Privacy Policy
Last updated: October 22, 2026
Kabolto is a game made by Tarvo ("we", "us"). This policy explains what data the game, the website (kabolto.com) and the game servers collect, why, and what you can do about it. Questions: hello@kabolto.com.
What we collect
- Account: the nickname you choose and a random tag. You can play without an account (offline). If you choose to save your account, we store your email address — typed by you or shared by Google when you use "Continue with Google" (we receive only your name, email and a Google account id; never your password).
- Game data: your runs (robot, wave reached, kills, time, weapons), achievements, progress, cosmetics, leaderboard positions and a recovery code (stored only as a one-way hash).
- Purchases: payments are processed by Stripe. We receive what you bought, the amount, currency and payment status; we never see or store your card number. Stripe's privacy policy applies to payment data.
- Waitlist and campaign: if you join the waitlist or back the campaign, we store your email and, if you give it, the name for the credits.
- Technical and marketing data: IP address, device and browser information, pages visited, and the campaign that brought you (UTM parameters, stored in a cookie). We use advertising and analytics tools (Meta Pixel and Conversions API, TikTok Pixel and Events API, Google Analytics) to measure which videos and ads bring players. Emails sent to these partners are hashed.
Why we use it
- To run the game: accounts, saving progress across devices, leaderboards, daily challenges, online modes and anti-cheat checks.
- To deliver what you bought and handle refunds.
- To send the sign-in codes and messages you asked for (for example, waitlist emails).
- To understand what works in our marketing and improve the game.
What others can see
Your nickname, tag, robot and scores appear on public leaderboards. Your email is never shown to other players.
Sharing
We don't sell your data. We share it only with the services that run Kabolto: hosting (Hetzner, Cloudflare), payments (Stripe), email delivery (Resend), sign-in (Google) and the analytics/advertising partners listed above.
Cookies and opting out
The site and game use cookies and local storage to keep you signed in, save settings and runs, and remember which campaign brought you. You can opt out of tracking in the cookie notice ("Opt out"); after that, the advertising and analytics tags stop for your browser.
Keeping and deleting your data
We keep your account while it exists. To delete your account and its data, or to get a copy, email hello@kabolto.com from the email linked to the account (or include your nickname and tag). We delete it within 30 days, except records we must keep by law (for example, payment records).
Children
Kabolto is not directed to children under 13, and we don't knowingly collect their data.
Changes
If this policy changes, we'll update the date above and, for important changes, tell you in the game or by email.