Kr67
Kr67 Privacy Policy
Effective date: 6 November 2026
Game: Kr67
Legal URL: https://kr67.win/privacy
Polish version (controlling): https://kr67.win/pl/privacy
1. Controller
The controller of personal data processed in connection with Kr67 is:
IsnTech Paweł Arent
Tax ID / NIP: PL7123459159
Address: ul. Pana Wołodyjowskiego 3/81, 20-627 Lublin, Poland
Privacy contact: privacy@kr67.win
2. What Kr67 is
Kr67 is a puzzle game you can play in a web browser at app.kr67.win and, later, as an app for Android and iOS. It is free to play. The phone app can show a rewarded ad, but only when you ask for one: after a lost run, you can choose to watch an ad to continue. The browser version shows no ads.
You don't need an account. We don't run a game server: the web version is a set of files delivered by a hosting provider (section 6), and the game itself runs entirely in your browser or on your phone.
3. Your game data stays on your device
Your progress — achievements, unlocked content, statistics, records, the current run, your settings and your consent choices — is stored only on your device: in the app, or in the browser's storage for the web version. We don't receive it, and we have no copy of it. It is deleted when you reset progress, uninstall the app, or clear the site data for app.kr67.win in your browser.
You can save your progress to a file and load it again (in Settings, under "Your progress"). The file is created on your device and stays wherever you put it; we never see it.
Once loaded, the game plays offline. The web version can be installed to your home screen and then starts without a connection. When you are offline, no ad is offered and nothing is sent anywhere.
4. Data categories
- On-device game data: progress, settings and consent choices (section 3). Not shared with us.
- Website delivery data: when you open kr67.win or app.kr67.win, the hosting provider (section 6) receives your IP address, browser information and the address requested, as every web server does, to deliver the pages and protect the service. The same applies when the game streams its music.
- Usage statistics (only if you allow them): if you choose Allow when asked about usage statistics, Google Analytics 4 receives how the websites and the game are used: pages viewed, runs started, rounds won, runs lost or won, the tutorial finished or skipped, the game installed, the bag, stage, ante, round and score of those moments, plus technical data such as your browser, device type, approximate location (country / city, derived from your IP address, which Google Analytics doesn't store) and a random identifier kept in the
_gacookies on kr67.win. Google signals and ad personalisation are switched off, and we don't send your progress, your name or anything you type. If you choose No thanks, or don't answer, the analytics code isn't loaded and no analytics cookie is set. Your answer itself is kept in a cookie (kr67_consent) on kr67.win for one year, so it covers both the site and the game. - Advertising data (phone app only): only when you choose to watch a rewarded ad, the ad network (Google AdMob, section 6) processes technical data such as your IP address, device and operating-system information, the app's identity and ad interactions. We request non-personalised ads only: ads are not chosen based on your past behaviour or a profile of you, and on iPhone the app doesn't ask for permission to track you. The ad network may still use device identifiers for frequency capping, measurement and fraud prevention, as it does for every ad.
- Support data: if you email us, your email address, your message and anything you attach.
- App store data: the app stores (Google Play, Apple App Store) process data about downloads and — if you opted in through your device settings — crash reports and usage statistics, which they may share with us in an aggregated or anonymised form. We don't add crash reporting of our own.
Apart from the usage statistics you can allow (item 3), we don't use analytics; we don't create profiles of players, and we don't sell personal data.
5. Purposes and legal bases
| Purpose | Legal basis under GDPR |
|---|---|
| delivering the websites and the web game, keeping them secure | Article 6(1)(f), legitimate interest in running the service |
| usage statistics (Google Analytics 4) to see how the game is played and balance it | Article 6(1)(a), consent; asked before anything is loaded |
| showing a rewarded ad you asked for, measuring it and preventing ad fraud | Article 6(1)(a), consent where required; the consent form is shown before the first ad |
| answering support requests | Article 6(1)(f), legitimate interest in answering you |
| complaints, claims and legal defence | Article 6(1)(f), legitimate interest |
You can change or withdraw your usage-statistics consent at any time: in the game's Settings ("Usage statistics … Turn off") or with Cookie settings at the bottom of kr67.win. Withdrawing stops the analytics and deletes its cookies. In the phone app you can change your ad consent at any time in Settings → Privacy options. Withdrawing consent doesn't change the game itself; without ad consent, the ad network may show only limited ads or none, and the continue that a rewarded ad pays for may not be available.
6. Recipients and providers
| Provider | Purpose | Notes |
|---|---|---|
| Microsoft Azure Static Web Apps (Microsoft Ireland Operations Limited) | Hosting kr67.win and app.kr67.win | Processor for us; receives the website delivery data (section 4). Files are delivered from Microsoft's global network. We don't switch on request logging or monitoring for these sites. |
| Google Analytics 4 (Google Ireland Limited) | Usage statistics, only after your consent | Processor for us under Google's data processing terms. Its policy: https://policies.google.com/privacy |
| Google AdMob (Google Ireland Limited) | Rewarded ads requested by the player in the phone app, the consent form, ad measurement and fraud prevention | Google acts as an independent controller for ad delivery. Its policy: https://policies.google.com/privacy |
| Google Play / Apple App Store | Distribution, updates, optional crash and usage reports | Independent controllers under their own policies. |
| Our email provider | Receiving and storing email sent to privacy@kr67.win | Processor for us. |
We may also share data with legal advisers, courts and public authorities where required or permitted by law.
7. International transfers
Microsoft, Google and the app stores may process data outside the EEA. They rely on appropriate safeguards such as adequacy decisions (including the EU–US Data Privacy Framework) or Standard Contractual Clauses.
8. Retention
| Data | Retention |
|---|---|
| On-device game data | On your device until you reset progress, uninstall the app or clear the site data in your browser. |
| Usage statistics | 14 months in Google Analytics, then deleted automatically; the _ga cookies expire after up to 2 years or when you withdraw consent. |
| Website delivery data | Kept by Microsoft only for a short time under its standard operational settings; we keep no request logs ourselves. |
| Advertising data | According to Google's policies; we don't hold it. |
| Support correspondence | For the time needed to handle the request and, after that, as long as needed to defend claims. |
9. Your rights
You may request access, rectification, deletion, restriction, portability, objection to legitimate-interest processing, and withdrawal of consent. Write to privacy@kr67.win. Because your game data never leaves your device, we can't see or export it; you can delete it yourself at any time (section 3). For data held by Google, you can also use Google's own tools.
You may lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland.
10. Children
Kr67 is meant for players aged 13 and over and is not directed at children. We don't knowingly collect personal data from children under 13, or under the age of digital consent in their country (16 in Poland and some other EU countries) without a parent's consent. If you believe a child has sent us personal data, write to privacy@kr67.win and we will delete it.
11. No automated decisions
We don't make decisions based solely on automated processing that produce legal or similarly significant effects.
12. Language and changes
This policy is published in Polish and English. If the two versions differ, the Polish version prevails.
We may update this policy when the game, its providers or the law change. The current version is published at https://kr67.win/privacy and linked from the game's Settings and the store listings; the effective date at the top shows when it last changed.