What we collect
From players: a nickname and the answers they give during a game. We do not ask players for an email address, a phone number or an account, and we do not attach a tracking identifier to them.
Before joining a room, a player may be asked to pass an automated check designed to distinguish people from scripts. Cloudflare Turnstile runs this check in the phone’s browser, using browser signals and the IP address. Our server forwards the IP address with the check and keeps only aggregate counts of check outcomes, without linking them to players. Turnstile also runs on the contact page, where Cloudflare processes the visitor’s browser signals and IP address for the bot check. We do not store an IP address with a beta request.
From hosts: an email address and display name so you can sign in and manage a library, along with your quiz content and the reports your games produce.
During Studio’s private beta, we record sign-in attempts by people who do not yet have access: the email address and name provided by Google, and the time and number of attempts. This allows us to grant them access. When someone submits the beta form, we also collect their name, Google sign-in address, room size, the occasion you describe, optional organization and message, and the page language. These form answers are sent only on submission; no IP address is stored with the request.
From everyone visiting this site: cookieless, aggregate analytics measured by Cloudflare Web Analytics — page views, referrers and how quickly pages load, with no cross-site profile and no cookie banner.
Why we collect it
To run your games, show leaderboards and provide session reports. To bill you if you are on a paid plan. To keep the service running and diagnose problems. To understand, in aggregate, how this website is used.
During Studio’s private beta, to manage access and to decide on and reply to beta requests.
We do not sell personal data, and we do not run advertising.
How long we keep it
Live room state is held only while the game runs and is erased automatically within hours of it ending.
Game reports, including nicknames as entered, are kept until you delete the report or your account. They do not expire automatically.
Deleted quizzes move to the trash, where you can restore them. They remain there until permanently deleted.
Your account details are kept until you delete your account.
A Studio beta access request, including any form answers, is deleted 30 days after the last contact (a form submission or sign-in attempt restarts this period), or immediately when access is granted or the request is dismissed. No IP address is stored with it. Once access is granted, your email address remains on the beta access list until it is removed or you delete your account.
Who else sees it
Our hosting provider, which runs the servers behind the game and your account. Our merchant of record, which handles payments and tax — card details go to them and never reach us. Error and uptime monitoring, which sees technical logs.
Cloudflare, which serves this website and measures its cookieless analytics. It handles the requests your browser makes to this site, including your IP address, as any web host does. It never sees a game, a quiz or an account: those run on our servers, not through Cloudflare.
Cloudflare also operates the bot checks on the contact page and before joining a game (Cloudflare Turnstile), processing the visitor’s browser signals and IP address to tell people from scripts. Its Turnstile Privacy Addendum, at cloudflare.com/turnstile-privacy-policy, describes that processing.
That is the full list of processors. We will update this page before adding to it.
Your rights
Under GDPR and KVKK, you can request a copy of your data, ask us to correct it or ask us to erase it. You can delete your account in account settings; deletion also applies to your communities, quizzes and reports.
Players who want a nickname removed from a report should ask the organizer who ran the game, or contact us directly.
Website and bot checks
This website and the bot checks on the contact page and before joining a game use Cloudflare. Cloudflare runs these services on its global network, so they are answered at the Cloudflare location nearest to you, which may be outside the EU.
Contact
For questions about these policies, contact privacy@kabooom.live.