What we collect

When you sign up:

• Your email address and username.
• Your password, stored only as a secure one-way hash, so we can't see it. The same goes for your recovery code.
• Your date of birth, which we check once at signup and do not store.
• The date and time you agreed to these terms.

While you play:

• Your Kreetures (species, level, rarity, nickname and traits), copied to our server so friends can see them when trading.
• Minigame scores, badges, codes you redeem, referrals, trades, friends and the players you block.
• Letters you send and receive in the in-game mailbox, and messages you post in Hangout chat.
• Profile details you choose to add, like a bio or your country, and your profile visibility settings.
• When you last logged in and were last active, and the IP address you last connected from.

If you link your Discord account: your Discord user ID and your Discord username as it was when you linked, and when you linked them. The one-time code you use to link is kept only for a few minutes, and only in scrambled form.

If you contact us: the name, email address and message you send through the contact form.

What's stored in your browser

• Most of your game progress (KREE, items and your collection) is saved in your browser's local storage. Clearing your browser data clears it.
• One cookie keeps you logged in for up to 30 days. If someone under the minimum age tries to sign up, a second cookie pauses signups from that browser for a day.
• We don't use advertising, analytics or tracking cookies.

How we use it

• To run your account and the game, including multiplayer features like trading, mail, friends, leaderboards and the Hangout.
• To keep the game fair and safe: spotting cheating and abuse, and enforcing bans. This is what IP addresses are used for.
• To review reports. Our moderators can read reported letters and Hangout chat, and can see account details when handling a problem.
• To reply when you contact us.
• If you link Discord: to give you roles in our Discord server and to recognise you when you use our Discord bot.

Who can see what

• Other players can see your username, your Kreetures, your leaderboard scores, the chat messages you post, and your profile if it's public. They see your country only if you add it.
• Letters are visible to the sender and the recipient, and to moderators if a letter is reported.
• Your email address, IP address and date of birth are never shown to other players.
• If you link Discord, members of our Discord server can see that you have the Linked role. If you're a Kreeture Club member, they can also see a Club role, unless you turn it off on your account page. Our Discord bot only posts things that are already public on kreeture.com, like public profiles and leaderboards.

Sharing

We don't sell or rent your information. We share it only with the company that hosts our servers (located in the United States), with Discord for anything our bot posts in our Discord server (Discord's own privacy policy covers what happens there), when the law requires it, or if KREETURE is ever sold or transferred to a new owner who agrees to protect it the same way. Purchases are switched off right now. If we turn them on, payments will be handled by a payment provider and we'll update this policy first.

How long we keep it

We keep your information while your account exists. If you unlink Discord, the link is removed straight away and the Linked role within a few minutes. When you delete your account, it's removed from our live database straight away, and copies in our backups are overwritten within 30 days. Records of moderation actions may be kept without being linked to your account. Contact messages are kept until we've dealt with them.

Your choices

• Change your password, country and profile visibility on your account page.
• Link or unlink your Discord account at any time on the account page. You can also unlink with /unlink in our Discord server.
• Hide your Club role in our Discord server with the switch on the account page.
• Delete your account at any time from the account page. This removes your account, Kreetures, scores, mail, chat messages, friends, trades and Discord link from our server.
• Ask us for a copy of your information, or to correct it, through the contact page.

Children

You must be at least 13 to create an account. We don't knowingly collect information from children under 13. If you're a parent or guardian and think your child has an account, contact us and we'll delete it.

Security

Passwords are hashed, connections use HTTPS, and access to player data is limited to our moderators. No system is perfectly secure, so please use a password you don't use anywhere else.

Changes to this policy

If we change this policy we'll update the date at the top. If a change is significant, we'll also let players know in the game.