Privacy Policy
Last updated: 2026-08-09
This tool is run by and for the Kingdom 128 Kingshot community to manage alliances, rosters, and events. It isn't a commercial product — we don't sell your data, run ads, or share it with anyone outside the people who help run the kingdom (admins and your alliance's R4/R5).
WHAT WE COLLECT
- Account info — your email address and password (your password is hashed by our auth provider; we never see or store it in plain text).
- Discord (optional) — if you sign in with or link Discord, we store your Discord user ID and the email Discord gives us. When you first sign in with Discord, we check once whether you're a member of the Kingdom 128 Discord server using a temporary access token — we don't store that token or the rest of your Discord profile.
- Game data — your in-game name, Kingshot Player ID, kingdom, Town Center level, and stats (power, troops, VIP level, march/rally capacity, etc.) that you or your alliance's leadership enter.
- Activity log — for moderation and troubleshooting, a small number of admins can see a log of significant actions (profile/role/account changes, sign-up and verification attempts — including rejected ones — and errors the app showed you), each with a timestamp and, for verification attempts, the IP address the request came from.
WHY WE COLLECT IT
Purely to run the features you use: verifying you're a real Kingdom 128 player, showing rosters and stats to your alliance, coordinating rallies and KvK, and keeping the kingdom's membership list accurate. Verification attempts outside Kingdom 128 are rejected and that account is deleted automatically — we don't keep a database of outsiders.
WHO CAN SEE IT
- Your in-game stats and roster info are visible kingdom-wide to other logged-in members — that's the point of a roster tool.
- Your email is only visible to admins, your alliance's user managers, and (if it's about themselves) you.
- The activity log is restricted to a small, named set of super-admins — not the general admin role.
WHERE IT'S STORED
Everything is stored with Supabase, a third-party database/auth provider — we don't run our own servers for this data. We use their authentication cookies/local storage to keep you signed in; we don't use any advertising or analytics tracking cookies.
YOUR CHOICES
You can update or correct your own info any time from My Profile. If you want your account or data deleted entirely, see Contact Us for how to reach a kingdom admin.
KINGDOM 128 · PRIVACY POLICY