Legal
Privacy policy
Last updated 3 June 2026
What we collect
Only what the game needs: your email and username, a hashed password (we never store the plain text), your coin ledger and gameplay history, and basic technical data like your session and rough activity times. There are no payments, so we hold no card or banking details.
Why we collect it
To run your account, keep balances accurate, show leaderboards and public profiles, verify provably-fair outcomes, catch cheating, and keep the service secure. That's the whole list.
What's public
Your username, level, achievements, and leaderboard standing are visible to other players. Your email, balance history, and settings are not. You control what shows on your public profile.
Cookies and sessions
We use a session cookie to keep you signed in and a refresh token to renew it securely. We don't run third-party advertising trackers.
Keeping it safe
Passwords are hashed with Argon2id, sessions are short-lived and rotated, and admin actions on accounts are logged. No system is perfect, but we treat your data as if it were our own.
Your controls
You can update your profile and client seed at any time, and you can ask us to delete your account. When you delete, we remove your personal data and retain only what we're legally required to keep.
Want your data removed? Email privacy@catfish.casino and we'll take care of it.