Privacy Policy

Effective 3 November 2026

Kabza is a free territory game on real maps, played at playkabza.com and inside Discord as an Activity. It is made by Appeneure (“we”). There are no accounts, no ads and no sign-in. We never ask for your real name (a room asks only for a nickname, which can be anything), and the only personal detail we ever ask for is an email address, and only if you request a new city.

What we collect, and why

• Anonymous gameplay analytics. We use Google Analytics 4 to learn how matches go: the board and settings you chose, how long a match lasted, how it ended, which buttons were used, and your device type. Google derives a rough location (country or city) from your IP address and sets its own cookies (_ga) to count returning visitors. We never send nicknames, room codes or email addresses to Google Analytics.
• Error reports. When something breaks, the page sends a technical report to Sentry: the browser, the step that failed, and a short log of connection steps. Room codes and anything shaped like an email address are masked before the report leaves your device, and no user identity is attached.
• City requests. If you use Request your city, we receive the city you typed, the email address you entered, the board you were on, your screen size and the time. We use the email only to tell you when that city ships, and the city to see which cities people want. We do not add you to a mailing list or share the address. Write to us and we will delete it.
• Playing with friends. In a room, the nickname you type and your moves are sent through our room server (a Cloudflare service) to the other players in that room, so they can see you. The server only forwards messages: it keeps a session for up to 30 seconds so a dropped connection can resume, and nothing after the room ends.
• Choosing a board near you. On the website the page asks our server for your approximate location, which our host (Vercel) derives from your IP address, to put the nearest boards first. The answer goes back to your browser and is neither stored nor logged. We never use your device’s location permission.
• Connection relay. On the older peer-to-peer connection mode, players’ browsers may exchange connection details through public Nostr relays and send game data through a Cloudflare TURN relay when a direct connection is blocked. We receive and keep none of it.
• Hosting. Vercel and Cloudflare, which serve the site and the room server, process IP addresses to deliver pages and messages, as every web host does.

Kabza in Discord

When you play Kabza as a Discord Activity, we do not ask Discord to authorise the app, so we never receive your Discord username, user ID, avatar, email address, servers or friends. Discord gives the game an ID for the voice-channel session. We use it only to put everyone in the same call into the same room, after turning it into a four-letter room code. Inside Discord, analytics, error reports and city requests pass through Discord’s proxy under the same rules as above, and links that leave the game open through Discord, which asks you first. Discord’s own Privacy Policy covers what Discord itself collects.

Stored on your device

The game remembers a few things in your browser’s local storage so they persist between visits. They never leave your device:

• nw_cfg and nw_city: your match settings and last board.
• nw_stars: your City passport (the stars you have won).
• nw_nick: the nickname you last used in a room.
• nw_sound and nw_hud: sound on or off, and whether the standings table is open.
• nw_internal: set only on our team’s own browsers, so their visits are left out of analytics.

Session storage holds a rejoin token (nw_room) while you are in a room, so a reload puts you back in your seat, plus two connection settings used only in testing. Clearing your browser’s site data removes all of it.

The help video

The How to play card shows a still image. Nothing loads from YouTube until you press play, and then the video comes from YouTube’s privacy-enhanced (youtube-nocookie.com) player. In Discord, the video opens on YouTube instead.

Children

Kabza is not directed at children under 13, and we do not knowingly collect personal information from them. The only personal information the game asks for is the optional city-request email. If you believe a child has sent us one, write to us and we will delete it.

Your choices

• You can play without giving us anything personal. Analytics and error reports are anonymous, and a content blocker that blocks Google Analytics or Sentry does not stop the game.
• To have a city-request email deleted, or to ask what we hold about you, write to the address below. We reply within 30 days.
• Analytics data is kept in aggregate under Google Analytics’ retention settings, and error reports are deleted automatically when Sentry’s retention period ends.

Changes

If we change what we collect, we will update this page and its effective date before the change takes effect.

Contact

Appeneure, appeneuretech@gmail.com