Privacy at Kutuverse
What the site knows about you, what it cannot know, and the one thing peer-to-peer play makes less private.
Kutuverse is a website where people play board and card games together. It has no accounts, no advertising, no analytics and no tracking cookies, and the games themselves run directly between the players' own browsers rather than through a server we operate. This page says what that does and does not mean, in the order it actually matters.
Who is responsible
Kutuverse is run by one person in Türkiye. Questions about anything on this page, and any request about your own data, go to privacy@kutuverse.com. You will be answered by the same person who writes the code.
What never leaves your device
Almost everything the site remembers about you is kept in your own browser, in localStorage, and is never sent anywhere. That includes:
- the name you type in the lobby, and the colour and seat you last used
- your language, theme, text size, colour-blind aids, animation, sound and narrator settings
- each game's setup options, and whether you have seen its walkthrough
- a random identifier for your browser, so that if your connection drops mid-game you get your own seat back rather than somebody else's
- a game in progress, if you are the host, so that reloading the page does not end it
- your supporter code and cosmetic choices, if you have them
None of this is an account. Clearing your browser's site data for kutuverse.com erases all of it, and nothing of you remains here afterwards.
What the other players can see
This is the one place where playing peer-to-peer gives you less privacy than an ordinary website, and you should know it before you invite strangers.
A direct connection between two browsers requires each to know where the other is. That means the people at your table can, with technical effort, discover your IP address — roughly, the part of the world you are connecting from and who your internet provider is. This is true of every peer-to-peer application, it is not something we add or could remove, and no amount of our not collecting data changes it. Play with people you are happy to be connected to.
The connection broker
To introduce two browsers to each other, the site uses the public PeerJS broker. It sees the random room identifier and the network addresses needed to make the introduction. It does not see the game, the chat, or anything else: once the two browsers are talking, everything goes directly between them.
Your table's chat, your cards and the state of the game are never sent to us and are never stored by us. We could not show you a transcript of your own game if you asked.
When you send feedback
If you use the Feedback button, what you write is sent to us and stored, because otherwise we could not read it. Each note keeps:
- what you wrote, and a contact address if you chose to give one
- which game you were on, your language and the build number, so a bug can be reproduced
- your browser's user-agent string and window size, for the same reason
- the country your request came from, as Cloudflare reports it
- a keyed hash of your IP address — not the address itself, and not reversible — which is how the same sender can be rate-limited or blocked without us knowing who they are
A copy is emailed to the person who runs the site. Notes are kept until they have been dealt with and are then deleted; if you want yours removed sooner, ask at privacy@kutuverse.com and quote enough of it to find it. Please do not put anything sensitive in a bug report — it is a message to a person, not a secure channel.
If you support the project
Payments are handled entirely by Kreosus. We never see your card, and we do not take or store payment details.
To turn a payment into a supporter code, our server asks Kreosus for the list of current supporters, which includes names and email addresses. We do not keep that list. The code we give you contains no personal information: the only trace of an address is a one-way hash, which lets the code be renewed when the subscription renews and cannot be turned back into the address.
A supporter code lives in your browser like everything else. Losing it loses the cosmetics, not the payment — Kreosus still has the record.
Hosting, and what a server necessarily sees
The site is served by Cloudflare. Like every web server on earth, it records requests — time, address requested, IP address, user agent — in order to serve them and to keep the site up under abuse. Those logs are Cloudflare's, kept briefly, and are not joined to anything else. We do not run analytics over them.
Two libraries, PeerJS and a QR-code generator, load from Cloudflare's public CDN, which means it sees the request for them.
Children
The site is suitable for children and has no accounts to create, but it does have live chat and voice between whoever is at the table. If a young person is playing, play with people you know. We cannot see, moderate, or intervene in a table's conversation, because it never reaches us.
Your rights
If you are in the European Union or the United Kingdom, the GDPR gives you the right to ask what personal data we hold about you, to have it corrected or erased, to object to its processing, and to complain to your data protection authority. If you are in Türkiye, KVKK Article 11 gives you equivalent rights.
In practice the honest answer is usually that we hold nothing: unless you have sent us feedback, there is nothing here with your name on it. Where we do hold something — a feedback note — the lawful basis is our legitimate interest in fixing the thing you told us about, and we will delete it on request. Write to privacy@kutuverse.com.
Changes
If what the site does changes, this page changes with it in the same release, and the date below changes too. There is no mailing list to notify, because there is no list.