Privacy Policy

Who operates Kingdoms

Kingdoms is operated by Tomaz Pacnik. For privacy questions or requests about your information, contact the site team at contact@tepanje.org.

Information processed by the game

• Account information: your chosen username, email address and verification status, plus a password hash used to authenticate your account. The application stores the hash, not your readable password.
• Account recovery: short-lived, single-use email-verification and password-reset tokens are stored as cryptographic hashes. A reset invalidates existing sign-in sessions.
• Game information: kingdom name and colour, map position, gold, population, army, buildings, hero progress and equipment, alliance membership, game scores, and donation-bonus status.
• Messages: messages you submit to public chat, alliance chat or another player. Public and alliance messages can be seen by people with access to those chats; private messages are intended for the selected conversation.
• Donation records: PayPal order reference, amount, status and timestamps needed to confirm a donation and apply its in-game bonus. PayPal processes the payment; Kingdoms does not receive or store your full card number through this game.
• Technical and security information: the application uses the requester IP address together with a username to limit repeated failed login attempts. Those rate-limit entries are held in application memory and expire; the hosting provider may separately keep server or access logs under its own practices.

The game stores an authentication token in your browser's local storage to keep you signed in. The application does not use that token as a browser cookie.

Why information is used and how long it is kept

Information is used to create and secure accounts, verify recovery email addresses, send password-reset links, run the game, display game features, deliver messages, prevent abuse, maintain rankings, process optional donations and provide support. Verification tokens expire after 24 hours; password-reset tokens expire after one hour and are deleted when used or replaced. Game records and messages are kept while needed to operate the account and service. If you request account deletion, contact us; account-linked records can be removed from the active game database, subject to legal obligations and any limited backup-retention period controlled by the hosting provider.

Do not put sensitive personal information in usernames or chat messages. Public chat, kingdom profiles and leaderboard details may be visible to other players.

Advertising, cookies and similar technologies

Kingdoms includes Google AdSense advertising code. Google and its advertising partners may use cookies or similar technologies to store or access information in your browser, measure advertising, prevent invalid activity, and, where permitted by your settings and applicable law, personalize ads. Google's use of advertising cookies enables Google and its partners to serve ads based on visits to this site or other sites. Learn more in Google's advertising and cookie information and manage Google ad personalization in Google Ads Settings.

Your browser also stores the game sign-in token in local storage as described above. The news page embeds live video from third-party providers; loading or playing an embedded video may allow that provider to receive technical information about your browser and visit. News headlines link to external publishers, whose privacy practices are their own.

Where consent is legally required for advertising technologies, the site operator must configure an appropriate consent mechanism before serving affected ads. This policy is not a consent banner, and you can contact us with questions about the site's current consent settings.

Service providers and external links

The game uses a hosting provider and MySQL database to deliver the service; an SMTP email provider to send account-verification and password-reset messages; Google for advertising; PayPal for optional donations; and external news, video and article providers for the World News page. These providers process information under their own terms and privacy notices. Kingdoms does not control external websites linked from the news page.

Your choices and requests

You may stop using the game, clear its local-storage sign-in token from your browser, adjust browser cookie settings and manage Google ad preferences through Google Ads Settings. Clearing the token signs you out but does not delete your account or game records.

To request access to, correction of or deletion of account-linked information, or to ask a privacy question, email contact@tepanje.org. We may need information sufficient to verify that the request concerns your account. You may also have rights under the data-protection laws applicable where you live.

Changes to this policy

This policy may be updated when the game or its service providers change. The current version and its update date will be published on this page.