Privacy Policy

Effective 16 January 2025 · Last updated 2 August 2026

Kraylet is a satirical gacha game. No real money is involved anywhere in it. This page explains what the game collects, what its online features send to our servers, and how to get rid of all of it. The same policy is readable in-game under Settings.

1. What the game collects

Gameplay analytics (anonymous)

Battle, economy and progression statistics
Session data: playtime, session count, crashes
Platform, device type, screen resolution, OS version
An anonymous player ID: your player name hashed with SHA-256 and a salt, which we cannot reverse

Analytics are optional. Decline at first launch, or revoke consent later in Settings, and none of it is collected. The game plays exactly the same either way.

2. Online features — what leaves your device

Section 1 is analytics. This is different: when you use an online feature, data is sent to our servers so another player's game can see it. That is the point of the feature. Every one of them is keyed to your Seeker ID.

Your Seeker ID

A random identifier generated on your device the first time you play
Your 8-character Seeker code and your chosen Seeker name travel with it
It is not your email, your real name, or your device

Defence teams (ghosts)

A snapshot of the team you set to defend: species, levels, stats, nicknames, equipped relics and K-Cores, and its rating
Other Seekers fight this snapshot while you are offline — that is what a ghost is for. Setting a new defence team replaces it

Presence and live duels

While the game is open it tells the server you are online, so friends can see you and send a duel request. This stops when you close the game
Accepting a live duel sends your current party and the moves both sides make

Trading and the Exchange

Offers you send or receive and what is in them
A list of which Kraylets you own, so the server can refuse an offer for something you do not have
Your mailbox of unclaimed deliveries

Syndicates

Which syndicates you belong to and your rank in them
Messages you send in a syndicate's chat, visible to its members
Syndicate war results: your Seeker name, the syndicate you fought, and whether you won. This is deliberately visible to your whole syndicate

Rankings

Your arena rating and your syndicate's war points appear on leaderboards other players can read, next to your Seeker name

Bug reports and moderation

A bug report sends what you typed, the game version, and the screen you were on — only when you send one
If you report a player or a name, we keep the report so we can act on it

You can play the entire game offline. Skip the online features and none of the above is sent.

3. What we never collect

Email addresses or phone numbers
Payment information (handled by Steam or the app stores)
Location or GPS data
Contacts, photos or other personal files
Voice recordings
Your real name

Syndicate chat is a message system, so those messages are stored — see Section 2. There is no other free-text messaging in the game.

4. How your data is used

To run the online features described above, and to improve balance, fix crashes, and understand engagement. It is never sold, never used for advertising, and never used to identify you personally.

5. Storage, security and retention

Local analytics files are encrypted with AES-256; player IDs are salted SHA-256 hashes; everything sent to a server travels over HTTPS
Online features and mobile analytics are stored on Google Cloud (Firebase). Steam builds also use the Steamworks Stats API
Analytics are kept 365 days, then deleted automatically
Online data is kept while your Seeker ID is active: your ghost until you replace it, trades until claimed or expired, syndicate messages and war logs until they roll off the recent list

6. Your rights

Access — export everything we hold as a JSON file, in-game
Erasure — delete all of it: analytics, your ghost, your standing trades, your leaderboard entries, your syndicate membership. This cannot be undone. Two things survive by necessity: a completed trade another Seeker already claimed is theirs to keep, and war-log lines naming your syndicate remain in that syndicate's shared record
Portability — the export is machine-readable JSON
Withdraw consent — revoke analytics at any time in Settings

7. Third-party services

Firebase (Google) — every online feature above, plus mobile analytics. Privacy policy
Steamworks (Valve) — PC analytics and achievements. Privacy policy
Unity — crash reporting. Privacy policy

8. Children

Kraylet is rated 13+. We do not knowingly collect data from children under 13. If you are a parent and believe your child has provided data to us, contact us and we will delete it.

9. Changes

We may update this policy. Changes are posted here and in-game with a new "last updated" date.

10. Contact

Questions, deletion requests or export requests: privacy@krayletgame.com. Deletion and export are also available as buttons in-game under Settings › Privacy Policy.