Last updated: 6 September 2026
Optional interactive map
The forecast map loads OpenStreetMap tiles only after you choose to load it. The tile provider receives normal network information, including your IP address, browser information, website referrer and the map tiles requested. Saved-water IDs remain in local browser storage and are not sent to the tile provider. The map does not request your device location, provide navigation or confirm fishing access. Hiding the map stops further tile loading. See the OpenStreetMap Foundation privacy policy. Tiles are not downloaded for offline use.
Anonymous product diagnostics
Product totals include coarse page loads, supported game starts, tutorial completions and sampled script-loading or execution errors. Error reports contain only a page category, error category and small-screen, large-screen or installed-app label, not error messages, stack traces, room codes or personal input. Each error category is counted at most once per page load. These counts do not identify unique visitors or track an individual journey. Collection respects the product-analytics opt-out, Do Not Track and Global Privacy Control. Daily totals older than 90 days are removed when collection next runs; private automated report artifacts expire after 30 days.
What stays on your device
Saved spots, your last selected location, theme choice, accessibility preferences, fish-buddy settings, most minigame results, and private trip-validation records are stored in your browser on your own device. Saved-water comparisons, the fish buddy and minigames run in the browser, and calendar or trip-log export creates a local file. Except for an optional public leaderboard, private room or encrypted progress backup described below, BiteLah does not upload those records or settings. You can clear local game history, delete the trip log inside BiteLah, or remove all stored preferences by clearing this site’s browser data.
Optional encrypted progress backup
You can create a private backup of selected arcade progress without opening an account. The browser encrypts the backup with AES-GCM before it is uploaded. BiteLah stores the encrypted data, its encryption nonce and update time. Your recovery key is sent over HTTPS only to authenticate backup requests, converted to a one-way keyed hash and not stored in raw form. BiteLah cannot restore or read the backup without that key. You can restore it on another device, delete the cloud copy with the “Keep local only” control, or avoid the feature entirely. Losing the recovery key means the backup cannot be recovered.
Offline app cache
If you install or revisit BiteLah, its service worker may cache BiteLah pages, styles, scripts, the manifest and app icon so the interface can open offline. It does not permanently cache third-party weather API responses.
Installed iOS and Android apps
The installed BiteLah apps bundle the interface and games on the device. Saved waters, game progress, private trip records, theme and accessibility preferences remain in the app’s local storage unless you explicitly enable the encrypted progress backup described above. Version 1 of the installed apps does not display web advertising and does not connect to or display public game leaderboards; scores remain on that device. Forecast requests, optional private-room or backup requests and a small allowlist of aggregate product events are sent securely to BiteLah’s API. The product events identify only a broad action and context, such as opening a game or loading a coastal forecast, and do not include a device identifier, account, precise location, saved-water name, note or game result.
BiteLah Fish Buddy browser extension
The optional browser extension displays the BiteLah fish companion and break reminders on ordinary webpages. It stores its enabled state, selected fish and size, break timing, quote preference, excluded website names, remembered screen position, snack count, earned pearls, reef level and care state locally through Chrome’s storage system. It does not read or transmit webpage text, forms, passwords, cookies or browsing history, and it contains no analytics, advertising or remotely executed code. Website access is used only to place the companion interface on the page. Removing the extension clears its local data.
Forecast providers
On the hosted site, BiteLah’s Cloudflare function may request and temporarily cache weather and marine information from Open-Meteo. Supplementary Singapore short-range weather information may be requested from data.gov.sg. If the Cloudflare function is unavailable, the browser may contact those providers directly. The services may receive normal connection information such as your IP address and the coordinates of the predefined forecast area you selected. BiteLah does not request your device’s precise location.
Tracking, campaign links and ads
BiteLah currently includes the Google AdSense site-verification loader on selected pages but has not activated visible ad placements. Loading that script may send Google normal connection information such as your IP address, browser details and the page URL. Cloudflare Web Analytics measures aggregate visits and page performance without placing analytics cookies or accessing browser storage. BiteLah also counts a small allowlist of product actions as daily totals, such as a broad water type being loaded, a forecast section being viewed, a game being opened or a daily challenge being completed. Campaign links may include short source, medium and campaign labels. BiteLah stores the latest labels on your device and counts the combined label as an aggregate daily visit so it can tell whether a shared card or campaign was useful. It does not attach the label to an account, device identifier, precise location, saved-water name, score, nickname or browsing history. You can turn these BiteLah product totals off from the Arcade progress section.
Future forecast notifications
The forecast-alert interest control only stores a preference on your device. It does not request notification permission, create a push subscription or send a saved-water selection to BiteLah. Before Web Push is enabled, BiteLah will add a separate opt-in flow explaining what is sent, how to unsubscribe and how long a subscription is retained.
Public game leaderboard
On the website, if you choose to join a public game board, BiteLah submits the nickname you enter, verified game statistics and submission time. Daily boards are available for selected skill games, while Makan Fin-ish Line remains a private random decision tool with no leaderboard. Do not use your real name or other personal information. One-way keyed hashes derived from normal connection information and a random local player identifier are retained with the score to limit duplicate or automated submissions. BiteLah does not store the raw IP address or raw local identifier in the leaderboard database. Invalid, duplicate, excessive and inappropriate submissions may be rejected or removed. Local play continues to work when an online board is unavailable. Public boards are disabled in the installed iOS and Android apps for their initial release.
Private friend rooms
Cast Together Lah can create an optional private room for up to four people. BiteLah temporarily stores the room code, the nickname each participant chooses, a random player identifier, live round status and catch totals so invited devices can stay in sync. A random room token is stored on each participant’s device and is required to read or update that room. Rooms do not include chat, public discovery, accounts or precise location. Rooms become inaccessible after two hours, with expired records cleaned up during subsequent room requests. If the host leaves, another participant becomes host; an empty room closes. Use a nickname rather than personal information.
Private validation, not public feedback
The optional Trip Mode and trip validation log record the selected predefined water, forecast score, model version, broad forecast signals, session time and the result you enter. BiteLah may compare those records on your device to show private forecast-agreement and personal tide-pattern summaries. These records and summaries remain in local browser storage until you delete them; they are not transmitted to BiteLah, used to train a public model or displayed publicly. Exporting the log downloads a CSV file to your device.
Security and sensitive information
Do not store sensitive personal information in BiteLah. Saved spots are selections from BiteLah’s predefined public water list, not private coordinates or account records.
If this changes
Before visible or personalised advertising is enabled, BiteLah should add the appropriate consent controls and update this notice with the final advertising behaviour. Any future accounts, paid features or community features will also require another update.