We take the protection of your personal data seriously. This Privacy Policy explains what data we collect, why, on what legal basis, and how it is used, in compliance with the EU General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and the German Federal Data Protection Act (BDSG).

1. Data Controller

2. Data We Collect and Why

a) Server / access logs (technical operation)

When you access our website, your browser automatically transmits technical data to our hosting provider, including your IP address (anonymised or abbreviated), the date and time of the request, the URL requested, your browser type and version, and your operating system. This data is processed solely to ensure the security and stability of the server and is automatically deleted within 7 days. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in operating a secure website.

b) Game state (local storage)

Your game progress and settings are stored exclusively in your browser's localStorage. This data never leaves your device and is not transmitted to our servers. Legal basis: Art. 6(1)(b) GDPR — necessary to provide the requested service.

3. Cookies and Consent

This website does not use any third-party advertising, analytics, or tracking services. The only client-side storage used for the game itself is your browser's localStorage, which holds your game progress and settings locally on your device. The full inventory of cookies and storage mechanisms used on this website is described in our Cookie Policy.

We use CCM19 (Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany) as our Consent Management Platform. CCM19 acts as a processor under Art. 28 GDPR and stores a single technical cookie (ccm_consent) to record your consent decision so that we can demonstrate compliance under Art. 7(1) GDPR if any future feature on this site requires consent. CCM19's privacy policy is available at ccm19.de/datenschutzerklaerung.html. You can review or change your decision at any time via the "Privacy settings" link served by CCM19.

4. Web fonts (self-hosted)

This website uses the typefaces Oswald and Crimson Pro, which are self-hosted on our own server. The font files are served directly from kukuruchi.com and are never loaded from Google Fonts or any other external CDN. Therefore, no IP address or other technical data is transmitted to Google or any third party when fonts are loaded.

5. Google Search Console

We use Google Search Console, a free web service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Search Console helps us monitor and maintain our website's presence in Google Search results. It does not place cookies on your device and does not process your personal data directly.

Google Search Console provides us with aggregated, anonymised reports about how our website appears in Google Search — including search queries, impressions, and click-through rates. These reports contain no information that can identify individual users. The data is collected and processed by Google on the basis of their own terms and privacy policy. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in monitoring and improving the discoverability of our website.

Google's privacy policy: policies.google.com/privacy.

6. Voluntary support payments via PayPal

We offer a "Support" button on the game page that links to our PayPal account, allowing visitors to send a voluntary tip to the developer. To be clear: Kukuruchi is operated commercially and is not a recognised charity (gemeinnützige Organisation) within the meaning of § 52 AO. Payments made via the Support button are voluntary contributions, not tax-deductible, and we do not issue tax receipts (Spendenbescheinigungen).

The Support button is implemented as a plain outbound hyperlink behind a confirmation prompt. No PayPal scripts, SDKs, tracking pixels, or third-party resources are loaded on kukuruchi.com. PayPal therefore receives no data about you while you are on our site. Personal data is only transmitted to PayPal after you actively click the Support button, confirm the redirect prompt, and are taken to PayPal's own platform.

If you choose to send a tip, the payment is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"), which acts as an independent data controller for the data it processes during the payment transaction. The data PayPal collects (which may include your name, e-mail address, billing address, payment method details, IP address, and transaction amount) is governed by PayPal's own privacy policy, available at paypal.com/de/legalhub/privacy-full.

Where we receive transaction confirmation data from PayPal (e.g. payer name and amount, for our accounting records), the legal basis for our processing is Art. 6(1)(b) GDPR — performance of the payment transaction you initiate by clicking "Support" — together with Art. 6(1)(c) GDPR for retention of records required under German tax and commercial law (§ 147 AO, § 257 HGB), which mandate retention of accounting records for up to 10 years.

7. Link to X (formerly Twitter)

This website displays a link to our official account on X (formerly Twitter), operated by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The link is implemented as a plain outbound hyperlink behind a confirmation popup. No X/Twitter scripts, widgets, tracking pixels, SDKs, or third-party resources are loaded on kukuruchi.com at any time.

When you click the X link, a confirmation popup informs you that you are leaving kukuruchi.com. Only after you actively confirm do you leave our site. X Corp. therefore receives no data about you — not even a referrer header — until you click "Continue" in the popup and are taken to X's own domain. From that point on, X Corp. acts as an independent data controller, and its own privacy policy applies: x.com/en/privacy.

No personal data is transmitted to X Corp. while you are browsing kukuruchi.com, and no consent under § 25 TDDDG or Art. 6 GDPR is required for the link itself, as no storage or processing takes place on our side before you actively choose to follow the link.

8. Data Retention

Server access logs are deleted within 7 days. Game state stored in your browser's localStorage persists until you clear your browser data. We do not retain personal data on our servers beyond what is technically necessary for the operation of the website.

9. No Account Registration

Kukuruchi does not require you to create an account or provide any personal information such as your name, e-mail address, or payment details to play the game. You may play completely anonymously.

10. Children's Privacy

We do not knowingly collect personal data from children under the age of 13. If you believe a child under 13 has submitted personal data to us, please contact us at info@kukuruchi.com and we will take steps to delete it promptly.

11. Security

We implement appropriate technical and organisational measures to protect the data we process against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure or access, in accordance with Art. 32 GDPR.

12. Your Rights under the GDPR

Under the GDPR, you have the following rights with respect to your personal data. Because Kukuruchi stores almost all data locally on your device and does not require an account, most of these rights can be exercised directly by clearing your browser data. Where data is held by third parties (e.g. Google), you may also exercise rights directly against those parties.

13. How to exercise your rights

To exercise any of the above rights regarding data held by us, please contact us at info@kukuruchi.com. We will respond within 30 days as required by Art. 12 GDPR. We may need to verify your identity before processing your request.

14. Supervisory authorities

You have the right to lodge a complaint with the competent data protection supervisory authority. In Germany, the responsible authority depends on the operator's federal state. A directory of German data protection authorities is available at bfdi.bund.de.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is always available at this URL with the "Last updated" date displayed at the top.