Privacy

Last updated 2026-08-12

Kiln Games keeps as little about you as it can and sells none of it. There is no advertising, no analytics service and no third-party tracker anywhere on this site.

Who is responsible

This site is run by Håkon Lia, a private individual in Norway, who is the data controller for everything described here. Write to privacy@kiln-games.com about anything on this page.

What is stored, and why

Your account

When you sign in, an account is created holding your email address, a handle, a display name, an avatar, and the theme colour your profile is tinted with. You can add a description of yourself. If you sign in with Google or Discord, that provider gives the site your email address, your name and your avatar image — nothing else, and nothing is ever sent back to them.

An email address the provider has verified is what links a sign-in to an existing account, so the same address always reaches the same account whichever button you press. Unverified addresses are never used for that.

This is kept to give you an account. Without it there is no profile, no way to credit a game to you, and no way to sign you back in.

What you publish or post

Games you upload, their descriptions, thumbnails and credits; the comments you write; the ratings you give; and any application you send asking for publishing access. Comments and games are public by design. Ratings are public only as part of a game's average — no page shows what any one person voted.

Plays

A game records that it was played. Signed in, that is stored against your account, once per game, so the same person reloading a page does not inflate the number. Signed out, it is stored against a random identifier in a cookie that is not tied to anything else about you and is not used for any other purpose.

Reports

If you report a game or a comment, the report keeps what you reported, what you said about it, and — if you were signed in — who you are. The account you report is never told who reported them.

Logs

The site runs on Cloudflare, which handles requests before this site sees them and keeps its own short-lived request logs, including IP addresses, to deliver traffic and stop attacks. That data is Cloudflare's to retain and is not copied into this site's database.

Cookies

Every cookie here is one the site cannot work without, which is why there is no consent banner asking you about them. There are three:

Session

Keeps you signed in. Set only after you sign in, and cleared when you sign out.

Request verification

Stops another website from submitting forms here as you. Strictly a security measure.

Visitor

A random identifier so a play is counted once rather than on every reload. It is never joined to an account and never leaves this site.

The demo video on the Kiln Studio page is served from this site rather than embedded from a video host, specifically so that watching it sets nothing.

Games are sandboxed, but they are not ours

Games are made by other users and run in your browser inside a restricted frame on a separate domain, so a game cannot read your session, your account or anything else on Kiln Games. It is still a program written by a stranger. Anything you type into a game, you typed into that game.

Who else processes it

Cloudflare hosts everything — the site, the database, the uploaded games and the mail. Google and Discord are involved only if you choose to sign in with them, and only at the moment you do. There is nobody else. Some of this processing happens outside the EEA under the standard contractual clauses Cloudflare operates on.

How long it is kept

For as long as you have an account. Delete your account and the account, its profile, your games and their files, your comments, your ratings and your play records are deleted immediately and permanently — not hidden, not archived. Reports you filed are kept without you attached to them, because the moderation record still needs to make sense.

While your account exists, every handle you have used stays reserved to you, so a link somebody shared can never resolve to a stranger's games. Deleting the account releases those too — by then the games they pointed at are gone as well, so there is nothing left for the reservation to protect.

What you can ask for

You have the right to get a copy of your data, correct it, delete it, take it elsewhere, and object to how it is used. Most of that is a button rather than a request — your settings page will export everything the site holds about you as a file, and will delete your account outright.

Age

You need to be at least 13 to have an account here. Anyone can play a game without one.

Changes

If this page changes in a way that matters, the date at the top changes with it and anyone with an account is told by email before it takes effect.