Last updated: 1 November 2026
Who we are
This privacy policy explains how Kclap ("we", "us") collects and uses personal data when you visit kclap.com, play our games, create an account or contact us. We are the data controller for this data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
You can contact us about privacy by email at [email protected] or through our contact form, choosing the topic "Privacy question".
What we collect
| When | What we collect | Why |
|---|---|---|
| You create an account | Username, email address, password (saved only as a one-way hash), sign-up method, date created | To create and secure your account |
| You sign in with Google | Your name, verified email and Google account ID, confirmed by Google | To sign you in without a Kclap password |
| You play | Coins, XP, level, games opened, recently played games, daily bonus time | To run your account features |
| You sign in or submit a form | Date and time, IP address, browser type, and whether it worked | Security and preventing abuse |
| You contact us | Name, email, topic and your message | To reply and keep a record of support requests |
We don't collect payment details, because nothing on Kclap is for sale. Guests who don't sign in only create the browser storage described in our Cookies policy.
Our legal reasons
- Contract: to provide your account and the games you asked to use.
- Legitimate interests: to keep Kclap secure, prevent misuse, keep form logs and improve our games.
- Legal obligation: where the law requires us to keep or share information.
- Consent: for optional cookies, which you can change at any time.
How we store and protect data
Your account is stored on our own web server, not in your browser and not in the web page. Each account is a separate file in a private folder that is blocked from public access. Passwords are hashed with PHP's password_hash, so they can't be read by anyone. Sign-in uses one essential, HttpOnly session cookie sent over a secure connection. Form submissions are processed on the server and written to a private log file that is also blocked from the web. Messages you send are delivered to our support inbox by an email provider acting on our behalf.
Who we share data with
We don't sell your data. We share it only with:
- our web hosting provider, which stores the website and account files;
- our email delivery provider, which sends contact form messages to our inbox;
- Google, only if you choose to sign in with Google;
- authorities, if the law requires it.
Where a provider processes data outside the UK, we make sure suitable safeguards are in place.
How long we keep data
- Account data: while your account is open. Deleting your account removes your account file straight away.
- Form and security logs: up to 12 months.
- Support messages: up to 24 months after the conversation ends.
Your rights
Under UK GDPR you can ask to access, correct or delete your data, restrict or object to how we use it, and receive a copy of it in a portable format. You can delete your account yourself at any time from My account. For anything else, contact Player Care. We reply within one month.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Children
Kclap is only for adults aged 18 and over. We don't knowingly collect data from anyone under 18. If we learn that we have, we delete the account and its data.
Changes to this policy
We may update this policy. The date at the top shows the current version, and we'll show a notice on the website for important changes.