Privacy Policy
Effective: 10 September 2026 · Version: 2026-09-10
Drift gently. Share carefully. Respect every other player.
1. Who we are and what this notice covers
Softofu (softofu.com), the operator of Drifting Dad / 漂流爸爸, is referred to as “Softofu”, “we” or “us”. This Privacy Policy explains how we handle information for the game at https://drifting.softofu.com, its account service and bottle messages. It does not describe every other Softofu product or external website. Contact us about privacy, account deletion or safety at softofu.app@gmail.com.
2. Information you provide
An email account provides an email address and password. We store a password hash, not your readable password. Account recovery uses a separately hashed recovery key. Keep the key private; support should never need your password or full recovery key in an email. We store your game account identifier and save information, including position in the fictional ocean, levels, quests, pearls, discoveries, inventory, letters, outgoing messages and creature encounters. Ocean coordinates are game coordinates, not your real-world location. Support or abuse reports may include the information and evidence you choose to send.
3. Google sign-in
If Google sign-in is enabled and you choose it, Google supplies an identity token containing your Google account identifier, email address and verification information, and may include basic profile information such as a name or picture. We verify the token and retain the Google identifier and account email for sign-in and account linking; the current game does not use or store the profile name or picture. We do not receive your Google password and do not request access to Gmail messages, Drive files or contacts. Google tokens are processed for verification rather than stored as game saves. Google handles its own authentication service under its Privacy Policy. Removing Google access does not automatically delete a Softofu account; contact us separately for account deletion.
4. Messages are shared, not confidential
When you send a bottle, we store its text, sender account identifier, time and delivery/claim information to deliver it to another player and prevent duplicate delivery. The game does not display your account email to the recipient, but the service can associate a bottle with its sender. Each bottle is normally delivered to one recipient, who can keep, screenshot, copy or share it outside the game. Messages are not end-to-end encrypted. Authorized operators and service providers may access stored data as needed for operations, support, security, reports or legal obligations. Do not treat bottle mail as a confidential, verified-identity or emergency communication channel.
5. Protect your own and other people’s information
Do not send passwords, recovery keys, one-time codes, payment or bank details, identity documents, precise location, home/school/work addresses, private contact details, intimate information or information about another person without a lawful right to share it. A friendly message is not proof of identity or trustworthiness. Do not send money, follow suspicious links, install files, disclose credentials or move to another platform at a stranger’s request. Do not share identifying information about children. You are responsible for the content you choose to disclose, without reducing our independent legal duties to protect data in our control.
6. Technical information, cookies and device storage
The server and hosting infrastructure process technical request information such as IP address, browser/device characteristics, time, requested URLs and errors. Hosting logs may retain this information; application rate limits use hashed request identifiers. We use an essential Secure/HttpOnly session cookie for signed-in access, normally expiring after 90 days, and a short-lived Google sign-in challenge cookie, normally expiring after 10 minutes. Browser local storage holds guest progress, inventory, cloud synchronization metadata and a device backup when a save is replaced. A service worker caches game files for offline play. These are functional storage mechanisms, not advertising cookies. The current game does not include advertising, in-game purchases or a separate behavioral-analytics tracker.
7. Why information is used
We use information to provide gameplay and account access; synchronize progress; deliver and retain bottle letters; recover accounts; prevent duplicate actions, unauthorized access and abuse; diagnose faults; answer support and rights requests; apply the Terms of Service; and comply with applicable law. Where a law requires a legal basis, the relevant basis may be performance of the service you request, legitimate interests in a secure and functional service where permitted, legal obligations, or consent where required. We do not treat acceptance of our terms as permission for unrelated marketing. Choosing not to supply account information means you can use available guest features but cannot use functions that require an account.
8. Who receives information
Recipients receive the text you put in a bottle. Hosting, database and technical service providers process information needed to run the game. Google receives requests when Google sign-in is used; Google Fonts requests may disclose your IP address and browser/request information when fonts load. Email providers process support correspondence. We may disclose relevant information when legally required, to respond to lawful requests, protect people or investigate abuse within applicable law, or during a genuine transfer of the service subject to continuing privacy safeguards. We do not sell personal information or share it for cross-context behavioral advertising. We do not publish account records or player letters in our public guides or search-engine sitemap.
9. International processing
The internet, hosting services, Google and email providers may process information in countries other than yours. Their infrastructure can change and we do not promise that all data stays in one country. Where applicable law requires protections for an international transfer, those requirements remain applicable; use of the game does not waive them.
10. Retention and deletion
Account information and cloud saves are retained while needed to provide the account or for the purposes described above. There is currently no automatic inactivity-deletion period. Bottle records and delivery receipts may remain after delivery, and removing an item or letter from your bag does not automatically erase every server record or another player’s copy. Browser data remains until cleared, overwritten or removed by the browser; some sign-out flows clear the active local save but a device backup or cached files may remain. Contact us to request deletion. Following a verified request, we will delete or de-identify information no longer needed, subject to proportionate legal, security, dispute and backup-retention needs. Restricted backup copies may persist until normal replacement. We cannot recall screenshots, copies already held independently by recipients, or information you provided to third parties. We do not promise instant or universal erasure.
11. Your choices and privacy requests
You can play available guest features, decline to send messages, sign out, use browser settings to clear this site’s cookies/storage/cache, or disconnect Google access in your Google Account settings. Clearing local data can permanently remove guest progress and unsent letters. For access, correction, deletion, restriction, objection, portability or withdrawal of consent where applicable, contact softofu.app@gmail.com from the account email with a clear description of your request. We may request proportionate proof of account ownership to prevent unauthorized disclosure or deletion. Never send your password or recovery key. We will handle requests within applicable legal requirements and explain any lawful limitation. You may also complain to the relevant privacy regulator, including Malaysia’s Personal Data Protection Commissioner where applicable. No provision here waives those rights.
12. Young players
The service is not intended for children under 13, or under a higher minimum age required by applicable law. A user who is not legally able to agree to the terms independently must have a parent or guardian’s legally valid permission and supervision. We do not currently verify every player’s age or identity, so do not assume another player is an adult. Parents or guardians who believe a child has supplied information without required permission should contact us so we can investigate and take appropriate action. Never use the game to seek private contact, sexual material or identifying details from a child.
13. Security and incidents
We use HTTPS, hashed passwords and recovery keys, server-side authentication, restricted configuration files and access checks. No internet service, device or storage system can be guaranteed perfectly secure. Keep your device, browser, email and Google account secure, and avoid shared-device sessions. If you suspect account misuse or a data incident, contact us promptly. We will assess and respond to incidents and make notifications where applicable law requires them. This statement does not promise continuous monitoring or transfer our legal security obligations to you.
14. Reports, third parties and changes
For scams, phishing, impersonation, threats or privacy abuse, stop interacting and email softofu.app@gmail.com with the message reference, approximate time and a description. Include only evidence necessary for the report; do not forward illegal imagery or other unlawful material. Reports may be retained and reviewed for safety, disputes and legal obligations. We do not operate a continuously monitored emergency service; contact local emergency services or law enforcement for immediate danger. Third-party sites and services have their own policies. We may update this notice as the service changes, publish the revised date, and provide additional notice or obtain consent where required. Material new processing is not authorized merely by quietly changing this page.
Local-time ambience / 本地时间氛围
The game requests an approximate country and timezone from ipwho.is using your connection IP address for day/night lighting. No precise GPS location is requested. Your device timezone is used if the lookup fails. / 游戏通过 ipwho.is 根据连接 IP 获取大致国家和时区以调整昼夜光照，不请求精确 GPS 位置。查询失败时使用设备时区。