Privacy Policy

We keep data collection to the minimum needed to run the game:

• Nickname (callsign) — the name you type when you join a game. It is shown to the other players in your session so the game can work.
• Game state — the character traits the game deals you, your votes, and reveal status. This is temporary session data that exists only while the game is active.
• Support messages — if you use the contact form, we receive your message and, optionally, the name and email or Telegram handle you provide, plus basic context (the game code, your nickname, and the page you were on).
• A hashed IP address — to prevent spam and abuse of the contact form, we compute a one-way salted hash of your IP address. We never store your raw IP address.
• Aggregate usage analytics — we use Vercel Web Analytics and Speed Insights to see anonymous, aggregated traffic and performance data. These do not use cookies and do not track you across other websites.

We use only strictly necessary cookies — the ones the site needs to function. We do not use advertising or cross-site tracking cookies, so there is no cookie consent banner. The essential cookies are:

• A language preference cookie, so the site remembers your chosen language.
• An anonymous session cookie, so you can stay in your game without registering.
• A staff login cookie, used only by site administrators.

We process this data to provide and run the game, keep your language and session working, prevent spam and abuse, respond to you when you contact us, and understand aggregate usage so we can improve performance. Where the law requires a legal basis, we rely on our legitimate interest in operating a functioning, spam-free service and, for support messages, on handling the request you sent us.

We do not sell your data or use it for advertising. We rely on a small number of service providers who process data on our behalf:

• Supabase — database and anonymous authentication hosting.
• Vercel — website hosting and the aggregate analytics described above.
• Telegram — used to deliver your support-form message to us.

Game and session data is temporary and is removed once the game ends or the session expires. The hashed IP address used for rate-limiting is short-lived and only exists for the length of the rate-limit window. Support messages are kept for as long as we need them to handle your request and any follow-up. We keep data no longer than necessary.

You can ask us to access, correct, or delete the personal data we hold about you, or object to our processing of it. Just email support@krovets.com and we will help. If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

Krovets is not intended for children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with data, contact us and we will remove it.

We may update this policy from time to time. When we do, we will change the "last updated" date at the top of this page. Significant changes will be reflected here before they take effect.

If you have any questions about this policy or your data, email us at support@krovets.com.