Privacy Policy

Effective October 29, 2026

This policy explains how Context Aware LLC ("we", "us") handles information when you play Kingdom of Bad Ideas (the "Game") or visit kingdomofbadideas.com (the "Site"). Questions go to support@kingdomofbadideas.com.

What we collect

Account information

• Email address, used to sign you in with a one-time code.
• If you sign in with Google, we receive your email address and the basic profile information Google shares (your name and profile picture). We use the email to identify your account. We do not use your Google data for anything else, and we never receive your Google password.
• Display name you choose. Other players can see it, for example on the leaderboard.

Game data

• Your card collection, decks, currency balances, quest progress and purchases.
• Match records: who played, the cards played, the result and your rating. We use these to run the ladder and to balance the Game.

Google Play Games

• On Android, the Game signs you in to Google Play Games, which is separate from your Kingdom of Bad Ideas account. Your achievements and other gameplay data still go to Google even though the Game shows its own player names and pictures. Google handles that data under its own privacy policy, and who can see your Play Games activity is set in your Play Games profile settings.
• We store your Play Games player ID with your account so your Play Games friends who also play can find you, and to restore your account on a new device.
• If you tap Find Friends From Play Games and agree to share your Play Games friends list, we read it from Google to show which of your friends play. We do not store your friends list.

Technical information

• Our servers keep standard logs, which can include your IP address, device type and the time of a request. We use them for security and to fix problems, and we keep them for a short time.
• Crash diagnostics: the Game sends crash and technical error reports to Sentry. Reports may include the app version, device model, operating system, error details and stack traces, a session identifier, a shortened hash of the Game's device token, and account or match identifiers when available. We use them to diagnose faults and monitor release health. Default personally identifying information is disabled in the Game's Sentry configuration.
• Gameplay telemetry: the Game and server record events such as launch, update checks, sign-in outcomes, matchmaking, playable board, match actions and results, and whether you play again. These records may include timestamps, app version, session identifiers, hashed device identifiers, and account and match identifiers. Events may be stored on your device and sent when connectivity returns. We use them to find failures and improve the first-game experience.
• The Site uses Cloudflare Web Analytics to count visits. It does not use cookies or track you across other sites.

Early Access sign-up

If you join the Early Access list on this site, we store your email address, the time you signed up, and when you confirmed it. We use it only to tell you about Early Access and launch, and we send a confirmation email first. Every message carries an unsubscribe link, and unsubscribing stops all further email. The sign-up form uses Cloudflare Turnstile to block bots.

Purchases

In-app purchases are handled by the Apple App Store or Google Play. We receive a receipt that confirms the purchase and the item. We never receive your payment card details.

How we use it

• To create and secure your account and sign you in.
• To run matches, keep your collection and show leaderboards.
• To deliver the items you buy.
• To balance the Game, diagnose crashes and interrupted sessions, improve the first-game experience, and prevent cheating and abuse.
• To answer you when you contact us.

We do not sell or rent your personal information, and we do not use it for third-party advertising.

Who we share it with

We share information only with the service providers that run parts of the Game for us, and only as far as they need it to do that work:

• Supabase: account sign-in and data storage.
• Fly.io: game server hosting.
• Sentry: crash and technical error reporting to investigate bugs and monitor app reliability.
• Cloudflare: website hosting, sign-up list storage, bot protection and email forwarding.
• Resend: sending sign-in and Early Access emails.
• Google and Apple: sign-in (if you choose it), app store purchases, and Google Play Games achievements and friends.

We may also disclose information if the law requires it, or to protect the safety of our players or the Game.

How long we keep it

We keep account information and game data while your account exists. Diagnostic and gameplay telemetry may be retained for troubleshooting and analysis, subject to the deletion process below.

Permanent account deletion

When account deletion is completed, we permanently delete your Kingdom of Bad Ideas account and profile, including your email address, display name, sign-in links and friend connections; your card collection, decks, currency balances and progress; and your purchased in-game items and entitlements. The limited financial-record exception below does not preserve an active game account.

Deletion cannot be undone. Creating another account, even with the same sign-in details, will not restore deleted progress, balances, purchased items or entitlements.

Account deletion also covers diagnostics and gameplay telemetry that can be linked to you: we remove it or de-identify it so we can no longer link the retained data back to you. Crash reports are the exception: they expire on a fixed schedule, described under Deletion timing. Match records that no longer identify you may be kept to balance the Game.

Limited financial records

We keep a restricted financial archive only for accounting and tax needs, payment reconciliation, refunds and payment disputes. It is limited to necessary transaction or order references, dates, items, amounts and currencies, taxes and fees, payouts and refunds, and supporting accounting records. Any personal information in those records is limited to what is necessary for those purposes. This exception does not retain your player profile, friend connections, decks, progress or gameplay telemetry, and the archive is not used to restore an account or purchased entitlements.

Our financial-records retention policy is seven years from April 15 of the calendar year following account deletion. For example, if your account is deleted in November 2027, the retention period starts on April 15, 2028 and ends on April 15, 2035. Access is restricted to people who need the records for the purposes above. We delete the records when that period ends, except as described below.

Only records needed for a specific legal hold or a law requiring longer retention are kept beyond that period. We restrict those records to that purpose and delete them when that requirement ends.

Deleting your account

To request deletion, email support@kingdomofbadideas.com from the address you sign in with, with the subject "Delete my account". Read the account-deletion instructions before making your request.

Deletion timing and confirmation

We verify your request before deleting the account and tell you the expected timescale when we respond. We confirm by email once deletion is complete. Our confirmation explains any limited financial-record or legal-retention exception that applies.

Some copies expire on a schedule instead of being deleted on request. Crash reports held by Sentry are deleted automatically within 90 days of being sent. Backups of our systems are replaced as they age, and we never restore a deleted account from a backup.

Your choices and rights

You can ask to see, correct, export or delete the personal information we hold about you by writing to support@kingdomofbadideas.com. Depending on where you live (for example in the EU, the UK or California), you may have further rights under local law, and we will honor them.

Children

The Game is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us information, contact us and we will delete it.

Security

We protect your information with encryption in transit, restricted access and hashed sign-in credentials. No system is perfectly secure, but we work to keep yours safe.

International players

We operate from the United States, and your information may be processed there or wherever our service providers operate.

Changes

If we change this policy, we will update the date above. If a change is significant, we will also tell you in the Game.

Contact

Context Aware LLC
support@kingdomofbadideas.com