Privacy Policy
Kraken's Crew (in Slovak "Cez palubu!") – a party game for iOS and Android.
Effective from 6 October 2026.
In short
- No accounts, no ads, no tracking across other apps or websites.
- When you play on one phone, everything stays on that phone. The game does not talk to our servers at all.
- When everyone plays on their own phone, our server holds the players' names, pirates and the game only while the table exists. It is deleted when the host closes the table, at the latest after 6 hours without activity. Your photo goes there only as a small thumbnail and only if you choose "Use photo". On the voyage picture that can be shared after a game, your photo appears only if you turn that on yourself.
- If you write us a question, we keep only its text, anonymously, for up to 180 days.
- Anonymous statistics are sent only if you say yes, and you can turn them off at any time.
- The app never uses the microphone.
1. Who is responsible
The controller of personal data is Martin Mucha, Košice, Slovakia, company ID 57 799 032 ("we").
Contact for anything about privacy: mucha.muca@gmail.com.
2. What stays on your device
The game has no accounts and no sign-in. The following is stored only in the app's own storage on your phone or tablet and is never sent to us in a one-phone game:
- settings (sound, volumes, the Captain's voice mode, language, which hints you have already seen),
- the names and pirates of your last crew and the game in progress, so it can be resumed,
- photos of players, if you add them (cropped and reduced to a small picture; the original photo in your library is not changed),
- your table profile (name, favourite pirate, optional photo, your answer to the question about showing your photo, and the switch that allows it on the picture for sharing),
- for a table you created or joined: its code and a random token that lets your phone return to its seat after a lost connection,
- a random code of this installation, created only when you first send a question through "Write to us",
- your answer to the question about anonymous statistics.
You can remove a player or a photo in the app at any time. Uninstalling the app deletes everything listed above.
3. Tables where everyone plays on their own phone
This mode needs the internet. When a host creates a table and others join it with a QR code or a short code, the phones talk to our table server over an encrypted connection (TLS).
What the server holds for a table
- the name each player typed (a first name or nickname is enough – please do not use full names),
- the pirate each player picked,
- random tokens that tie each phone to its seat,
- the state of the game (roles, routes, votes, the Ship's Log),
- only if you chose "Use photo": a small thumbnail of your photo (128 × 128 pixels, at most 16 kB). The full photo never leaves your phone. Before a photo is sent for the first time, the app asks you; "Use pirate only" sends nothing. A yes/no value saying whether you allowed the photo on the picture for sharing travels with the thumbnail.
Who sees it. Only the people at that table. A table can be joined only with its code, and after the game starts nobody new can take a seat. The host can hide any photo and remove a player from the table.
Picture for sharing. After a game, players at the table can create a picture of the voyage (the map, names, roles and crew titles) and send it on, for example in a message. Your photo is on it only if you turned on the switch "Photo can also be on the share image". The switch is off until you turn it on, and it applies to that one photo only; without it the picture shows a drawn pirate. The picture is created on the phone and is not sent to our servers. We cannot control who a player sends it to, and a picture that has been sent cannot be taken back – turning the switch off applies to pictures created afterwards.
How long. Everything about a table – names, game and photos – is deleted from the server when the host closes the table, and automatically after 6 hours without activity at the latest. A photo thumbnail is also deleted as soon as you leave the table or remove your photo. We keep no copies and no backups of tables.
Logs. Our server logs contain only technical event codes and counts (for example "table created", "game finished"). They never contain names, photos, table codes, tokens or IP addresses.
4. Protection against abuse
To stop automated abuse, the servers limit how many tables, joining attempts, photo uploads and questions can come from one network. For this we use your IP address only in passing: it is immediately turned into a salted one-way hash (HMAC-SHA-256 with a secret key), which works as a counter. The IP address itself is not stored and not written to logs. The counters delete themselves when their time window ends – after at most 1 hour on the table server and at most 24 hours on the question server.
Like every internet service, our hosting provider necessarily processes IP addresses to deliver the connection.
5. "Write to us" in Ask the Captain
If you do not find an answer in Ask the Captain, you can send us your question. This happens only when you type it and tap Send.
- What is sent: the text of your question (10–300 characters), the app language, the app version and the random code of this installation.
- What we keep: only the text of the question, its language, how many times the same question arrived, and the dates of its first and last arrival. Names we do not recognise as game terms are replaced by a placeholder. Questions that contain contact details, links, insults or instructions are not stored at all.
- What we do not keep: who sent it. The random installation code is used only to limit the number of questions per hour and is not saved with the question; neither is your IP address (see section 4).
- How long: a question is deleted automatically 180 days after it last arrived.
- Why: so we can add missing answers to the game. No AI service receives your question, and we do not pass questions to anyone else.
Please do not put personal information into a question.
If the app offers sending the question by e-mail instead, your e-mail app sends it to us like any other e-mail. We then see your e-mail address and use it only to answer you; we keep such messages only as long as needed to deal with them.
6. Anonymous statistics (optional)
After a finished game the app may ask "Help the captain improve the game?". Nothing is sent unless you answer Yes. Before you consent, the analytics library is not even loaded and nothing is collected "for later".
If you agree, the app sends these events to our analytics project at PostHog, hosted in the European Union:
| Event | What it contains |
|---|---|
| App opened | app language, voice mode |
| Game set up | one phone or own phones, number of players, version of the rules, practice game or not |
| Game finished | number of players, how it ended and which side won, duration in minutes, number of rounds, rejections, how many times the monster moved closer after three rejections (monster moves), version of the rules |
| Practice voyage finished | number of players |
| Ask the Captain | that it was opened, which topic and which prepared question was tapped; for "Write to us" only that a question was sent – never its text |
| Rules read aloud | which page |
| Setting changed | which setting and its new value (for example language, sound on or off, volume in steps of 25 %) |
| Table created, joined, started | only the numbers of players and phones |
| Ship's store (once it exists) | that the store was viewed, which pack, and the result of a purchase or restore |
Every event also carries the app version, the platform (iOS or Android) and a random identifier created by the analytics library.
Never sent: names, photos, anything you type, secret parts of the game (who had which role or card), the model of your device, your location, an advertising identifier. Location lookup from the IP address is switched off, the IP address is not kept with the events, and no personal profiles are created. There is no screen recording and no automatic capture of taps.
Turning it off: Rules → Privacy & licences → Privacy → switch "Anonymous statistics". Turning it off discards the random identifier; if you turn statistics on again later, a new one is created. Events are kept for at most 12 months.
7. Camera, photos and microphone
- Camera is used only when you take your picture for your pirate or scan a table's QR code. The app asks for permission at that moment. The picture from the scanner is not saved or sent anywhere – the app only reads the table code from it.
- Photo library: if you pick a photo, the system picker hands the app only the photo you selected. The app has no access to the rest of your library.
- Microphone: the app from the stores does not use it and does not ask for this permission. In the browser it is used only for the optional voice call at a remote table (section 8).
- The app does not use your location, contacts, calendar or advertising identifier.
8. Playing in the browser and the voice call at a remote table
Playing in the browser (play.krakenscrew.com). The web version stores data only in your browser (localStorage): the game in progress, settings, your profile (name, pirate and, if you add one, a photo), the data needed to return to a table, and your last choice of how to play. It uses no cookies. This data does not leave your device, except for what you choose to send to a table (name, pirate, and a photo with your consent). You can delete it by clearing the site data in your browser. On the web the camera is not used; you pick a photo from a file. The pages are delivered by Cloudflare, which technically processes your IP address while doing so.
Voice call at a remote table (browser only). The call is optional. Your microphone is turned on only after you tap the microphone button and allow it in your browser; you can mute it or leave the call at any time. Audio travels directly between the browsers of the players at the same table. It does not pass through our servers, and we do not record or store it. When a call is being set up, our server only passes technical connection details between players and does not store them. Because the connection is direct, the devices of other players at the table may see your IP address. A public STUN server operated by Cloudflare is used to discover your connection address and sees your IP address while doing so.
9. Purchases
The game is free and currently sells nothing. If paid expansions are added later, payments will be handled by the Apple App Store or Google Play under their own terms and privacy policies; we never see your card or billing details. To check what has been bought, we would use the service RevenueCat, which receives a random anonymous identifier and the history of purchases of this game, not your name or e-mail. This policy will be updated before the first paid item appears.
10. Who processes data for us
We do not sell data and do not share it for advertising. We use these service providers (processors), who act only on our instructions:
- Cloudflare, Inc. – runs the table server and the question server (Cloudflare Workers, Durable Objects, KV).
- PostHog (EU cloud, hosted in Germany) – anonymous statistics, only with your consent.
- RevenueCat, Inc. – verification of purchases, only once purchases exist.
Cloudflare operates a worldwide network, and RevenueCat is based in the United States, so data may be processed outside the European Economic Area. Such transfers rely on the EU–US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
11. Why we may process this data (legal bases under the GDPR)
- Table play (names, pirates, game state): to provide the function you asked for – Art. 6(1)(b) GDPR.
- Your photo at a table, your photo on the picture for sharing, the voice call at a remote table and anonymous statistics: your consent – Art. 6(1)(a) GDPR. You can withdraw it at any time ("Use pirate only" or removing the photo; the switch for the photo on the picture; the statistics switch).
- Protection against abuse and improving the answers from sent questions: our legitimate interest in a safe and working service – Art. 6(1)(f) GDPR.
- Purchases (in the future): performance of the contract and legal obligations.
12. How long we keep data
| Data | Where | How long |
|---|---|---|
| Settings, crew, photos, saved game, profile | your device only | until you delete them or uninstall the app |
| Names, pirates, game state of a table | table server | until the table is closed, at most 6 hours after the last activity |
| Photo thumbnail at a table | table server | until you leave, remove the photo or the table is closed, at most 6 hours after the last activity |
| Salted hash of the IP address (counter) | table server / question server | at most 1 hour / at most 24 hours |
| Question sent through "Write to us" | question server | 180 days after it last arrived |
| Anonymous statistics | PostHog (EU) | at most 12 months |
13. Children
The game is not directed at children under 13, and we do not knowingly collect personal data from them. In the European Economic Area, if you are younger than 16 (or the lower age set by your country, but not below 13), please ask a parent or guardian before you show your photo at a table, allow it on the picture for sharing or turn on statistics. If you believe a child has sent us personal data, write to us and we will delete it.
14. Your rights
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting what was done before.
Because the game has no accounts, we usually cannot tell which data relates to you: tables are temporary and are deleted within hours, questions are stored without the sender, and statistics carry only a random identifier. If you want us to act on a specific record, we may need extra information from you to find it (Art. 11 GDPR). Most things you can do directly: closing or leaving a table deletes its data, and turning off statistics stops them.
You also have the right to lodge a complaint with a supervisory authority – in Slovakia the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR, dataprotection.gov.sk), or the authority in your country.
15. Security
All communication with our servers is encrypted in transit (HTTPS / TLS). Access to the stored questions is protected by a secret key known only to us. Photos at a table can be fetched only by someone who knows the table code and an unguessable fingerprint of the photo.
16. Changes
When the game starts doing something new with data, we will update this policy before the change reaches you, and change the date at the top.
17. Contact
Martin Mucha, Košice, Slovakia, company ID 57 799 032
E-mail: mucha.muca@gmail.com