Privacy policy

Revised: 11 October 2026

How Keycap League handles your data, and how to delete your account.

Data we process

If you use Play Games, we store your Play Games player ID. We also store an internal account ID, nickname, chosen country, scores, tickets, collection, play history, hashed login sessions and ad reward records. Language, sound, vibration and unsent taps are saved on your device. Our game server does not store your Google password or email address. If you email support, we receive your address and message. We also store earned coins, turbo credits and coin purchase records. Previously entered nicknames are retained privately and are no longer published. If you enable ticket reminders, the selected time and an encrypted copy of your existing expiring game session are stored on this device. The app checks remaining tickets with our server in the background. There is no separate push service or push registration token. Turning reminders off removes this encrypted session copy.

Why we use it

We use this data to sign you in, save progress, show rankings, award verified ad rewards and prevent abuse. Your game-generated alias, country and scores appear in player rankings. Your chosen country is not GPS location. We use enquiry and feedback emails to review and respond to submissions and improve the service.

Service providers

Google Play Games handles sign-in. Google AdMob and its consent tools process IP addresses, advertising or app identifiers, ad interactions and diagnostics for ads, measurement and fraud prevention. Cloudflare handles network requests and security. Providers may process data outside your country, including the United States, under their own privacy policies. We do not request contacts, precise location, camera or microphone access.

Storage & deletion

Account data is kept until you delete your account. Deletion removes it from the live game database and subtracts your contributions from country scores. Restricted recovery backups expire within 35 days. A random internal ID and deletion time remain for up to 40 days to prevent recovery from backups. Enquiry and feedback emails are kept only while needed for these purposes. Once the purposes are achieved or personal information is no longer needed, we promptly delete or irreversibly anonymize that information. We may retain ideas and improvement suggestions for service improvement in a form that cannot identify anyone. Information that must be kept by law is stored separately for the required period and then deleted. The email rules first published on 2026-10-02 apply only to emails received after that original publication on our public privacy page. Later policy revisions do not restart this cutoff. Earlier emails remain subject to deletion within 90 days after resolution, except where retention is required by law. Google and Cloudflare manage their own records under their policies.

Your choices

Your game alias is assigned automatically. You can change your country and language. Where available, change ad consent in settings; Android settings also control your advertising ID. You can request access, correction or deletion by email. Account deletion does not delete your Google account or its separate Play Games data. You can manage those in Google settings.

Guest access

In the latest app, guests can contribute to country and personal rankings and use rewarded ads under the same game rules. Rankings show the server-generated alias; the advertising data processing described above also applies to guests. Google linking is optional for account recovery. Older private guest taps are not added to rankings retroactively. Guest play uses a random device credential; the server stores its hash and your game records. New guest creation uses a keyed IP hash (an IPv6 /64 network) for abuse throttling; the guest database does not store raw IP addresses. Creation-event records containing the keyed IP hash are eligible for deletion after 24 hours and are removed by hourly cleanup, normally within 25 hours. We also limit sign-in, linking and deletion requests using keyed IP hashes held only in process memory. These counters use a 1-minute window; inactive entries are removed on subsequent requests or hourly cleanup, and all entries disappear when the process stops. Linked or deleted credential hashes are retained for retry protection for 30 days, then cleaned hourly. Existing backup retention still applies. Delete a guest from Settings → Delete account without Google sign-in, before uninstalling. Reinstallation or clearing app data loses guest access; linking Google first allows recovery. Existing Google records are never merged.

Public design

Profile public design — the existing single-design flow Publishing uploads only this design and its appearance settings, equips it on your account, and shows it with your game alias in personal rankings to other players. It replaces your previous public design. Private work names, your library, drafts and trash stay on this device. Only publish content you have the right to share. Sexual content, child exploitation, hate, threats, graphic violence, harassment, personal information, illegal content and spam are prohibited. Players can report designs and users or block users. We may hide designs or restrict publication after review. Reports and moderation records are eligible for deletion after 30 days and removed by hourly cleanup. You can stop publication in My profile → Public design. Re-login restores your current public design; reinstalling does not restore private works. By choosing Agree and publish, you accept these rules and this public display. For display, account recovery and safety, we also store a random public identifier, consent version and times, the design digest, retry records, account-linked reports with reasons and evidence, blocks, and moderation decisions with an operator label. Replacing or withdrawing removes the current public copy from the live database; report evidence may remain. Reports, review logs and retry records are eligible for deletion after 30 days and cleaned hourly, normally within 30 days plus one hour. Restricted backups expire within 35 days. Blocks last until unblocked or account deletion; publication restrictions last until lifted or account deletion. Account deletion removes the public design and related reports, blocks and moderation records from the live database. Shared works gallery — when enabled The gallery is a separate sharing flow. Publishing uploads the work's public title, artwork and appearance settings and shows them with your game-generated alias and creator attribution to other signed-in players. You can publish several works; publishing does not automatically equip a work or replace your other gallery works. Other private work names, drafts and trash stay on your device. Saving a gallery work stores an account-linked reference on the server, not an unrestricted offline copy or a transfer of authorship. Equipping it is a separate action and can display it in rankings. Removing your saved reference does not delete the creator's work. Signing back into the same recoverable account restores available saved references; it does not restore private device-only work. Permission for others to edit and reshare is off unless the creator enables it. A permitted remix is a separate work with attribution to its source and ancestors. Required permissions are checked again when it is shared. Revoking permission keeps the original available but makes other creators' shared descendants unavailable. Withdrawing or hiding an original removes its live title and artwork and makes its descendants unavailable. Unavailable saved works show no artwork, title or creator and can be removed. Already displayed content and private edits saved on another device cannot be recalled instantly. If permission is enabled again, existing descendants may become available again when the other access conditions are met. We store gallery titles, artwork, appearance settings, creator and source links, edit/reshare permissions, saved references and equipment while the account and work remain active. Withdrawn or hidden work records are eligible for deletion after 30 days; their cleanup also removes dependent descendant works and saved references. Until then, inaccessible descendant records can remain stored. Reports, moderation records and retry records follow the existing 30-day hourly cleanup rule. Account deletion removes that account's works and saved references and related dependent records. The existing backup, deletion-record, blocking, publication-restriction and email retention rules above remain unchanged. The same content rules, reporting and blocking apply to the gallery; enquiries and appeals use the existing contact in this policy. For both public-sharing flows, the server checks public titles and keycap text against a small list of explicit Korean and English insults and harassment expressions. It compares complete expressions after normalization, including text split across layers; it does not infer meaning from longer words or explanatory quotations. New publication, replacement, remix publication, republication, gallery equipping and enabling remix permission are checked. Private editing on your device remains available. Existing works are not bulk removed and accounts are not automatically penalized by this check. Previously published descendants are not scanned when an ancestor’s permission changes. Images, all languages and all evasions are not detected. If blocked, edit the wording and try sharing again, or ask about a mistaken block using the existing contact. This check adds no separate storage or third-party transmission of blocked text.

Delete account

This permanently deletes your Keycap League profile, scores, tickets, collection, play history and login sessions. Your contributions are removed from country scores. This cannot be undone. This does not delete a Google account. Recovery backups expire within 35 days; a minimal deletion record remains for up to 40 days. For Play Games accounts, Google verifies ownership before deletion. Guests can delete on the device holding their guest access without Google sign-in.

Request deletion on the web

Contact

Keycap League operator · guseh8@gmail.com. Contact this address for privacy questions or requests. Policy changes will be posted here.

guseh8@gmail.com