Privacy Policy
Effective 2026-08-28. Last updated 2026-08-28.
This policy explains what King of the World (https://king-of-the.world) collects when you browse, sign in, like, donate, or buy GRN, and what we do with it. It sits alongside the Terms. Short version: we keep the game small, we don’t sell data, and the game itself is public by design.
Who is responsible
The controller is Nicolae Cojuhari, based in Austria. Privacy requests and questions: contact@king-of-the.world.
What we collect
- Account. Your email address (to sign you in with a magic link - no passwords), and the moment you signed up.
- Profile. Display name, handle, avatar URL, country, pitch, and - if you reign - your message and link. You choose all of it.
- Game activity. Donations and purchases as permanent ledger rows (who, to whom, how many GRN, when). Likes as counters and anonymous daily totals; the record of who liked whom is kept for 7 days (to show “recent support” and catch abuse), then deleted. How many likes you have given is stored but visible only to you.
- Purchases. Order and transaction identifiers and amounts from Paddle. Card numbers and billing identity are collected by Paddle, not by us.
- Technical data. IP address, user agent, referrer, and request logs, processed by our hosting providers to run and secure the site. Session cookies to keep you signed in.
- Messages you send us. Support emails, reports, and rights notices, kept as needed to respond and keep a record.
What is public
The game is a public leaderboard. Your profile (name, handle, avatar, country, score, likes and backer counts, rank), your message and link while you reign, the record of who donated to whom, and anonymous daily like totals are visible to anyone, including search engines, without signing in. Who liked whom is visible for 7 days, then deleted. Your email, purchase amounts, whom you like, how many likes you have given, and your notifications are private to you.
Don’t put anything on your page you don’t want public. You can edit your page at any time.
Cookies
We use strictly necessary cookies only: the session cookies that keep you signed in. There are no advertising or tracking cookies. If we add analytics, it will be cookieless, and this page will say so.
Why we use this data
- Contract. To run your account and page, record likes and donations, deliver GRN you buy, and show the leaderboards.
- Legitimate interests. To keep the game fair (rate limits, duplicate-account and bot detection), moderate content, debug outages, and defend legal claims. You may object to this processing (see “Your rights”).
- Legal obligation. To keep purchase, tax, and complaint records where the law requires.
Who we share data with
- Paddle - checkout, payment confirmation, invoicing, and tax (their privacy notice).
- Vercel and Supabase - hosting, database, authentication, and email delivery for sign-in links.
- Professional advisers, authorities, or a buyer of the Service, where required to comply with law, enforce the Terms, or transfer the project.
We do not sell personal data. Some providers are outside the European Economic Area; where we rely on them we use their standard contractual clauses or an equivalent safeguard.
How long we keep it
- Account and profile data: while your account exists.
- Donation rows, daily like totals, and scores: permanently - they are the public record the game is built on. If you close your account, your profile is anonymised (name, handle, avatar, and email removed) but those records stay so other players’ scores remain accurate.
- Who liked whom: 7 days, then deleted automatically.
- Purchase records: as long as required for accounting, tax, fraud, and dispute handling.
- Logs and technical data: for a short period, as needed for security and debugging.
Your rights
If the GDPR or a similar law applies to you, you can ask to access, correct, export, or delete your personal data, to restrict or object to certain processing, and to withdraw consent where processing was based on it. You can also complain to a supervisory authority where you live. Email contact@king-of-the.world; we may need enough information to find your data.
Deleting your account anonymises your profile as described above. Public game records (that a like or donation happened) are kept, without your identity attached.
Children
The Service is for adults (18+). We do not knowingly collect data from children. If you believe a child has an account, contact us and we will delete what we can identify.
Changes
We may update this policy as the game or the law changes. The date at the top is the current version; material changes are posted here.