Privacy policy

Effective 1 October 2026

KGai Reborn is a free, non-commercial hobby project. This page says what the game stores about you and why. It is deliberately short; if anything is unclear, write to the address at the end.

Who is responsible

The game is run by Sebastian Freitag as a private person. Contact: kgai.reborn@gmail.com. The server is hosted by DigitalOcean in Frankfurt, Germany.

What is stored

Your account: e-mail address and display name. There are no passwords: you sign in with Google or Discord.
When you sign in with Google or Discord: the identifier of that account, your e-mail address and your name there (Google: first name; Discord: display name), used to create or find your account; the name becomes your display name, which other players see. If an account with the same verified e-mail address already exists, it is linked. The game never sees your Google or Discord password and requests nothing else.
Game data: the results of your matches (who played, who won, how many turns, when) and whether your account has the admin role.
Two strictly necessary cookies: kgai_session keeps you signed in for up to 30 days; kgai_oauth exists for the few minutes of a Google or Discord sign-in and protects it against forgery. Your browser's local storage remembers your deck and lobby settings on your device only. There are no analytics, advertising or tracking cookies and no third-party trackers.
Technical logs: the server records each request with the IP address, path and time to keep the service secure and to debug problems. Logs are small and overwritten automatically as new entries arrive.
Backups: a copy of the database is taken every night and kept for 14 days.

How it is protected: all traffic is encrypted (HTTPS), and the database and its backups stay on the server, readable by nobody but the game itself.

Why

To run the game you asked for: signing you in, pairing you with opponents, keeping your record (contract, GDPR art. 6(1)(b)), and to keep the service secure (legitimate interest, art. 6(1)(f)). Nothing is used for advertising, profiling or sale.

Who can see it

Other players see your display name and the results of matches they played against you.
Administrators of the game can see the list of accounts (e-mail, display name, record) to run the service.
DigitalOcean hosts the server as a processor. Google and Discord are involved only when you choose to sign in with them. Nobody else receives your data.

The game's use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements.

How long

As long as your account exists. Ask for deletion by e-mail and the account and its data are removed; copies in backups disappear within 14 days.

Your rights

You can ask what is stored about you, have it corrected or deleted, and object to its processing. Write to the address above. You may also complain to a data-protection authority.

Age

The game is not directed at children. Please do not create an account if you are under 16.

Changes

If this page changes, the date at the top changes with it.