Introduction
This document explains what information Kubbo, operated by Agedum, receives from you, what it is used for, who it is entrusted to, and when it is deleted. While you use the Service, this policy applies together with the Terms of Service.
What We Receive
Accounts
- When you sign up, we receive a profile name, email address, and password. Your profile name and password are used to log in, and your email address is used only to send password reset emails.
- Your password is never stored as you typed it. We store only a value converted by a one-way method (Argon2id) that cannot be reversed.
- We do not ask for a profile photo when you sign up. You can upload one afterwards if you want. An uploaded photo is shown on the screens of the people you play with, and it is stored in a place where anyone who knows the photo's address can view it.
- If you have an account, your settings (such as volume, color vision mode, and language) and what you picked in Custom (theme, emotes, and frame) are also stored on your account.
Guests
If you play without an account, the Service gives you a temporary name starting with
kubbo- and keeps that name only in a cookie in your browser. No guest account is created
on the server. A guest's settings are stored only in that browser.
Connection Information
Your IP address is used only to count whether requests come too often: logging in, signing up, checking whether a name is taken, resetting a password, deleting an account, and joining a game (starting Solo, creating a room, or connecting to Quick Match). Game-joining requests from guests without an account are counted the same way. IP addresses are handled only in server memory and are not stored.
Game Records
- Replays: when a game ends, we store every move of that game and the names of the players. Games that included guests are stored too.
- History: for games played with an account, we keep the seat, rank, mode, and time on that account. Games played as a guest are not kept in any history.
- Reports: when someone makes a report, we store which seat in which game reported which seat, the accounts of the reporter and the reported player (if they have one), the names they had at the time, the reason, and the time. Guests may also appear in these records by name. IP addresses are not stored with reports.
Error Reporting
When an error occurs on the screen, its details are sent to Sentry (Functional Software, Inc., United States), an error tracking service. What is sent is the error's stack trace, the browser type and version, the language and time zone, the address of the page where the error happened, and the trail leading up to the error. The trail includes which requests were sent and which screens were visited, what was tapped or typed into (only which element; the values you typed are not included), and messages the screen left in the developer console.
If no error occurs, nothing is sent. The fact that you visited, or that you moved between screens, is not sent on its own.
This data is stored on Sentry's servers in the United States and is deleted after 30 days.
IP addresses and cookies are not sent. Values that point to a specific target in an
address, such as a room code, a replay identifier, a connection token, or a profile photo key, are
masked before sending. For example, /room/ABCDEF is sent as
/room/:code. Addresses in the trail above are masked the same way.
The ad consent prompt (Google's certified CMP) does not cover this collection. That prompt applies only to data use by Google and its advertising partners, and the error reporting described here is outside its scope.
Third Parties
To run the Service, we use services from the following companies.
- Sentry: collects errors that occur on the screen. What is sent is described under "Error Reporting" above. Data is kept for 30 days on servers in the United States.
- Cloudflare: delivers the game screen (Workers), carries requests and real-time connections between the screen and the server through to the server (Tunnel), and stores profile photos (R2).
-
Resend: sends password reset emails. The recipient address and the reset link pass
through Resend. Emails are sent from
noreply@kubbo.games, and no other emails (such as sign-up confirmations) are sent. - Google AdSense: shows ads below and beside the screen. Google may use browsing records such as cookies to choose ads. How Google uses that information, and how to opt out of personalized ads, is explained in Google's advertising policy guide. If you connect from the European Economic Area, the United Kingdom, or Switzerland, Google's consent prompt appears.
We do not pass personal information to anyone else.
Your Rights
Viewing and Correcting
After logging in, tap your profile on the home screen to open the Profile screen. There, type a new name in the name field and tap [Save] to change your name, and use [▣ Upload Profile Photo] to change your photo. When you change your photo, the previous one is deleted. [History] shows your past games.
To change your password, use "Forgot your password?" on the log-in screen to receive a reset email. There is no place on the screen to view or change your email address.
Deleting
Tapping [Delete] on the Profile screen opens the Delete Account screen, where you enter your password again to delete your account. Deleting your account erases, immediately and on the spot, your account (profile name, email address, and password), your profile photo, your settings and equipped items, and all of your log-in sessions. There is no grace period, so this cannot be undone.
- In your history, only whose it was is erased; the game values (seat, rank, mode, and time) remain.
- Replays of games that have already ended keep the name you had at the time for a while.
- In report records, too, only whose account it was is erased; the rest remains.
A guest's information is in your browser. Clearing your browser's cookies and site data removes the guest name and settings.
Ad Consent
There is no button on the Kubbo screen to change or withdraw ad consent. The consent prompt is shown and managed by Google, so changing it follows Google's instructions.
Retention
| What | Until when |
|---|---|
| Account · profile photo · settings | Until you delete your account. Erased immediately when you do |
| Log-in sessions | End if unused for a while. All erased when you delete your account |
| History | Kept with no time limit. When you delete your account, only whose it was is erased |
| Replays | Kept for a while, then cleaned up |
| Report records | Kept. When you delete your account, only whose account it was is erased |
| Error information | 30 days (Sentry) |
| IP addresses | Not stored |
| Guest names | In a cookie in your browser |
How We Keep It Safe
- Passwords are stored after conversion by a one-way method (Argon2id) that cannot be reversed.
- The log-in cookie cannot be read by scripts on the screen, and on the Service it travels only over encrypted connections.
- The code that handles accounts and password resets does not write email addresses, passwords, or session values to server records (logs). Sending emails and storing photos also do not write recipient addresses or links to logs.
- Profile photos are stored under randomly generated names, and only that name is kept in the database.
- When error information is sent, IP addresses and cookies are left out and values that point to a specific target are masked.
- Accounts, history, replays, and reports are kept on servers that the operator runs directly.
Children
The Service does not ask for or check anyone's age. We do not knowingly receive personal information from children under the age of 14.
External Links
This document and the Service contain links to other sites (such as Google's guide pages). How those sites handle information follows their own policies; this policy does not apply there.
Changes to This Policy
When this policy changes, the updated policy will be posted on this page. Significant changes will also be announced in the Notice.
Contact
You can change your name and photo, and delete your account, yourself on the Profile screen (see "Your Rights" above). Other questions about personal information go to the operator, Agedum.
- Privacy officer: Agedum
- Contact: agedum.games@gmail.com
This policy is effective as of October 3, 2026.