Privacy Policy

Who is responsible

Mateusz G operates kawka.app and is responsible for the personal data described in this policy. Private requests can be sent through the Contact page.

This policy applies to the kawka.app website, creator accounts, publishing tools, and public game pages. Players can browse and play without creating an account. A creator account is needed to publish a game or manage a published game.

Information we receive

• Creator account data: email address, authentication status, terms acceptance timestamp/version, and the creator profile fields stored for public attribution when a profile is available.
• Game data: title, descriptions, tags, thumbnails, screenshots, build versions, device-support information, and moderation status.
• Safety reports: the game, report category, optional details, an optional authenticated creator identifier, and a private status-reference hash. If a report submission succeeds, it can be made without an account when a Report game control or report form is available; the raw reference is shown only once as a private status link. Failed or local-preview submissions are not recorded by kawka.app.
• Browser and game data: the gamebox-theme preference, development-only local preview state, and any local preferences or high scores a game stores in its own browser context. This is not a player account, is not synced to the portal, and is not used to build a player profile.
• Technical and security data: request timestamps, IP address or network information, browser/device characteristics, error details, and hosting/security logs that may be processed by the services delivering and protecting kawka.app. kawka.app does not currently use a separate behavioral analytics service or build a player profile.

We collect this information from the creator who provides it, from the player who submits a report, from the browser or device making a request, and from the hosting, authentication, storage, and security providers used to operate the service.

A published game may request files or services from its own host or from third parties chosen by its creator. Those requests may expose network information to the relevant provider under that provider's own notice. kawka.app does not use those external services to create a player account or profile and does not control their privacy practices.

Why and on what basis

• Requested service: account access, creator publishing, game hosting, metadata management, version replacement, and private report-status lookup.
• Legitimate interests: security, abuse prevention, report handling, moderation, service maintenance, and protecting the rights of players and creators.
• Legal obligations: responding to lawful requests and keeping records where the law requires it.
• Consent: advertising and non-essential advertising storage only after the required consent is collected.

Providing an email is necessary to create a creator account. Public game and profile fields are needed to publish a game. Players may use the public catalog without providing account information.

Safety checks and decisions

Uploaded ZIP files are checked for unsafe paths, unsupported files, excessive size, and archive bombs. An external malware scanner may be added as another layer, but no automated check can guarantee that a game is harmless. Reports are reviewed and games can be hidden or blocked.

Automated checks and review

Archive validation and security scanning are automated checks limited to uploaded game builds. They can block or delay publication, but kawka.app does not use them to profile players or make decisions about a person's eligibility for unrelated services. If the confirmed moderation process applies to a restriction, the operator will provide the review and appeal route described in the Terms and Community Guidelines.

Cookies and advertising

kawka.app uses essential authentication cookies when a creator signs in. Theme and limited preview state use browser storage for requested functionality. No Google advertising tag or ad placement is active in this release; the publisher verification metadata and ads.txt file do not create an advertising profile.

Service providers and transfers

• Supabase: creator authentication and the kawka.app database.
• Vercel: application hosting and delivery.
• Cloudflare: Cloudflare R2 stores uploaded archives and published static game files.

kawka.app uses Supabase, Vercel, Cloudflare, and Google services. These providers may process data outside the European Economic Area using the safeguards described in their data-processing terms.

Retention and your choices

Creator accounts and games are kept until the creator asks us to delete them. Technical and security logs are normally kept for 30 days. Safety reports and moderation records are kept without a fixed expiry so we can document decisions and identify repeat abuse. Browser data remains until you clear it or the browser removes it.

Your rights

Depending on the law that applies to you, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may withdraw consent at any time for processing based on consent; withdrawal does not affect earlier lawful processing. Use the private Contact form. We may request information needed to verify the requester and normally respond within one month where GDPR applies. You may also complain to your local data-protection authority.

Children and policy changes

kawka.app is not directed to children below the minimum age for online services in their country, and we do not knowingly request children's personal data. We may update this policy as the service changes. The effective date above identifies the version currently published.