results are anonymized so another player's record remains usable. Playing online again creates a new guest. Offline progress and store purchase rights are separate from all online data. Account deletion does not automatically erase previously uploaded analytics, feedback or store purchase records. You can also request account or data deletion by email without reinstalling the app. Technical logs, backups or security records may remain for a limited time for service integrity and legal obligations.

In-app purchases

The platform store (Apple App Store on iOS or Google Play on Android, where purchases are available) processes payments. RevenueCat validates receipts and maintains installation-scoped or account-scoped purchase identifiers, purchase history, entitlements and transaction metadata for the full-game unlock and restoration, and provides purchase analytics. We do not receive payment card details. The early offer and regular product grant the same permanent entitlement; neither is a subscription. Deleting an online account does not cancel a transaction or remove the platform store's purchase record.

Feedback and support

Submitting the in-game form sends your category, message, optional email or Discord contact, app version, build, platform and per-report reference to our server and a private team channel on Discord. Saves, gameplay logs and analytics identifiers are not attached. Please leave out sensitive information. Reports are not automatically published. Email support shares what you choose to send. For removal, contact us with the report reference when available.

This website

Vercel hosts this site and processes routine technical request information to deliver pages and protect the service. The site uses no advertising cookies or third-party website analytics. Gameplay media is served from this site. Discord opens only if you follow its link and is governed by Discord's policies.

Use, sharing and retention

Installation identifiers, product interactions and diagnostics are used for optional analytics. Guest and authenticated account identifiers, optional sign-in email addresses, display names, published challenges and online gameplay content support game functionality, verification, moderation and security. Purchase History supports functionality and purchase analytics. Feedback and optional contact information support customer service. These service providers may process information outside your country.

We do not sell personal information or share it for targeted advertising. We may disclose information when legally required or needed to address fraud, abuse or security incidents. We keep information for its stated purpose and applicable obligations. Contact us to request access, correction or deletion.

Children

Tankruption is not directed to children under 13, and we do not knowingly solicit personal information from children under 13. If you believe a child sent personal information, contact us so we can investigate and remove it. Tankruption has no chat. Do not put a real name, age or personal information in an online display name.

Contact and changes

For support or privacy requests, email sean@phoenixstrategies.ai. Identify the feature or report reference; do not send passwords or payment details. We update this page when practices change and revise the effective date above.