Privacy Policy

In short

KRILLION is a guessing game. One game a day needs nothing from you. Beyond that you need an account, and the account is just an email address.

The site sells no data, builds no advertising profile of its own, and does not follow anyone from site to site for its own purposes.

• Without an account: a one-way fingerprint of your IP address counts your games for the day. The address itself is never stored.
• With an account: your email address, and a summary of the games you finish.
• Purchase: payment goes entirely through Stripe. No card data passes through KRILLION.
• Your games, statistics and settings stay in your browser until you create an account.

Who is responsible

The data controller is the publisher of krillion.to, identified on the Contact page.

For any question about your data, write to [email protected]. That address is read, and it is also how you exercise your rights.

When you play without an account

Starting a game sends a request to our server, and that request carries your IP address, as every web request does.

The server does not keep it. It computes a one-way fingerprint (HMAC-SHA256, with a secret key that never leaves the server) and stores only that fingerprint, together with today's date and the number of games started. The fingerprint cannot be turned back into the original address and is linked to no account, no name and no email address.

What it is for: enforcing the limit of one free game a day without an account, and stopping the same visitor from cycling past that limit.

Legal basis: our legitimate interest in offering a free trial without letting automation drain it. No profiling is done from this fingerprint.

What stays in your browser

Until you have an account, your games never reach our servers. They are written to your browser's local storage, on your device.

• Only you can read these entries. No third party has access and nothing is sent anywhere.
• You can erase them at any time by clearing the site's data in your browser.
• The Backup page lets you export and restore them, with no account and without going through our servers.

When you create an account

There are two ways in: a sign-in link sent by email, or the Google button. No password is ever created or stored.

• Email link: we process your email address, held by our authentication provider Supabase.
• Google sign-in: Google sends us your email address and, when your Google account has them, your display name and the address of your profile picture. We ask for nothing else and reach no other part of your Google account.
• Session: session cookies set by Supabase, with names starting sb-, keep you signed in. They are required for an account to work at all.
• History: when a game ends, a summary is stored server-side (mode, game number, score, depth reached, finish time). The twenty most recent are the ones shown to you.
• Quota: a per-account, per-day counter, of the same kind as the anonymous one.

The special case of the sign-in link

A link received by email is very often opened on a different device from the one that asked for it. So the verification token is parked on our server until the link claims it.

That record holds a one-way fingerprint of your email address, a one-way fingerprint of your IP address (never the values themselves), the technical token and an expiry time. It lasts one hour at most, can be used once, and is deleted automatically.

The fingerprints also limit how many links can be requested per hour, for one address and from one network, so nobody can use the site to flood a mailbox.

The email itself is delivered by Resend, our sending provider, from infrastructure located in the European Union. It contains only the sign-in link and is never used to send you advertising.

When you buy lifetime access

Lifetime access costs 3.50 EUR, paid once. Payment is handled by Stripe, in a form supplied and served by Stripe.

Your card number, expiry date and security code never pass through KRILLION and are never visible to us.

We send Stripe your email address and an internal account identifier, so the payment attaches to the right access.

After payment we keep, on our side, the Stripe identifiers of the checkout session, the payment and the customer, plus the amount, currency and date. No card data is kept.

Legal basis: performance of the contract you enter into by buying, then our accounting obligations for keeping records.

Advertising and third-party cookies

KRILLION has applied to the Google AdSense programme and is preparing to display ads. Until the application is approved, no ad unit is placed on the site, so you will not see advertising yet.

What follows applies from the first ad served. It is written here so you can read it beforehand rather than afterwards.

In the European Economic Area, the United Kingdom and Switzerland, no personalised ad is served without your prior consent. That consent is collected by a Google-certified consent management platform, and you can withdraw it at any time. The Cookies page has the detail.

Google acts here as an independent controller: its own rules apply alongside ours, and you can read them on its privacy and terms pages.

• Google, as a third-party vendor, uses cookies to serve ads on this site.
• Google's use of advertising cookies enables it and its partners to serve ads based on your visit to this site and other sites on the internet.
• You may opt out of personalised advertising in Google Ads Settings.
• You may also opt out of many other vendors' cookies at www.aboutads.info/choices or www.youronlinechoices.com.
• Legal basis: your consent, freely given or refused, and withdrawable.

Who else receives this data

KRILLION neither sells nor rents data. The only third-party recipients are the providers the site cannot run without.

Transfers outside the European Union

The server running the game is hosted in France, at OVH. The database and authentication are hosted in the European Union by Supabase, and sign-in emails leave from Resend infrastructure located in the European Union.

Stripe, Cloudflare and Google, by contrast, are companies established in the United States, so part of the processing happens outside the European Union.

Those transfers rely on the EU-US Data Privacy Framework, which these companies have joined, and where relevant on the European Commission's standard contractual clauses.

How long this data is kept

Your rights

The General Data Protection Regulation gives you rights over data about you.

• Access: obtain a copy of the data we hold about you.
• Rectification: have inaccurate data corrected.
• Erasure: have your account and everything attached to it deleted.
• Portability: receive your data in a machine-readable format.
• Objection: object to processing based on our legitimate interest.
• Restriction: ask for processing to be frozen while a dispute is resolved.
• Withdrawal of consent: change your mind about advertising consent at any time, without affecting what was done before.

In practice

Write to [email protected], from your account address or naming the address concerned. We answer within one month.

Account deletion: the game has no dedicated button yet. A request to that address is enough. Deleting the account also erases, automatically, the game history, the counters attached to the account and the access right that goes with it.

Advertising consent is withdrawn directly on the site, through the cookie settings link, with no need to write to us.

If our answer does not satisfy you, you may complain to your national data protection authority. In France that is the CNIL: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

Age of players

KRILLION is not aimed at children, is not directed to them and does not try to attract them. We do not knowingly collect data about people under fifteen, and no personalised advertising is directed at them.

If you believe a child has sent us data, write to [email protected] and it will be deleted.

Security

The site is served over HTTPS only, any plain request is redirected, and browsers are told never to call it any other way for a year.

IP addresses and email addresses used to count games and limit sending are stored only as one-way fingerprints, computed with a key that stays on the server.

The tables holding your data are reachable by no browser client: only the server reaches them, through dedicated functions that check on every call who owns the row being asked for.

• The site refuses to be displayed in a frame on another site, which closes a classic click-hijacking route.
• The content type the server announces cannot be reinterpreted by the browser.
• The referring address is only passed to third-party sites in reduced form.
• Camera, microphone and location access are denied for the whole page.

Changes to this page

The last revision date is shown at the top of this page. If a change affects what we collect, why, or who receives it, it will be announced on the site rather than slipped quietly into the text.