Privacy policy
Effective 1 December 2026 · Last updated 25 October 2026
This policy explains what personal information Kingshot Guide collects when you use www.kingshotguide.org (the “Service”), why we collect it, who we share it with, how long we keep it, and the rights you have.
Who is responsible for your data
Kingshot Guide is operated by Mo Zhenhua (莫镇华), an individual based in Dongguan, Guangdong, China. Contact: support@kingshotguide.org.
Summary
- You can read most of the site without an account and without giving us any personal information.
- Signing in uses Google. We receive your name, email address, profile picture and a Google account identifier.
- Paid subscriptions are processed by Stripe. We receive subscription status and identifiers, not your full card number.
- We use Google Analytics and Google AdSense. We do not use session recording or replay tools.
- We do not sell personal information. Advertising may involve “sharing” for cross-context behavioural advertising under California law; you can opt out.
- You can ask for access, correction, deletion or a copy of your data at any time by emailing us.
Information we collect
Account and sign-in. When you sign in with Google, we receive your name, email address, profile image URL and your Google account identifier (the “sub” claim). We create a user record with an internal ID linked to that identifier.
Age confirmation. Before signing in we ask you to confirm that you are at least 13 and to agree to the Terms of Service and this policy. We store that confirmation, the date and the version of the screen. We do not store your date of birth.
Subscription and billing. Stripe processes your payment and gives us a customer identifier, subscription identifier, plan, status, billing interval and current period dates. We do not receive or store your full card number, CVC or billing address; Stripe handles that data for payment processing. We also store the consents you gave at checkout (time, version of the disclosure, plan) so we can demonstrate compliance.
Usage and device data. We receive technical data when you visit: IP address, browser type and version, operating system, device type, referring page, pages viewed and timestamps. This is processed by Cloudflare and, where you consent or where the law permits, by Google Analytics and Google AdSense.
Content you submit. If you use alliance or KvK tools, you may enter data such as alliance names, player names and in-game IDs, event schedules and layout plans, and you may generate share links. This may include personal information about other players. See “Content about other players” below.
Communications. If you email us, we keep your message and our reply, including your email address.
Community. If you join our Discord server, your use of Discord is governed by Discord's own terms and privacy policy. We do not receive your Discord account data unless you share it with us.
Why we process your data
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Creating and operating your account | Google profile data, internal ID | Contract (Art. 6(1)(b)) |
| Providing Pro features and processing payments | Subscription data, consent records | Contract; legal obligation for records |
| Keeping the site secure and preventing abuse | IP, device and log data | Legitimate interests (Art. 6(1)(f)) |
| Understanding how the site is used | Analytics data | Consent where required (Art. 6(1)(a)) |
| Showing ads that fund free access | Cookie and device data | Consent where required, otherwise legitimate interests for non-personalised ads |
| Answering your requests, enforcing our terms | Communications, account data | Legitimate interests; contract |
| Complying with tax and consumer law | Billing records, consent records | Legal obligation (Art. 6(1)(c)) |
Creating and operating your account
Google profile data, internal ID
Contract (Art. 6(1)(b))
Providing Pro features and processing payments
Subscription data, consent records
Contract; legal obligation for records
Keeping the site secure and preventing abuse
IP, device and log data
Legitimate interests (Art. 6(1)(f))
Understanding how the site is used
Analytics data
Consent where required (Art. 6(1)(a))
Showing ads that fund free access
Cookie and device data
Consent where required, otherwise legitimate interests for non-personalised ads
Answering your requests, enforcing our terms
Communications, account data
Legitimate interests; contract
Complying with tax and consumer law
Billing records, consent records
Legal obligation (Art. 6(1)(c))
Where we rely on consent, you can withdraw it at any time on the cookie settings page. Withdrawal does not affect processing that happened before withdrawal.
Who we share data with
We use service providers that process data on our behalf under written agreements:
- Google — sign-in, analytics (Google Analytics 4), advertising (Google AdSense) and consent messaging.
- Stripe — payment processing, subscription management and the billing portal.
- Cloudflare — hosting, CDN, security and database infrastructure.
We may also disclose data if required by law, to respond to valid legal process, to protect our rights or the safety of users, or in connection with a merger or sale of assets (in which case we will notify you).
We do not sell personal information. Advertising delivered through Google AdSense may involve disclosing cookie and device data to Google and its partners for cross-context behavioural advertising. Under the California Consumer Privacy Act this may be considered “sharing”. You can opt out on the Do not sell or share page.
Cookies and similar technologies
We use cookies and local storage for four purposes: strictly necessary (sign-in and security), preferences (remembering your choices on your device), analytics (Google Analytics) and advertising (Google AdSense). The full list, including names and durations, is on the cookie policy page.
Where required by law — including for visitors in the European Economic Area, the United Kingdom and Switzerland — we ask for consent before setting analytics or advertising cookies, and default to “denied” until you choose.
Session recording. We do not use session replay, heatmap or screen-recording tools. We do not record your clicks, keystrokes or page content.
Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy;
- correct inaccurate information;
- delete your information, subject to legal retention obligations;
- restrict or object to certain processing;
- port your data in a machine-readable format;
- withdraw consent for analytics or advertising cookies;
- opt out of the sale or sharing of personal information, including through a Global Privacy Control (GPC) browser signal;
- not be discriminated against for exercising these rights.
To exercise any right, email support@kingshotguide.org from the address associated with your account. We may need to verify your identity. We respond within 30 days, or 45 days for California requests where permitted. You can also complain to your local data protection authority, or in California to the California Privacy Protection Agency.
California residents can use the Do not sell or share my personal information page, set a GPC signal, or email us. The data requests page explains how to download your data or delete your account, including what we must keep.
Content about other players
If you enter information about other players, you are responsible for having a lawful basis to do so. Please only enter information that is publicly visible in the game or that you have permission to share, and do not enter sensitive information such as passwords, payment details or home addresses. Share links are accessible to anyone who has the link; do not create links containing information you do not want disclosed.
If you are a player whose information appears in someone else's roster and you want it removed, email support@kingshotguide.org and we will act on valid requests.
How long we keep data
| Data | Retention |
|---|---|
| Account and profile data | While your account is active, deleted within 30 days of account deletion |
| Favourites and tool content | While the account is active; deleted with the account or on request |
| Subscription and payment records | 7 years after the transaction, for tax and accounting obligations |
| Checkout consent records | 3 years after the subscription ends |
| Analytics data | 14 months |
| Server and CDN logs | 30 days |
| Support emails | 24 months after the last message |
| Cookie consent choices | 12 months, then we ask again |
Account and profile data
While your account is active, deleted within 30 days of account deletion
Favourites and tool content
While the account is active; deleted with the account or on request
Subscription and payment records
7 years after the transaction, for tax and accounting obligations
Checkout consent records
3 years after the subscription ends
Analytics data
14 months
Server and CDN logs
30 days
Support emails
24 months after the last message
Cookie consent choices
12 months, then we ask again
Where a legal obligation requires longer retention, we keep the data for that period. We delete or anonymise data when it is no longer needed.
International transfers
We and our providers process data in the United States and other countries. Where we transfer personal data from the EEA, the UK or Switzerland, we rely on the EU–US Data Privacy Framework for providers certified under it (including Google, Stripe and Cloudflare), or on Standard Contractual Clauses with supplementary measures. You can ask for a copy of the relevant safeguards by emailing us.
Security
We use HTTPS, access controls and reputable infrastructure providers, and we keep the personal data we hold to a minimum: we do not store full payment card data and we do not store your date of birth. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant authorities of a breach where the law requires it.
Children
The Service provides general-audience content and is not directed to children under 13. You must be at least 13 to create an account, and at least 18 (or have verifiable parental consent) to purchase a subscription. We ask users to confirm they are at least 13 before signing in, and do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will delete it and close the account. If you believe a child under 13 has provided information to us, contact support@kingshotguide.org.
Changes to this policy
We may update this policy. If we make material changes, we will notify you by email or by a prominent notice on the Service at least 30 days before the changes take effect, and we will update the “Last updated” date. Continuing to use the Service after the effective date means you accept the updated policy.
Contact
Mo Zhenhua (莫镇华)
Dongguan, Guangdong, China
support@kingshotguide.org
Related: Terms of service · Cookie policy · Do not sell or share

