Privacy Policy

Effective 16 January 2025 · Last updated 2 August 2026

Kraylet is a satirical gacha game. No real money is involved anywhere in it. This page explains what the game collects, what its online features send to our servers, and how to get rid of all of it. The same policy is readable in-game under Settings.

1. What the game collects

Gameplay analytics (anonymous)

  • Battle, economy and progression statistics
  • Session data: playtime, session count, crashes
  • Platform, device type, screen resolution, OS version
  • An anonymous player ID: your player name hashed with SHA-256 and a salt, which we cannot reverse

Analytics are optional. Decline at first launch, or revoke consent later in Settings, and none of it is collected. The game plays exactly the same either way.

2. Online features — what leaves your device

Section 1 is analytics. This is different: when you use an online feature, data is sent to our servers so another player's game can see it. That is the point of the feature. Every one of them is keyed to your Seeker ID.

Your Seeker ID

  • A random identifier generated on your device the first time you play
  • Your 8-character Seeker code and your chosen Seeker name travel with it
  • It is not your email, your real name, or your device

Defence teams (ghosts)

  • A snapshot of the team you set to defend: species, levels, stats, nicknames, equipped relics and K-Cores, and its rating
  • Other Seekers fight this snapshot while you are offline — that is what a ghost is for. Setting a new defence team replaces it

Presence and live duels

  • While the game is open it tells the server you are online, so friends can see you and send a duel request. This stops when you close the game
  • Accepting a live duel sends your current party and the moves both sides make

Trading and the Exchange

  • Offers you send or receive and what is in them
  • A list of which Kraylets you own, so the server can refuse an offer for something you do not have
  • Your mailbox of unclaimed deliveries

Syndicates

  • Which syndicates you belong to and your rank in them
  • Messages you send in a syndicate's chat, visible to its members
  • Syndicate war results: your Seeker name, the syndicate you fought, and whether you won. This is deliberately visible to your whole syndicate

Rankings

  • Your arena rating and your syndicate's war points appear on leaderboards other players can read, next to your Seeker name

Bug reports and moderation

  • A bug report sends what you typed, the game version, and the screen you were on — only when you send one
  • If you report a player or a name, we keep the report so we can act on it

You can play the entire game offline. Skip the online features and none of the above is sent.

3. What we never collect

  • Email addresses or phone numbers
  • Payment information (handled by Steam or the app stores)
  • Location or GPS data
  • Contacts, photos or other personal files
  • Voice recordings
  • Your real name

Syndicate chat is a message system, so those messages are stored — see Section 2. There is no other free-text messaging in the game.

4. How your data is used

To run the online features described above, and to improve balance, fix crashes, and understand engagement. It is never sold, never used for advertising, and never used to identify you personally.

5. Storage, security and retention

  • Local analytics files are encrypted with AES-256; player IDs are salted SHA-256 hashes; everything sent to a server travels over HTTPS
  • Online features and mobile analytics are stored on Google Cloud (Firebase). Steam builds also use the Steamworks Stats API
  • Analytics are kept 365 days, then deleted automatically
  • Online data is kept while your Seeker ID is active: your ghost until you replace it, trades until claimed or expired, syndicate messages and war logs until they roll off the recent list

6. Your rights

  • Access — export everything we hold as a JSON file, in-game
  • Erasure — delete all of it: analytics, your ghost, your standing trades, your leaderboard entries, your syndicate membership. This cannot be undone. Two things survive by necessity: a completed trade another Seeker already claimed is theirs to keep, and war-log lines naming your syndicate remain in that syndicate's shared record
  • Portability — the export is machine-readable JSON
  • Withdraw consent — revoke analytics at any time in Settings

7. Third-party services

  • Firebase (Google) — every online feature above, plus mobile analytics. Privacy policy
  • Steamworks (Valve) — PC analytics and achievements. Privacy policy
  • Unity — crash reporting. Privacy policy

8. Children

Kraylet is rated 13+. We do not knowingly collect data from children under 13. If you are a parent and believe your child has provided data to us, contact us and we will delete it.

9. Changes

We may update this policy. Changes are posted here and in-game with a new "last updated" date.

10. Contact

Questions, deletion requests or export requests: privacy@krayletgame.com. Deletion and export are also available as buttons in-game under Settings › Privacy Policy.

KRAYLET · ARCHIVE_473