Privacy policy

Effective 1 December 2026 · Last updated 25 October 2026

This policy explains what personal information Kingshot Guide collects when you use www.kingshotguide.org (the “Service”), why we collect it, who we share it with, how long we keep it, and the rights you have.

Who is responsible for your data

Kingshot Guide is operated by Mo Zhenhua (莫镇华), an individual based in Dongguan, Guangdong, China. Contact: support@kingshotguide.org.

Summary

  • You can read most of the site without an account and without giving us any personal information.
  • Signing in uses Google. We receive your name, email address, profile picture and a Google account identifier.
  • Paid subscriptions are processed by Stripe. We receive subscription status and identifiers, not your full card number.
  • We use Google Analytics and Google AdSense. We do not use session recording or replay tools.
  • We do not sell personal information. Advertising may involve “sharing” for cross-context behavioural advertising under California law; you can opt out.
  • You can ask for access, correction, deletion or a copy of your data at any time by emailing us.

Information we collect

Account and sign-in. When you sign in with Google, we receive your name, email address, profile image URL and your Google account identifier (the “sub” claim). We create a user record with an internal ID linked to that identifier.

Age confirmation. Before signing in we ask you to confirm that you are at least 13 and to agree to the Terms of Service and this policy. We store that confirmation, the date and the version of the screen. We do not store your date of birth.

Subscription and billing. Stripe processes your payment and gives us a customer identifier, subscription identifier, plan, status, billing interval and current period dates. We do not receive or store your full card number, CVC or billing address; Stripe handles that data for payment processing. We also store the consents you gave at checkout (time, version of the disclosure, plan) so we can demonstrate compliance.

Usage and device data. We receive technical data when you visit: IP address, browser type and version, operating system, device type, referring page, pages viewed and timestamps. This is processed by Cloudflare and, where you consent or where the law permits, by Google Analytics and Google AdSense.

Content you submit. If you use alliance or KvK tools, you may enter data such as alliance names, player names and in-game IDs, event schedules and layout plans, and you may generate share links. This may include personal information about other players. See “Content about other players” below.

Communications. If you email us, we keep your message and our reply, including your email address.

Community. If you join our Discord server, your use of Discord is governed by Discord's own terms and privacy policy. We do not receive your Discord account data unless you share it with us.

Why we process your data

  • Creating and operating your account

    Google profile data, internal ID

    Contract (Art. 6(1)(b))

  • Providing Pro features and processing payments

    Subscription data, consent records

    Contract; legal obligation for records

  • Keeping the site secure and preventing abuse

    IP, device and log data

    Legitimate interests (Art. 6(1)(f))

  • Understanding how the site is used

    Analytics data

    Consent where required (Art. 6(1)(a))

  • Showing ads that fund free access

    Cookie and device data

    Consent where required, otherwise legitimate interests for non-personalised ads

  • Answering your requests, enforcing our terms

    Communications, account data

    Legitimate interests; contract

  • Complying with tax and consumer law

    Billing records, consent records

    Legal obligation (Art. 6(1)(c))

Where we rely on consent, you can withdraw it at any time on the cookie settings page. Withdrawal does not affect processing that happened before withdrawal.

Who we share data with

We use service providers that process data on our behalf under written agreements:

  • Google — sign-in, analytics (Google Analytics 4), advertising (Google AdSense) and consent messaging.
  • Stripe — payment processing, subscription management and the billing portal.
  • Cloudflare — hosting, CDN, security and database infrastructure.

We may also disclose data if required by law, to respond to valid legal process, to protect our rights or the safety of users, or in connection with a merger or sale of assets (in which case we will notify you).

We do not sell personal information. Advertising delivered through Google AdSense may involve disclosing cookie and device data to Google and its partners for cross-context behavioural advertising. Under the California Consumer Privacy Act this may be considered “sharing”. You can opt out on the Do not sell or share page.

Cookies and similar technologies

We use cookies and local storage for four purposes: strictly necessary (sign-in and security), preferences (remembering your choices on your device), analytics (Google Analytics) and advertising (Google AdSense). The full list, including names and durations, is on the cookie policy page.

Where required by law — including for visitors in the European Economic Area, the United Kingdom and Switzerland — we ask for consent before setting analytics or advertising cookies, and default to “denied” until you choose.

Session recording. We do not use session replay, heatmap or screen-recording tools. We do not record your clicks, keystrokes or page content.

Your rights

Depending on where you live, you may have the right to:

  • access the personal information we hold about you and receive a copy;
  • correct inaccurate information;
  • delete your information, subject to legal retention obligations;
  • restrict or object to certain processing;
  • port your data in a machine-readable format;
  • withdraw consent for analytics or advertising cookies;
  • opt out of the sale or sharing of personal information, including through a Global Privacy Control (GPC) browser signal;
  • not be discriminated against for exercising these rights.

To exercise any right, email support@kingshotguide.org from the address associated with your account. We may need to verify your identity. We respond within 30 days, or 45 days for California requests where permitted. You can also complain to your local data protection authority, or in California to the California Privacy Protection Agency.

California residents can use the Do not sell or share my personal information page, set a GPC signal, or email us. The data requests page explains how to download your data or delete your account, including what we must keep.

Content about other players

If you enter information about other players, you are responsible for having a lawful basis to do so. Please only enter information that is publicly visible in the game or that you have permission to share, and do not enter sensitive information such as passwords, payment details or home addresses. Share links are accessible to anyone who has the link; do not create links containing information you do not want disclosed.

If you are a player whose information appears in someone else's roster and you want it removed, email support@kingshotguide.org and we will act on valid requests.

How long we keep data

  • Account and profile data

    While your account is active, deleted within 30 days of account deletion

  • Favourites and tool content

    While the account is active; deleted with the account or on request

  • Subscription and payment records

    7 years after the transaction, for tax and accounting obligations

  • Checkout consent records

    3 years after the subscription ends

  • Analytics data

    14 months

  • Server and CDN logs

    30 days

  • Support emails

    24 months after the last message

  • Cookie consent choices

    12 months, then we ask again

Where a legal obligation requires longer retention, we keep the data for that period. We delete or anonymise data when it is no longer needed.

International transfers

We and our providers process data in the United States and other countries. Where we transfer personal data from the EEA, the UK or Switzerland, we rely on the EU–US Data Privacy Framework for providers certified under it (including Google, Stripe and Cloudflare), or on Standard Contractual Clauses with supplementary measures. You can ask for a copy of the relevant safeguards by emailing us.

Security

We use HTTPS, access controls and reputable infrastructure providers, and we keep the personal data we hold to a minimum: we do not store full payment card data and we do not store your date of birth. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant authorities of a breach where the law requires it.

Children

The Service provides general-audience content and is not directed to children under 13. You must be at least 13 to create an account, and at least 18 (or have verifiable parental consent) to purchase a subscription. We ask users to confirm they are at least 13 before signing in, and do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will delete it and close the account. If you believe a child under 13 has provided information to us, contact support@kingshotguide.org.

Changes to this policy

We may update this policy. If we make material changes, we will notify you by email or by a prominent notice on the Service at least 30 days before the changes take effect, and we will update the “Last updated” date. Continuing to use the Service after the effective date means you accept the updated policy.

Contact

Mo Zhenhua (莫镇华)
Dongguan, Guangdong, China
support@kingshotguide.org

Related: Terms of service · Cookie policy · Do not sell or share