Privacy Policy

What we receive

When you sign in with Telegram we receive the profile data Telegram shares with the game:

• your numeric Telegram ID, username, first and last name and profile photo link;
• your Telegram language code and whether you have Telegram Premium;
• the time zone your device reports, so daily resets and matchdays show in your local time.

We never receive your phone number, contacts or messages. In groups, the bot only sees the commands and events it is built to handle.

What we create while you play

Your club name and crest, your cards, squads and tactics, match results and replays, progress, quests and achievements, referrals, league and cup entries, challenge links you create, notification choices, and a ledger of what you earned and spent.

When you buy something, Telegram handles the payment and tells us it was completed, with a payment reference. We do not receive your card details. For crypto, we read public blockchain transfers to our receiving address and match them to your invoice. We do not hold your keys.

Technical data

To keep you signed in we store a session token in your browser or in Telegram’s storage for this game, and a hash of it on our server together with your browser identifier. We also keep a few preferences, such as your language, in your browser. This site and the game do not use advertising or tracking cookies.

Our servers see your IP address when you connect. We use it for rate limiting and security. Error reports may contain technical details of a crash, and never your chat content.

How we use it

• to run the game: matchmaking, leagues, cups, rankings, rewards and replays;
• to deliver and support purchases, and to prevent fraud and abuse;
• to send the notifications you allow through the bot, at most one a day, only when there is a real reason;
• to improve balance and fix bugs, using aggregate game data.

What other players can see

Your club name, crest, level, rank and results are visible to other players. A saved snapshot of your defensive squad can be used as an opponent by other players in Ranked and leagues, so they see your club and your cards when they play it. We do not show your phone number, because we do not have it.

Who else handles data

• Telegram, which runs the app platform, the bot and Stars payments;
• servers we operate, where the game and its database run;
• OpenRouter, an AI gateway. For match recaps we send a short structured summary of a match: event types, card ratings and tactics. It does not contain your name, Telegram ID or contact details. The recap is optional decoration and the game works without it;
• a public blockchain data provider, which we query with our own receiving address only.

We do not sell personal data and we do not share it for advertising.

How long we keep it

We keep account and game data while your account is active. Payment and ledger records are kept as long as we need them for accounting, refunds and fraud prevention. When you ask us to delete your account, we remove or anonymise your personal data and keep only what we must keep.

Your choices

You can ask to see, correct, export or delete your data, or object to how we use it, by writing to support@kimdora.com. Send the message from the account you use in Telegram or include your club name so we can find you. You can turn off bot notifications in the game settings or by stopping the bot.

Kimdora is not directed at children under 13, and we do not knowingly collect data from them. If you think a child has signed up, tell us and we will delete the account.

Changes

If we change this policy in a way that matters, we update the date above and tell you in the game or through the bot.