LEGAL
Privacy Policy
What Kridona Games stores about makers and players, why, and how to get it removed.
Data controller: Kristijan Babić, Straubing, Germany — kridona.official@gmail.com
1. Two kinds of people
Makers have an account and make games. Players play games on their links and never need an account. We store far less about players than about makers.
2. What we store about makers
- Account: email address and a hashed password.
- Profile (optional): the name and photo you choose to show on your games. They are public on your games and in the Game Centre.
- Payments: handled by Stripe. We never see or store card numbers — only a Stripe customer ID, your plan, its status and your credit balance and history.
- Your games: what you asked for, the code that was written, the pictures from its test runs, and where it is published.
- Own domain (optional): the domain you connect to a game.
- Security data: IP address and browser details, used for rate limiting and to stop abuse.
3. What we store about players
- Plays: when a game is opened we count one play with how long it lasted and the country (from the network, not from you). A random player number is kept in the browser so a returning player is counted once. No name, no email, no account.
- Leaderboards: if a game has a leaderboard, your best score, the country and the name you type are public on that leaderboard. Do not use your real full name or anything private as your leaderboard name.
- Test robots that check games before they are published are not counted.
4. How we use it
- To make, test, publish and change your games, and to show you your numbers.
- To bill plans and credits.
- To improve game quality: the operator can open a game you made — its request, its code, its test pictures and what it cost — to find out why a game came out badly. We do not train AI models on your data.
- To keep the service safe (rate limits, abuse prevention) and to send account emails (verification, password reset, receipts).
5. Services we use
| Service | Purpose | Data shared |
|---|---|---|
| Stripe | Payments | Email, payment details |
| Anthropic | AI that writes and changes games | Your game requests and the game's code |
| Cloudflare | Hosting kridona.games and every game, own domains | Game files; players' IP addresses in transit |
| Railway | Our API | Account and game data in transit |
| Supabase | Database | Account, game, play and leaderboard data |
| Resend | Emails | Email address |
Each service works under its own privacy policy. We share only what each one needs to work.
6. Cookies and browser storage
We use no tracking or advertising cookies. The browser keeps a few things locally: your sign-in on kridona.games, and in games the random player number, your leaderboard name and game progress (saves). You can clear them in your browser at any time.
7. How long we keep it
Account data and games are kept while your account is active. Play counts and leaderboard entries are kept while the game exists. Payment records are kept as tax law requires. After you delete your account, your data is removed within 30 days, except where the law says we must keep it.
8. Your rights (GDPR)
You can ask for a copy of your data, its correction or deletion, limit or object to how we use it, and take your data with you. Write to kridona.official@gmail.com — we answer within 30 days. You can also complain to a data protection authority.
9. Children
Making games requires an account, and accounts are for people aged 16 or older. Anyone can play games, but players are never asked for personal data. If you believe a child gave us personal data, write to us and we will delete it.
10. Security
Passwords are hashed (PBKDF2, 600,000 rounds, SHA-512), everything travels over HTTPS, sign-ins use tokens that are blocked on sign-out, sign-in attempts are rate limited, and card data never reaches us.