Privacy Policy
Last updated: October 10, 2026
Kanodle is published by WPCAKE LLC, the controller responsible for the personal information described here. Contact us about privacy or your data at support@kanodle.com.
This policy covers kanodle.com and its installable web app. You can play without creating an account. Your space is a collection associated with your browser, not a registered account. Private messaging is not currently available.
Information we use
- Website requests: our hosting service receives information needed to deliver pages, such as your IP address, requested URL, time and browser request headers. Technical access and security logs may contain this information.
- Comments: a comment includes its text, the game, a display name (currently Guest in the portal), and a timestamp. These details are public. We also store a non-public, keyed identifier derived from the submitting IP address to limit repeated submissions. This identifier is not the raw IP address, but is still treated as data linked to a visitor. Avoid posting contact details or other sensitive information.
- Likes and saved games: when you use these features, a random browser identifier links your choices to records in our database. The database stores separate keyed identifiers for likes and saved games, game IDs and timestamps. Like totals are public; your saved collection is not publicly listed. These choices do not automatically sync across browsers or devices.
- Support: if you email us, we receive your email address, message and information you choose to include. We use them to answer you and handle requests.
- Optional device storage: with your permission, supported games remember progress, high scores and sound choices on your device. Offline play can download site and game files. These local saves are not uploaded as a player profile.
Why we use information
We use information to deliver the games and features you request, display comments, remember likes and saved games, answer support requests and protect the service from abuse. Where European or UK data protection rules apply, we rely on legitimate interests for operating and protecting the service and responding to requests, on your consent for optional device storage, and on legal obligations where applicable. Our interests are providing a working, safe games service; we do not use these features to build advertising profiles.
You can refuse or withdraw optional storage without losing access to online play. Withdrawal stops future optional storage and does not change the lawfulness of earlier processing. We do not make decisions with legal or similarly significant effects using automated profiling.
Cookies and similar storage
Use to accept, reject or choose optional game storage. Both game-storage choices start off. Closing the panel without saving is not consent. Advertising uses a separate Google consent message, accessible through . Changes apply to games using the current version of Kanodle in this browser. Reload any tabs opened before this update so they can use your new settings.
| Storage | Purpose and choice | Duration |
|---|---|---|
__Host-kanodle_guestFirst-party cookie | Necessary when you request Like or Save. It identifies this browser for those features. It is Secure, HttpOnly and SameSite=Lax; reading a page does not create it. | 180 days, renewed when you change a like or saved game. This is the cookie duration, not the database retention period. |
kanodle.privacy.v1Local storage | Necessary to remember your accepted or rejected choices and their date. It is not used to track you. | Choices apply for 180 days, or until you change them or clear site data. An expired choice is not treated as consent. |
| Game progress storage | Optional. Grug, Deep Pocket, Tiny Bastion, Roach Rush, Trust Nothing, Fruit Bloom and MoneyTree use local storage for supported progress, scores or sound settings. | Until you turn this option off or clear the data. There is no separate automatic expiry on individual game saves. |
kanodle-pwa-*Service worker / Cache Storage | Optional offline downloads of site and game files. Comment, like and saved-game API responses are not included in offline storage. | Until replaced by an update, removed by the browser, or you turn offline play off or clear site data. |
| Google consent and advertising storage | Google’s consent service remembers advertising choices separately. Advertising storage and partners are described in its consent message. Game-storage buttons do not grant advertising consent. | Google’s message and policies explain the applicable periods. You can reopen Ad privacy choices and manage Google cookies in your browser. |
Game storage keys are kanodle.preview.games.grug.v1, kanodle.preview.games.deep-pocket.v1, kanodle.preview.games.tiny-bastion.v1, kanodle.preview.games.roach-rush.v1, kanodle.preview.games.trust-nothing.v3, kanodle.fruit-bloom.best and kanodle.money-tree.v1.
Turning off game progress removes these device saves and blocks further persistent reads and writes. Your current game may continue in memory until the tab closes. Turning off offline play removes Kanodle’s offline downloads; the installed app can still open when you are online. Neither choice removes the necessary guest cookie or your server-side likes and saved collection.
Your browser may also keep ordinary network caches when loading pages. Those are controlled through your browser. If local storage is unavailable, we can apply cookie settings for the current visit but cannot remember them for your next visit. Clearing the guest cookie can disconnect this browser from its existing likes and saved collection; it does not itself delete database records.
Advertising, analytics and sharing
We use Google AdSense to support Kanodle with advertising. Google’s library and consent service can load before an advertising choice. Requests for ads stay paused until its consent service supplies a valid affirmative choice; if that service is unavailable or no valid choice is received, ads remain paused. Loading the library sends ordinary connection information, such as your IP address, request headers and page information, to Google. Existing cookies on Google domains may be read during this loading step. According to Google’s paused-request mechanism, no new advertising cookies are set and information associated with existing cookies is not used for ad serving or measurement while requests remain paused.
When you allow advertising through Google’s message, Google and the partners listed there may use cookies, device identifiers, page and interaction information to select and personalise ads, measure performance and prevent fraud, within the choices shown in that message. We require affirmative advertising consent before releasing ad requests. Change or withdraw it through Ad privacy choices in Cookie settings. A withdrawal pauses new requests and may reload this page to stop already-loaded ads. It does not automatically delete Google’s cookies or earlier records; use Google’s controls and your browser settings for those.
Read how Google uses information from partner sites, Google’s Privacy Policy and Google’s cookie information. We do not currently add separate analytics tags or social-media tracking pixels. New optional services requiring consent will need their own choice.
Share links open external services such as Facebook, X, Messenger or WhatsApp only when you choose them. Those services handle information under their own policies. A shared link identifies the game. Copy link uses your device’s clipboard when requested.
Who can receive information
Our hosting provider, dhosting, operates infrastructure that delivers the site and database. Service providers involved in hosting, security and email may process information needed to perform those services. Google and advertising partners identified in its consent message process information as described above and in their policies. Comments are visible to other visitors. We may disclose information when legally required or necessary to address abuse, protect rights or respond to a valid legal request.
For information about service providers, processing locations or safeguards relevant to your data, contact support@kanodle.com.
How long information is kept
Comments and their anti-abuse identifiers currently have no automatic deletion timer. They remain until removed; the 30-second posting limit is not a retention period. Likes and saved-game records remain until you remove them through the relevant feature or they are otherwise deleted. Expiration of a browser cookie does not automatically erase these records.
For support correspondence and technical logs, retention depends on resolving the issue, operating and protecting the service, and any applicable legal requirement. We have not specified a fixed deletion period for hosting logs or backups in this policy. Contact support@kanodle.com for information relevant to your data or to request removal. Backup copies may persist until their normal replacement cycle.
Your choices and rights
You can unlike a game, remove it from Your space, or change optional storage in Cookie settings. To request removal of a comment, include its game, approximate date and text so we can identify it. Do not email passwords or identity documents unless we explain why particular information is needed through an appropriate channel.
Depending on the law that applies, you may request access, correction, erasure, restriction or a copy of your personal information, object to processing based on legitimate interests, and withdraw consent. We may need proportionate information to locate the relevant records and verify a request; browser-only identifiers can limit what we can link to you. Contact support@kanodle.com. You can also complain to the data protection authority where you live or work, where applicable.
Children and public comments
Do not put a child’s contact details or other private information in public comments. A parent or guardian concerned about information a child has shared can contact us to request assistance.
Changes to this policy
We will update this page when our practices change and show the updated date. A new purpose requiring consent will need a separate choice; the current settings do not authorize unspecified future tracking.