Privacy policy
What data we collect, why we collect it, and what you can do about it. Plain English, no dark patterns.
Who we are
krb-deck is a non-commercial, fan-made codex for the mobile game Kingdom Rush Battles. We are not affiliated with Ironhide Games. This site exists so the community can browse heroes, towers, spells and share decks.
Data we receive when you sign in
The only way to sign in is Google OAuth. When you authorize, Google sends us:
- Your email address — used as your account identifier.
- Your Google display name and avatar URL — shown until you set an in-game nickname/avatar of your own.
- Your Google account ID (
google_id) — so we can match returning sessions even if you change emails later.
We do not receive your password. We do not request access to your contacts, calendar, drive, or anything else.
Data you create on the site
- An optional in-game nickname (3–30 chars) and a chosen avatar from a fixed gallery.
- Decks you build, save or vote on (likes/dislikes), plus any posts, ideas or comments you submit.
- Moderation state — role (user / moderator / admin) and ban status if applicable.
Your nickname, avatar, and public posts are visible to everyone. Your email is never shown publicly.
What we don’t do
- No analytics or tracking pixels — not Google Analytics, not Meta Pixel, not anything else.
- No third-party advertising. The site has no ads.
- No data is sold or shared with third parties for marketing.
- No location tracking. No fingerprinting.
Cookies
Only essential cookies are used (session cookie, CSRF token, and a transient OAuth state cookie during sign-in). Full breakdown on the Cookies page.
How long we keep your data
Account data is kept while your account is active. If you ask us to delete it, we wipe it within 14 days, except for content that other users have already saved or referenced (your decks remain as canonical entries but are no longer attributed to you).
Your rights
You can:
- Edit or remove your nickname/avatar from your profile at any time.
- Request a copy of your account data.
- Request full deletion of your account.
Reach out on Telegram at @cpentyc for either request.
Children
The service is not directed at children under 13. If you believe a child has signed in, contact us and we’ll remove the account.
Changes
If this policy changes in any meaningful way, we’ll bump the «last updated» date at the top. Material changes will also surface a fresh banner on first visit.