OCPaddler Game

Privacy policy

Last updated November 3, 2026

This covers OCPaddler Game, on the web at game.ocpaddler.com and in the iPhone and iPad app. It's run by Kamanu Composites, LLC. You can play without signing in; signing in is what keeps your paddling and puts your timed runs in the Course Records.

What we keep

• Your sign-in. Google's or Apple's ID for you, and the email address they give us (Apple's can be a private relay address). We don't get or keep a password. We don't keep the real name Google or Apple may send.
• Your handle, the name you choose for the Course Records, and any you had before if you've changed it, which we keep so nobody else can take them.
• Your Instagram username, if you add one. We don't check that the account is yours, and we don't connect to Instagram or get anything from it.
• Your runs. Each run's time and splits, the inputs you made and the path your craft took (so the server can check the run, and so others can race its ghost), when it was paddled, and whether on a computer, phone, tablet or the app. And a score of how much your inputs are like the ones players make, worked out from them each day, so we can spot a run played by a program rather than a person.
• Your paddling. Time, distance and strokes, a total for each day, on each craft.
• Your live races. Each live race's result: your place and time, or how you didn't finish (you left, your connection went, you were still out at the end, or your finish didn't match the path your game sent). Your rating on each craft is worked out from them and your timed runs.
• Your camera view, the one you chose last, so the game starts in it.
• Invites. Whose invite link you took up. It isn't shown to anyone.
• Notifications. The latest run to pass you on each course, and whether you've seen that. They're shown only to you.
• Song votes. Which of the game's songs you voted up or down, which sets what plays for you. Nobody else sees yours; we look at them added up, to choose the music.
• Payments, if paid entries are on and you buy one: which season, the amount and Stripe's reference for it. Stripe takes the payment and holds your card details; we never see them.

What others can see

Your handle and your best times in the public Course Records, who's online now by handle, your handle in a live race, your rating and place on the ranking, your live race record and your last few live races' places and how far each moved your rating (on your card on the rankings page), your record against another paddler (to them, in a race or on your card), and the ghosts of your ranked runs. An invite link you share shows your handle and your best time. If you add your Instagram username, it's shown with a link to your profile on your card on the rankings page and on your invite link's page (anyone with your handle can open it), and we may tag you when we post results on Instagram. Take it off in the panel at any time. That, or deleting your account, doesn't change posts already published: write to us and we'll take your tag off ours. Everyone's paddling added up is public, but your own isn't. Nobody sees your email address.

Logs, and what stays on your device

The server's access log holds IP addresses, for security, and is normally deleted within about two weeks. Its other logs, kept for about four weeks, say what happened by player number, without email addresses. They include the daily report, which names new players' handles; reports of errors in the game (the message, the browser and the page's build); and the IP address of some requests that fail. The daily report is also emailed to us, and we keep those emails.

Your device keeps a login cookie (180 days), your settings, your song votes, and runs and paddling waiting to be sent. Your best times are also kept on the device. Deleting your account clears what's waiting to be sent from the device you do it on, but not your settings and best times there, which are gone when you clear the site's data or remove the app. On other devices, what's waiting can no longer be sent and expires.

What we use it for

To run the game: keeping you signed in, checking runs, showing the Course Records and your record, and setting up races and the phone as a controller. We also add up how the game is used, such as how many paddled today and on what, to keep it working and improve it. We don't sell your data, we don't show ads based on it, we don't track you across other companies' apps and sites, and there are no analytics or advertising companies in the game. The sponsors' links at the bottom of the screen are plain links.

Who else handles it

• Google and Apple, when you sign in with them. Their own privacy policies cover that. On the website, opening the panel signed out also loads their sign-in scripts, so they see your IP address as any website would, whether or not you sign in. The iPhone and iPad app doesn't load these.
• DigitalOcean, which hosts the server and its backups.
• Amazon Web Services, which carries the daily report we email ourselves, and Anthropic, whose AI assistant Claude reads that report for us. It says how the game is running, with the handles of new players and any errors in the game. We also use Claude to build and maintain the game, which can include reading the server's logs, IP addresses included, and looking at handles, Instagram usernames, runs, live race results and paddling records in its database, but never your email address or sign-in ID.
• Stripe, if paid entries are on and you buy one.
• The National Weather Service, NOAA, CDIP and PacIOOS, if you ask for today's conditions: your device asks these weather and wave services directly, for the course's location, and they see your IP address as any website would. Nothing about you goes with it.

They handle it to provide these services for us, under their own terms and protections for it. We'd also share data if the law required it.

How long, and deleting it

We keep your account and runs until you delete them. To delete your account, sign in, open the panel with the button at the top right, and choose Delete account, then type delete to confirm; if you can't sign in, write to us and we'll confirm it's you first, by writing to the address on your account. That removes your email address, sign-in ID, handle, Instagram username, runs and their scores (so your times come off the Course Records), live race results, paddling record, notifications, song votes and invites straight away, and they leave our backups within 40 days. Your handle, and any you had before, are then free for someone else to take. A daily report emailed to us from when you joined, or changed your handle, can still name them. If you signed in with Apple, it also revokes the game's access to your Apple sign-in; if that can't be done at the time, we'll tell you how to do it yourself in your Apple settings. We keep records of any payment, without your name or email address, as tax and accounting rules require.

You can also write to us to see what we hold about you or to correct it. Depending on where you live, you may have further rights over your data, including complaining to your local regulator.

Children

The game isn't aimed at children under 13, and we don't knowingly keep accounts for them. If you think a child under 13 has an account, write to us and we'll delete it.

Changes

If this policy changes, the date at the top changes with it. We'll say so in the game if the change is a big one.

Contact

Kamanu Composites, LLC: keizo@ocpaddler.com. See also Support.