Privacy policy

What this covers

This policy describes how Kosh Games handles personal data on this website and in games we publish. It is written in plain language on purpose. It is a design prototype placeholder and will be reviewed by a lawyer before launch.

What we collect

On this website: limited usage statistics, described in the Website analytics section below. No advertising trackers or cross-site identifiers.

In our games: an account identifier if you sign in with Google or Apple, your saved progress, and basic technical diagnostics such as device model and crash reports.

Why we hold it

Website statistics help us understand which pages are useful and how people find the studio. Game and support data helps us restore progress, fix crashes, and answer the messages you send us.

What we do not do

We do not sell personal data. We do not share it with advertising networks. We do not use it to build behavioural profiles.

How long we keep it

Save data is kept while your account exists. Diagnostics are kept for a limited window and then discarded. If you ask us to delete your data, we remove it and confirm by email.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete it. Deletion is also available directly through the delete-my-data page.

Website analytics

We use Umami, hosted on our own infrastructure, to understand which pages people visit and how they find Kosh Games. It records page views, referring sites, campaign labels, browser and device information, and approximate location derived from the incoming connection. We also count clicks from the homepage to Potion Grimoire.

We do not set analytics cookies, use advertising IDs, identify game accounts, or record your screen, keystrokes or form entries. Umami uses the incoming IP address to derive a short-lived visitor identifier; the IP address itself is not stored in its analytics database. That identifier changes daily. These are usage statistics, not a way to identify individual players.

Only published public pages are tracked. CMS previews and data-deletion pages are excluded. We remove URL fragments and all query parameters except short campaign labels. Referrals from other websites include only the site's origin, not the page or its query string. We honour the browser's Do Not Track and Global Privacy Control signals.

Access is limited to the studio team. Usage records are removed after 180 days; private database backups expire after 28 days, so removed records may remain in a backup for that additional period. This website analytics setup is separate from data handled by our games.