Privacy Policy
Last updated October 6, 2026
We collect as little as possible. Koiluna has no ads, no third-party trackers and no analytics cookies.
What we collect
- At purchase: your email address, the edition you bought, the amount, and a Stripe payment reference. Card details go directly to Stripe; we never see or store them.
- To keep you signed in: a secure session cookie on your browser (only a hash of it is stored on our side), and one-time sign-in links if you request them.
- Game progress: stored only in your browser (online) or on your PC (download). It is not sent to us, except for the Daily Challenge below.
- Daily Challenge: when you finish a daily puzzle, your moves are sent to us so we can check your score, and we keep your scores and the time you took. Leaderboards show your nickname (a random one until you change it), never your email. You can hide yourself from all public boards on your account page.
- Windows download: when you download the installer we record the date, the time and the IP address it was downloaded from. The download is final once it has been downloaded (see the refund policy), and this record is how we know.
- Protection against abuse: to stop automated sign-in and checkout attempts we keep short-lived counters tied to a scrambled form of your IP address. They are deleted within a few days.
- Server logs: our host, Cloudflare, briefly processes technical data such as IP addresses to deliver and protect the site.
How we use it
To deliver what you bought, sign you in, send your receipt and sign-in links, handle refunds and support, and prevent fraud. We don't sell or rent personal information, and we don't send marketing emails unless you ask for them.
Who processes it for us
- Stripe: payments (stripe.com/privacy)
- Cloudflare: hosting and our purchase database (cloudflare.com/privacypolicy)
- Resend: sending receipts and sign-in links (resend.com/legal/privacy-policy)
How long we keep it
Purchase records are kept as long as needed for your access and for tax and accounting law. Sign-in sessions expire after 180 days, and sign-in links after 30 minutes.
Your choices
You can ask us to access, correct or delete your data at support@koiluna.com. Deleting your purchase record ends online access.
Children
Purchases are made by adults. We don't knowingly collect personal information from children under 13.
Contact
PickCipher LLC · support@koiluna.com