Privacy policy
NorthPath Strategies LLC (“NorthPath,” “we,” or “us”) operates Comb the Cove and this support website. This policy explains the information involved when you play, use online features, visit these pages, or contact us.
The essentials: Journey, Zen, Blitz, Thirty Moves and Marathon work without an account. Their saved rounds and collected finds are stored on your device. Optional accounts enable ranked Daily Cove, Friend Duel and limited cloud sync. When connected, the app can also contact update and diagnostic services even during guest play. We do not show ads or sell or rent personal information.
Information we handle
- Accounts: your email address, authentication identifier and chosen player name. Supabase handles email/password authentication, including password verification and account confirmation or recovery messages. Do not include personal or contact information in a public player name.
- Policy acceptance and player safety: accepted Terms and Community Standards versions and server-recorded acceptance times; public-name checks and publication evidence where the protected flow is used; fixed-reason reports, the reported name, account identifiers, review status, blocks and timestamps.
- Online gameplay: selected settings, named best scores, aggregate progress, friend relationships and duel participation. Ranked play also sends board/attempt identifiers, move logs, scores and timing information so the server can verify results.
- Device and operational information: a random app-installation identifier, platform, app version, timestamps, authentication/security events and network metadata such as IP addresses processed by our providers.
- Diagnostics when enabled in a release: Sentry receives crash and error details, stack traces, device/OS/app information and a short trail of app actions, such as navigation, game-screen transitions, console messages, request URLs and query strings, or a failed database operation. These reports help investigate problems. Our configuration disables default personal-information attachment and performance-trace sampling; it does not configure session replay. This does not make every diagnostic event anonymous: technical identifiers, IP addresses inferred by the provider, network metadata or details in an error can still relate to a device or account.
- Updates: Expo checks for compatible app updates and delivers code and assets. Requests can include the operating system, app/runtime version and randomized update identifiers, together with ordinary connection information.
- Support and website visits: if you email us, we receive your email address, message and any attachments you choose to send. Vercel hosts these pages and processes ordinary request/security information. These pages do not include advertising, analytics scripts or a website account form.
What stays on your device
The app stores settings, saved rounds, per-level Journey stars and scores, the current Journey run, Beach Pocket progress and pending sync operations in its private local storage. Cloud sync is limited: it is not a complete backup of all device progress or collected finds. Signing in on another device does not guarantee restoration of your current Journey run, per-level history or Pocket. Update requests, diagnostics and online account activity are separate from this local game storage.
How we use information
We use information to operate the game, remember preferences, authenticate accounts, perform the available sync, deliver updates, verify competitive scores, show rankings, support friend play, review safety reports, prevent abuse, diagnose failures, answer support requests and handle deletion or other privacy requests. We do not use it for targeted advertising or cross-app advertising tracking. The app does not request access to precise location, contacts, photos, camera or microphone recordings. You may voluntarily send an image or other information in a support email.
Service providers and other players
Our providers include Supabase for authentication, database and game services; Expo for app delivery and updates; Sentry for enabled diagnostics; and Vercel for this website. Information needed for those functions is processed through those providers. Their linked notices explain their own services; NorthPath remains responsible for the data practices of Comb the Cove.
Apple and Google separately process store downloads, beta testing, operating-system services and any store transactions under their own policies. We do not receive payment-card details from the stores. The current app uses email/password accounts, not Apple or Google in-app sign-in.
Other players can see your public name and relevant verified scores, rankings and duel information. Leaderboard entries do not display your email address or raw move log. We may also disclose information when you direct us to, to protect people or the service, or when required by law. Providers may process information in the United States or other countries with different privacy laws.
Names, reports and blocks
Public-name checks help reject unsuitable names but cannot identify every harmful or context-dependent name. Current account creation records acceptance of the Terms and Community Standards. A separate protected name-publication flow is available only when enabled for a compatible release. Rejected names are not added to the application's protected publication-evidence table, but provider request/security logs can retain information involved in processing the request.
A report records the selected reason and reported public name; the app does not accept free-form report messages. Reports are reviewed manually. Blocking is private, removes the friendship, closes open duels and hides the players from each other's social and ranking views. Unblocking does not restore the friendship or reopen a duel.
Retention and deletion
We retain active cloud account data to provide the account and online features. You can delete an account in Profile or use the web deletion instructions. Successful account deletion removes the authentication account and associated cloud profile, settings, progress, friendships, competitive records and applicable policy/name-publication evidence. Deleting the app alone does not delete a cloud account.
Some records need separate handling. A safety report may retain the reported public name after account links are removed. Our safety-retention policy calls for a manual review at least monthly of closed reports older than 90 days, with deletion unless an open appeal, documented abuse-defense need or legal hold requires an exception. This is a review threshold, not automatic deletion on day 90.
Limited support, diagnostic and security records can remain as needed to investigate an issue, prevent abuse, resolve a dispute or meet legal obligations. Provider logs and backup copies may remain after deletion from active systems according to their configured retention and backup cycles. We do not promise immediate erasure of every backup or log. Contact us for information about retention applicable to a request. Device-only game progress can be reset in Settings; uninstalling removes app storage subject to your device's backup and restoration behavior.
Your choices and requests
You can use guest modes, avoid optional online features, sign out, reset local progress or delete your account. Signing out or disabling game sounds does not disable app-update requests or configured diagnostics. The current app has no separate diagnostic-reporting switch.
Depending on the law that applies to you, you may have rights to request access, correction, deletion or a portable copy of personal information, to restrict or object to processing, or to withdraw consent where processing relies on consent. Contact our privacy address below. We may need to verify account ownership and explain any applicable exception. You may also contact your local data-protection authority about a concern.
Security and children
We use access controls and server verification to help protect accounts and competitive results. No security measure eliminates every risk. Never email a password or one-time sign-in code. Send security concerns to security@combthecove.com.
Comb the Cove is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has supplied account information, contact us so we can investigate and delete it as appropriate.
Contact and changes
Privacy requests:
privacy@combthecove.com
Support:
support@combthecove.com
NorthPath Strategies LLC
809 Cherokee Dr
Montgomery, TX
77316
United States
This update corrects the product name and explains existing diagnostics, updates, local storage and deletion limits. It does not by itself authorize new data uses. We will revise the effective date and provide appropriate notice, and obtain consent where required, for material changes.