Privacy

The Cave Survey Training Simulator is a training tool. It does not sell, broker, or share user data. The summary below describes what data the application handles today.

Today

• Sign-in via CaveID. SurveySim uses id.cavefinder.app (CaveID) for authentication. CaveID issues an HttpOnly __Secure-cf_at JWT cookie scoped to cavefinder.app. SurveySim verifies it server-side on each request; we never see or store your password.
• Game saves (all signed-in users).SurveySim is free — every signed-in user's active session and any named snapshots are stored in a SurveySim-owned Postgres database on the same VPS that serves the app, encrypted at rest by Postgres's standard mechanisms. Signing out or never signing in means no server-side save data is created for you — the simulator runs entirely in-browser in that case.
• No third-party analytics, ad pixels, or marketing trackers. SurveySim emits internal usage events to support product metrics — anonymized, tied to your numeric CaveID user id, never to your name or email. Signed-in users emit events for actions like saving and loading; signed-out visitors send none.
• Cave geometry stays local. Station coordinates, shot data, and cross-section geometry are never sent to third parties. Procedurally generated caves are re-derived from a numeric seed on every load, so the underlying geometry is not stored anywhere — only the seed is.

Account deletion

Account deletion is handled by CaveID. When you delete your CaveID account, CaveID calls a SurveySim endpoint that cascade-deletes your saves data — your active session and all snapshots are removed via ON DELETE CASCADE from the parent users row.

Contact

For vulnerability reports, see /.well-known/security.txt. For other questions or requests about your data, open an issue on the project repository.