Privacy Policy

Who we are

This policy covers the game Kenugard on every platform — in the browser, on Steam, Android and iOS — and the website kenugard.com. The controller of the personal data described below is:

Operator

FOP Shcholokov Denys, Ukraine

Address

Ukraine, Kyiv, blvd. Koltsova 7, apt. 157

Contact

privacy@kenugard.com

What the game stores

The game works without an internet connection. It has no ads, no third-party analytics or crash reporting, and unless you sign in it sends nothing anywhere. The Android version does not even request permission to access the internet.

On your device, the game stores only what it needs to work:

• progress — the state of campaigns, sorties and expeditions, your warband and its gear, and a log of your playthrough: battles, injuries, treatment;
• settings — language, volume, window mode and other options;
• two random identifiers, one for the profile and one for the device. The game creates them itself; they are not linked to your name, account or hardware and never leave the device.

In the browser version this data is kept in the browser storage reserved for the game's website.

In normal play the battle log is only shown on screen. An extended log for testers is enabled by a separate launch parameter and lets you copy it or save it to a file together with anonymised playthrough statistics. Only you can do this, and we receive such a file only if you send it to us yourself.

To delete all of this data, uninstall the game or, in the browser version, clear the site data in your browser settings. If you have not signed in, it cannot be recovered afterwards: we hold no copy.

Account and cloud saves

Only in the browser version of the game can you choose to sign in with Google, so that your progress is not lost and carries on on another device. Without signing in the game is fully playable; it simply keeps everything locally.

When you sign in, Google shares your Google account details with us: email address, name, profile picture and account identifier. We do not receive your password and have no access to the rest of your Google account. The game uses your email to show which account you are signed in with, and the identifier to find your save.

After you sign in, we store:

• the account — the Google details above, and when the account was created and last signed in;
• a copy of your save — the same progress as on your device, together with the game version and the two random profile and device identifiers;
• technical request logs, including IP addresses, which our provider keeps for a short time to run and protect the service.

We need this data only to keep your progress in the cloud — that is, to provide the service you choose by signing in. We do not use it for advertising, do not sell it and do not share it with anyone except the providers the service cannot work without.

The data is stored with Supabase — a database and sign-in service — on servers in the EU (Ireland). Each save is accessible only to its account owner. Your sign-in session is kept in your browser's storage; to end it, choose “Sign out” in the game.

We keep this data for as long as your account exists. You can delete it at any time right in the game: “Account” → “Delete account”. The account and the cloud copy of your progress are removed immediately and permanently; the progress on your device stays. You can also write to us at the address in “Who we are”, and we will delete the account for you.

Privacy policies:SupabaseGoogle

Purchases

The full browser version of the game is sold by our online reseller Paddle.com, which is the Merchant of Record for all our orders. Paddle takes the payment, handles taxes and sends the receipt. You enter your payment details — name, email address, country and payment method — on Paddle's page, and Paddle processes them under its own privacy policy. We never see your card number.

From Paddle we receive only what we need to unlock the full version for you and to keep sales records: your email address, country, order number, amount, and payment or refund status. We link the purchase to your in-game account so the full version unlocks on any device.

The legal basis is performance of the purchase contract and, for record-keeping, our obligations under tax law; we keep these records for as long as the law requires. Paddle's checkout may use its own cookies — for the payment itself and to prevent fraud.

Privacy policies:Paddle

Stores and platforms

The game is already playable in the browser and will later be available on Steam, Google Play and the App Store. Purchases, downloads, accounts and updates in those stores are provided by the stores themselves, which process your data under their own privacy policies.

From the platforms we may receive only aggregate statistics — numbers of downloads and sales — and crash reports, if you have allowed your device to share them with developers. Such reports describe the device and the crash, not you.

Privacy policies:Steam (Valve)Google Play (Google)App Store (Apple)

The website kenugard.com

The website's pages are static: there are no forms or comments, and they set no cookies. If you switch the language, the site remembers your choice in your browser's storage so the home page opens in it — it stores nothing else there. Fonts and images are served from the site itself, without third-party services. Signing in is only available in the game itself — see “Account and cloud saves”.

The website is hosted on Cloudflare. Like any host, Cloudflare processes technical request data — IP address, browser type, the page requested — to deliver the page to you and protect the site from attacks.

Visits are counted with Cloudflare Web Analytics. When you open a page, your browser loads a small Cloudflare script that sends the page address, the site you came from, your browser and device type, and the page load speed. According to Cloudflare, the service uses no cookies or browser storage and does not track visitors; we see only aggregate numbers and cannot single anyone out.

The legal basis is our legitimate interest in delivering the website, protecting it and knowing how many people read it.

Privacy policies:Cloudflare

Where data is stored

Accounts and cloud saves are stored in the EU (Ireland). Cloudflare and Google also process data in the United States and other countries; such transfers are protected by mechanisms recognised in the EU — the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework. Paddle operates from the United Kingdom, which is covered by an EU adequacy decision.

Security

All connections of the game and the website are encrypted (HTTPS). Cloud saves are protected by database-level access rules: each account can read or change only its own save. We store no passwords — sign-in is handled by Google and payment by Paddle. If a breach affects your data, we will notify you and, where the law requires, the data protection authority.

Children

Without signing in, the game collects no personal data from anyone. We do not ask for your age and do not knowingly collect children's data. If you believe a child has signed in with Google without parental consent, write to us and we will delete the account.

Your rights

If you have not signed in, we hold no data linked to you personally: everything is on your device and under your control — “What the game stores” explains how to delete it.

If you have signed in or bought the game, you may at any time obtain a copy of your data, including in a portable format, have it corrected or deleted, restrict its processing or object to it. Deleting your account is easiest in the game itself; for anything else, write to the address in “Who we are” and we will reply within one month. If you are in the EU, you may also lodge a complaint with your country's data protection authority.

For payment data, contact Paddle; for data held by the stores, Google or Cloudflare, contact the platform concerned.

Changes to this policy

If the game or the website starts collecting anything new, we will first update this page and the date at the top.