Privacy Policy

Effective Date: March 3, 2025

This Privacy Policy explains how Kamioza ("we," "us," or "our") collects, uses, stores, and protects your information when you use the Kamioza website, game client, and related services. By using our services, you agree to the practices described here.

1. Information We Collect

Account Information

When you create an account or sign in, we collect:

Email address (used for authentication and communication)
Player name / display name
Account ID (automatically generated)

Payment Information

When you make a purchase, payment processing is handled entirely by Stripe. We do not store your credit card number or full payment details. We retain:

Stripe customer ID (to associate purchases with your account)
Purchase history and credit balance

Device and Pairing Information

When you pair a game device with your web account, we collect:

Device-generated public key (used for purchase verification)
Device pairing status

Gameplay Information

During multiplayer gameplay, the following is shared among participants:

Public IP address (temporarily, to enable peer-to-peer connectivity)
Game state and player actions (to synchronize gameplay)
Text and voice messages sent during sessions

2. How We Use Your Information

We use the information we collect to:

Authenticate your identity and manage your account
Process purchases and maintain your credit balance
Issue cryptographically signed certificates for in-game item transfers
Pair your game device with your web account
Enable multiplayer connectivity and real-time game sessions
Send transactional emails (sign-in links, pairing confirmations)

3. Authentication

We use a passwordless, magic-link authentication system. When you sign in, a one-time link is sent to your email address. We do not store passwords. Session tokens are used to keep you signed in and are managed securely on our servers.

4. Data Storage

Server-Side

Account data, purchase records, and device pairing information are stored in Google Firebase Firestore, a secure cloud database. Data is retained as long as your account is active.

On-Device

Game state data and transaction logs are stored locally on all participating devices during gameplay. Each transaction is digitally signed with a unique public/private key pair generated on your device, ensuring all activity is traceable and tamper-proof. This data is retained while the game is installed and can be removed by uninstalling the app.

5. Security and Data Integrity

We use ECDSA P-256 digital signatures to secure item transfer certificates and verify transactions. The server signs certificates that can be independently verified by the game client using the server's public key, enabling offline verification and preventing forgery or replay attacks. All communication between your browser and our servers is encrypted via HTTPS.

6. Third-Party Services

We use the following third-party services to operate Kamioza:

Stripe — for payment processing. Stripe's privacy policy governs how they handle your payment data.
Google Firebase — for secure data storage and account management.
Resend — for sending transactional emails (sign-in links, pairing verifications).

No third parties have access to your gameplay data. All game-related information is transmitted solely among game participants and stored on their devices.

7. Cookies and Local Storage

We use session cookies to maintain your authentication state while signed in. We do not use tracking cookies or third-party advertising cookies.

8. Data Retention and Deletion

Your account data is retained as long as your account remains active. On-device game data is retained while the app is installed and is deleted upon uninstallation. To request deletion of your server-side account data, please contact us at the email address below.

9. Children's Privacy

Kamioza is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete it promptly.

10. Changes to This Privacy Policy

We may update this policy from time to time. When changes are made, we will update the effective date at the top of this page. Your continued use of Kamioza following any changes indicates your acceptance of the updated policy.