Privacy Policy

THE CHICKEN KATSU Operations (ojthon) (the “Operator”) handles information used by the browser game THE CHICKEN KATSU (the “Service”) as described below.

1. Information we collect

• A SHA-256 hash of the device token used for guest play.
• When optional Google saving is used, the Google Account subject identifier (sub) and email address.
• In-game display name, seasonal scores, ranks, results, answer history, elapsed time, input method, locale, errors, and related analytics.
• Earned badges, first-device import history, and login session data.
• Network and security information required to prevent abuse.

We do not save your Google name or profile image. The raw session token remains only in the device cookie; only its SHA-256 hash is stored in the database.

2. How we use information

We use this information to operate the game and rankings, provide optional record saving and cross-device access, award badges, confirm identity, analyze usage, improve quality, and respond to abuse and incidents. Your Google email is private and used for identity confirmation; it is not used to determine duplicate accounts.

3. Public information

The public ranking displays the in-game name you choose, score, rank, and achievement time. Google email, Google subject identifier, device hash, and detailed analytics are not public. Do not put personal information in your display name.

4. Service providers

We use Cloudflare Workers and D1 for infrastructure and storage, Cloudflare Turnstile to prevent abuse, and Google Identity Services for optional identity confirmation. Each provider processes information under its own terms and privacy policy.

5. Cookies and session duration

Devices using Google saving receive an HttpOnly, SameSite=Lax session cookie. The session expires a fixed 180 days after issue and is not extended. Signing out revokes only this Service session on the current device and does not sign you out of Google.

6. Retention and controls

Account information, game records, analytics, and badges are retained while the Service continues. The Service currently has no self-service deletion screen or deletion API. We apply reasonable safeguards to stored information.

7. Optional use

Google saving is optional. You can play as a guest without it, and guest play remains available if Google or the authentication feature is unavailable.

8. Contact and changes

Contact the Operator on X at @ojthon221. Changes to this policy will be posted on this page.

The Operator will complete a final legal review before publication.