Your data, explained plainly

KalpKant Games is a one-person indie game store. This page explains what information the site collects, why it is needed, and which third-party services are involved. Nothing here is sold, and accounts can be left any time by simply signing out — contact us if you want your data removed.

• Account information. When you register: your name, email address, account role (player or developer) and a password that is stored only as a one-way hash — never in plain text. Email verification and password-reset codes are stored hashed and expire after about 10 minutes.
• Published games and posts. Developer accounts can publish games (titles, descriptions, links, cover art, screenshots, trailers) and blog posts. This content is public by design. Game cover art and screenshots are hosted on Cloudinary.
• Messages you send. Contact-form messages, newsletter signups and game reviews (including any email address you provide) are emailed to the site owner so they can be read and answered.
• Usage counts. The site counts game-page views and downloads in aggregate to show creators how their games perform. These are simple counters, not cross-site tracking profiles.

• Sign-in session (kkgstoken). Kept in your browser's local storage and as a cookie (7-day lifetime, SameSite=Lax) so you stay signed in and creator-only pages can verify your role. Signing out clears both.
• Analytics cookies. Google Analytics (GA4) may set its own cookies to measure visits in aggregate. Vercel Analytics measures page views without cookies.
• Embedded content. YouTube trailers and Sketchfab 3D previews can set third-party cookies when played, governed by those companies' own policies.

The site uses Google Analytics (measurement ID G-P2FL06P3XR) and Vercel Analytics to understand which pages and games are popular. This data is aggregated and is used only to improve the store — for example, deciding which games to feature or which pages need better explanations.

A Google AdSense script is loaded on the site (publisher ID ca-pub-1674197696050997). No ad units are currently configured, so no ads are displayed yet. If advertising is enabled in the future, Google may use cookies to serve and measure ads, as described in Google's advertising policies — and this section will be updated.

Push notifications are optional. If your browser supports them and you are not already subscribed, the site may show an invitation to opt in. Notifications are enabled only after you choose Allow and approve the browser's permission request. A push subscription is stored so new game and blog announcements can reach your browser; you can manage or revoke notification permission in your browser settings.

Transactional email (verification codes, password resets, contact replies, newsletter confirmations) is sent through Resend. Your address is used only for the message you asked for — the newsletter sends new-game and update announcements. There is no automatic unsubscribe link yet; to stop receiving the newsletter, just ask through the contact section below and you won't be emailed again.

The site runs on, or embeds content from, these providers — each with its own privacy policy:

• Vercel — website hosting and privacy-friendly analytics.
• Google — Analytics (GA4), AdSense (loaded, no ad units yet), YouTube video embeds.
• Resend — transactional email delivery.
• Cloudinary — hosting for uploaded game images.
• Sketchfab — interactive 3D asset previews.
• Download hosts — game files live on GitHub Releases, itch.io or Google Drive; downloading a game is subject to that host's policies.

• Accounts, games, posts and counters are kept in the site's PostgreSQL database for as long as the service runs.
• Passwords are hashed with bcrypt; verification codes are hashed and short-lived.
• Creator pages and APIs check signed session tokens and the developer role on the server — not just in the browser.
• No system is perfectly secure. If you believe your account is compromised, reset your password and contact us immediately.

You can review your published games and posts in the creator dashboard at any time. To correct, export or delete your personal data — or to delete your account entirely — contact us (see below) from the email address you registered with, and it will be handled personally.

KalpKant Games is a general-audience store and is not directed at children under 13. No age gate is currently in place; parents or guardians who believe a child has created an account can contact us and the account and its data will be removed.

If the site starts using new services (for example, live advertising units), this page will be updated and the “Last updated” date below will change. Significant changes will also be announced in the devlog.

Questions about privacy, or a request about your data? Use the contact section on the homepage and mention “privacy” in your message. Every request is read by the developer personally.