Privacy Policy.
What we collect, why, how it's protected and what you can do about it.
Last updated: 19 October 2026
In short
We collect only what we need to run your account and reply to you. Accounts are stored on our own server — not in your browser — and your password is saved only as a one-way hash. We never ask for or store card or bank details, and we never sell your data.
What we collect
- When you sign up: first name, last name, email address, UK phone number and a password. The password is turned into a one-way hash (a scrambled code) before it is saved, so it is never stored as you typed it.
- While you have an account: your virtual coin balance, XP and level, when you last collected a daily bonus, which of our games you have opened and when, the date you joined, your last sign-in and a count of failed sign-in attempts.
- If you use Google: your name, verified email address and Google account ID, checked by our server directly with Google. We ask for your phone number separately.
- When you contact us: your name, email, topic and message.
Where it's kept and how it's protected
- Accounts are stored on our web server as individual protected files — one per account, named with a scrambled code rather than your email. These files are blocked from the web and can't be opened by visitors. We don't run a public database, and no account information or internal data is ever displayed on the website.
- Forms (sign-up, sign-in, contact and Player Care) are all processed on our server. Nothing you type is checked or stored only in your browser.
- The connection between your device and our website is encrypted (HTTPS).
- Messages you send are emailed from our server to our support inbox through our email delivery provider, and a copy is kept in a protected log on our server so we can reply and confirm delivery.
- Form logs: our server keeps a protected record of form submissions (date, which form, the result and the email address used) to help us keep accounts secure and fix problems. Passwords are never logged.
Why we use it
| Purpose | Information | Lawful basis |
|---|---|---|
| Run your account, coins and levels | Sign-up details, balance, XP, play history | Contract |
| Check you're 18+ and in the UK | Your confirmation, phone number | Legal obligation / legitimate interests |
| Reply to you | Contact form details | Legitimate interests |
| Keep the website secure | Failed sign-in count, form logs | Legitimate interests |
How long we keep it
- Account information: until you delete your account (from My account, or by asking us). Deleting removes your account file from our server immediately.
- Contact messages: until your request is resolved, and no longer than 12 months.
- Form logs: up to 12 months.
Other services
- Google Sign-In — only if you choose it. Google's own privacy policy applies to your Google account.
- Our email delivery provider — sends contact and Player Care messages to our inbox.
- Our hosting provider — stores the website and account files on our behalf.
Our games and fonts are hosted on our own website, so loading a game doesn't send your data to another company. We don't use advertising trackers.
Cookies and browser storage
We use one strictly necessary session cookie to keep you signed in, plus your browser's storage to remember your age confirmation and cookie choice. Full details are in our Cookies Policy.
Your rights
Under UK data protection law you can ask to see, correct, delete or move your information, or object to how we use it. Send your request through our contact form or email [email protected]. You can also complain to the Information Commissioner's Office at ico.org.uk.
The data controller for this website is , .
Under-18s
Charvi Kent is for adults only. We don't knowingly collect information from anyone under 18; if we learn we have, we delete it.
Changes
We'll update this page if anything changes. The date at the top shows the latest version.