Privacy policy
Effective October 24, 2026
This policy explains what the Barrowmark app ("Barrowmark", "we", "us") collects, why, who helps us run the game, and the choices you have. Questions go to support@barrowmark.org.
What we collect
| Information | Why we need it |
|---|---|
| Your email address and password | To create your account, sign you in, and send sign-up and password-reset codes. Passwords are stored only in scrambled (hashed) form; we can't read them. |
| Your binder name | Shown in the game. If you're the first to discover a creature, your binder name appears beside it for other players. |
| Barcodes you scan and the products they belong to | To find or create the creature for that product. Product records and creatures are shared game content, not tied to your identity beyond the discoverer credit. |
| Photos of unknown products | Only if a barcode isn't in any product database and you choose to take a photo of the product. The photo is sent once to identify the product and is not saved. |
| Game progress | Your bestiary, creature levels and stats, the names, titles and frames you forge, and your battle records, so your progress is kept between sessions. |
| Reports you file | If you report a creature, we keep your report so we can review it. |
The camera is used to read barcodes on your device. Nothing from the camera leaves your phone except a photo you choose to take of an unknown product. Barrowmark does not use your microphone, location, contacts or photo library, and it does not collect advertising identifiers or analytics about you.
Who helps us run the game
We use a small number of service providers. Each receives only what it needs to do its job for us:
| Provider | What it does and what it receives |
|---|---|
| Supabase | Hosts our database, accounts and images. Stores the information listed above. |
| Anthropic (Claude) | Designs each new creature from a product's name and details, and identifies products from photos you choose to take. Receives product details and those photos, not your email or name. |
| Black Forest Labs | Paints creature portraits and battle art from a written description. Receives only that description. |
| Resend | Delivers our sign-up and password-reset emails. Receives your email address and the code. |
| Open Food Facts, Open Beauty Facts and Open Products Facts | Public product databases we look barcodes up in. Receive only the barcode number. |
| Cloudflare | Hosts this website and forwards email sent to our support address. |
We don't sell or rent your information, and we don't share it with advertisers or data brokers. We may disclose information if the law requires it.
How long we keep it
We keep your account and game data while your account exists. When you delete your account, your sign-in, bestiary, progress, forge changes, battle records and reports are permanently deleted. Creatures you discovered stay in the game for other players, but your name is removed from them. Backups held by our hosting provider are overwritten on their normal schedule.
Your choices
You can change your binder name at any time under Barrow > Account. You can delete your account and data under Barrow > Account > Delete my account. To ask for a copy of your data, or for help with anything here, email support@barrowmark.org from the address on your account. Depending on where you live, you may have further rights over your information, and we'll honor requests made under them.
Children
Barrowmark is a dark fantasy game made for teens and adults. It is not directed at children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has made an account, email us and we'll delete it.
Security
Your information travels over encrypted connections, and our database only lets each player read and change their own private data. No system is perfectly secure, but we work to protect what you trust us with.
Changes
If we change this policy, we'll update the date at the top of this page, and we'll let you know in the app if the change is significant.