Privacy

Guest progress, games in progress, device preferences (like sound and colorblind mode), your selected character, the random player id, and purchase unlock tokens live in your browser’s local storage. Clearing site data erases these local copies. When you use a Google account for progress sync, completed games also have an account copy on our server. Purchases can be restored with your unlock link or linked Google account.

Every answer you type is sent to our server to be checked — that’s how scoring works. Synced completed games keep their recorded answers in your private account history. Separately, daily answers are checked and discarded, not stored. One exception: answers to the free practice dive are recorded (with the random player id) so we can tune how answers are scored.

When you finish a dive, we store the game, your score, and the random player id. That’s what powers the “better than X% of divers” stat — it’s a scoreboard of anonymous ids, not people.

If you use the suggestion box, we store the text you wrote and the random player id it came from. Don’t put personal details in there.

Friends is optional. When you join, we store your chosen username, invite link, friendships, and blocked players. Anyone you share your invite link with can add you as a friend. Replace the link at any time to stop the old one working. You can remove or block friends from the Friends page.

Your leaderboard is visible only to you and includes only your friends. Friends see your username and daily score after finishing their own daily. “Share my answers with friends” starts on, letting friends see that day’s answers after finishing their own daily. Sharing was also enabled once for existing accounts when this feature launched. This account setting applies to daily games until you turn it off. Turning it off stops sharing answers; your score stays visible. You can always see your own answers. Your email address and full game history stay private. Scores come from synced completed games, including history you choose to import.

We set exactly one cookie of our own, krillion_session, and only after you buy or restore a purchase. It proves to our server which packs this device owns, can’t be read by scripts, and expires after a year. There are no tracking cookies of ours, ever. Google Analytics (below) sets its own cookies to measure visits, and when ads are served, Mediavine and its partners set advertising cookies — the advertising section covers those in full.

We use Google Analytics to see which pages get visited, which games get finished, and what breaks — things like “a game was completed” or “an unlock was restored,” plus the browser and device type and the approximate location Google derives from your IP address. Google’s handling of this data is covered by the Google privacy policy, and you can opt out with the GA opt-out add-on or any content blocker — the game runs exactly the same with analytics blocked.

Purchases happen on a checkout page hosted by Stripe. Your card details go to Stripe and never touch krillion.io. What we receive back is a payment reference confirming the checkout paid; we keep that reference and the product it unlocked so your purchase can be restored later. Stripe keeps your email for the receipt — their side is covered by the Stripe privacy policy. If you write in about a lost unlock, we look your purchase up in Stripe by the email you write from.

Google sign-in is optional and available to everyone. Firebase Authentication provides your account id, name, and email. We use your identity to restore purchases and, when you connect My Krillion, save completed daily, archive, and pack games to your account. Synced history includes scores, tiers, prompts, and recorded answers so you can view your results on another device. Streaks and earned characters are derived from that history. We store progress in our Neon database under your Firebase account id; it is private to your account.

We ask before importing existing guest history. Overlapping games keep the highest score and count once. Games in progress and device settings do not sync. Signing out stops syncing and returns to separate guest history; account history remains available when you sign in again. We keep your saved history until you ask us to delete it by contacting support@krillion.io from your account email. We never send marketing email.

IP addresses are used in the moment for rate limiting — stopping scripted abuse, not tracking players. Where a limit needs memory, the IP is stored only as a salted one-way hash that can’t be turned back into an address. Our host, Vercel, keeps standard short-lived server logs.

These services process data on our behalf, each holding only what its job needs: Vercel (hosting), Neon (database), Google (analytics and optional sign-in), Stripe (payments), and Mediavine and its partners (advertising, detailed below). Processing happens in the United States. Nobody else gets anything.

Advertising on Krillion is managed by Mediavine. Ads may not be showing yet while the site is onboarded — the disclosure below is in force from the first ad shown.

Mediavine Programmatic Advertising (Ver 1.1)

The Website works with Mediavine to manage third-party interest-based advertising appearing on the Website. Mediavine serves content and advertisements when you visit the Website, which may use first and third-party cookies. A cookie is a small text file which is sent to your computer or mobile device (referred to in this policy as a “device”) by the web server so that a website can remember some information about your browsing activity on the Website.

First party cookies are created by the website that you are visiting. A third-party cookie is frequently used in behavioral advertising and analytics and is created by a domain other than the website you are visiting. Third-party cookies, tags, pixels, beacons and other similar technologies (collectively, “Tags”) may be placed on the Website to monitor interaction with advertising content and to target and optimize advertising. Each internet browser has functionality so that you can block both first and third-party cookies and clear your browser’s cache. The "help" feature of the menu bar on most browsers will tell you how to stop accepting new cookies, how to receive notification of new cookies, how to disable existing cookies and how to clear your browser’s cache. For more information about cookies and how to disable them, you can consult the information at All About Cookies.

Without cookies you may not be able to take full advantage of the Website content and features. Please note that rejecting cookies does not mean that you will no longer see ads when you visit our Site. In the event you opt-out, you will still see non-personalized advertisements on the Website.

The Website collects the following data using a cookie when serving personalized ads:

• IP Address
• Operating System type
• Operating System version
• Device Type
• Language of the website
• Web browser type
• Email (in hashed form)

Mediavine Partners (companies listed below with whom Mediavine shares data) may also use this data to link to other end user information the partner has independently collected to deliver targeted advertisements. Mediavine Partners may also separately collect data about end users from other sources, such as advertising IDs or pixels, and link that data to data collected from Mediavine publishers in order to provide interest-based advertising across your online experience, including devices, browsers and apps. This data includes usage data, cookie information, device information, information about interactions between users and advertisements and websites, geolocation data, traffic data, and information about a visitor’s referral source to a particular website. Mediavine Partners may also create unique IDs to create audience segments, which are used to provide targeted advertising.

If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visit National Advertising Initiative opt out page. You may also visit Digital Advertising Alliance website and Network Advertising Initiative website to learn more information about interest-based advertising. You may download the AppChoices app at Digital Advertising Alliance’s AppChoices app to opt out in connection with mobile apps, or use the platform controls on your mobile device to opt out.

For specific information about Mediavine Partners, the data each collects and their data collection and privacy policies, please visit Mediavine Partners.

Everything on your device you can erase yourself by clearing the site’s data in your browser. For anything on our side — seeing what we hold, correcting it, or deleting it — email support@krillion.io and we’ll sort it out. For purchase records, write from the email you bought with; note that deleting a purchase record means it can no longer be restored. Scores are stored under the random id, not your name, so include the id if you want those gone too.

Krillion isn’t directed at children under 13 and we don’t knowingly collect personal information from them. If you believe a child has given us personal information, email us and we’ll delete it.

If this policy changes, the new version appears here with a new effective date. Material changes get a note on the site, not a silent edit.