PRIVACY POLICY
This policy explains what Bahay Kubo (“we”, “us”) collects when you use bahaykubo.xyz, and what we do with it. We aim to collect as little as possible. You do not need an account to play.
What stays on your device
The game stores your results, streaks, which rounds you have rated, how many free unlimited rounds you have used today, and your settings in your browser’s local storage, under the key bk:v1. This data never leaves your device unless you choose to share it, and you can remove it at any time under Settings, or by clearing your browser data. Playing the game does not set any cookies.
What you choose to send us
- Question ideas: the text you type (up to 140 characters) and a timestamp.
- Ratings and notes: your rating from 1 to 5, an optional note (up to 300 characters), the date of the round, the list of prompts in that round, and a timestamp.
- “Suggest this answer”: the prompt id and the normalized text of your answer (lower case, no punctuation). We keep a running count per answer, not a record of who sent it.
We do not store your name, email address, IP address or any account identifier with these submissions. Please do not include personal information in what you write. If a submission contains something that looks like an email address or phone number, we remove it, and we discard submissions containing blocked words. We use these submissions only to improve the game, for example to decide which prompts and answers to add.
To delete a submission, contact us with the text you sent and roughly when you sent it. Because submissions are not linked to you, we can only find them by matching that text and time.
Preventing abuse
To limit spam, our server computes a short, salted, one-way hash from your IP address, browser type and the date. It is kept for up to 24 hours only to count how many times a device has submitted something that day. It is never stored with your submission and cannot be reversed to find your IP address.
Supporters and Ko-fi
If you support us on Ko-fi, Ko-fi processes your payment under its own terms and privacy policy, and we never see your card details. For each payment Ko-fi sends us a notice. We read only its type (shop order, subscription or donation), the email address you used, and the time, and we keep a message id so a repeated notice isn’t counted twice. We store your email address, what it unlocks (lifetime or monthly), and when it ends. A plain donation unlocks nothing and we store nothing about it beyond the message id.
To restore access on a device, you enter your Ko-fi email and we send a one-time sign-in link using a transactional email service. We store only a hash of the link’s code; it works once and expires after 15 minutes. Using it sets one cookie, bk_supporter, which is HttpOnly, SameSite=Strict, lasts 30 days and holds a signed copy of your email address that only our server can read. You can sign out, or delete your supporter email and access from our records at any time with the buttons on the support page (while signed in), or by contacting us. We otherwise keep this information while your access is active.
Advertising
Free players may see ads on the start page, the results page and guide pages. We use Google AdSense. Google and its partners may use cookies and similar technologies to show and measure ads. We never show ads during gameplay. Wherever you are, we ask first: no ad script loads and no ad cookie is set until you press Accept on the banner. If you decline or ignore it, you see no ads. You can change your choice at any time under Settings. Supporters see no ads. You can learn more about how Google uses data in its own policies and manage ad personalization in your Google ad settings.
Analytics
We do not currently use analytics tools. If we add any, we will describe them here and, where required, ask for your consent first.
Hosting and logs
The site is served through Cloudflare, which may process technical data such as your IP address and request details to deliver the site and protect it from attacks, under its own privacy policy.
Children
Bahay Kubo is a general-audience game and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.
Your choices and rights
Depending on where you live, you may have the right to access, correct or delete personal information we hold about you, to object to or restrict certain processing, and to withdraw consent. Because we hold almost no personal information, most requests concern supporter email addresses. Contact us at hello@bahaykubo.xyz and we will respond.
Changes
If we change this policy we will update the date above, and for significant changes we will say so on the site.
Contact
Questions about privacy: hello@bahaykubo.xyz.