Privacy policy
Last updated: 20 October 2026. This translation is provided for convenience; the French version prevails.
You can play Kultio without an account. If you create one, here is exactly what is stored, why, and how to delete it.
Data controller
The site's publisher (see the legal notice), who can be reached at [email protected].
What is stored
| Data | Why | How long |
|---|---|---|
| Email address | To sign you in to your account | Until the account is deleted |
| Username | To show you in rooms and on the leaderboard | Until the account is deleted |
| Password | To sign you in. It is stored encrypted (PBKDF2): nobody can read it, not even the publisher | Until the account is deleted |
| VIP status and its end date | To give you access to VIP perks | Until the status ends or the account is deleted |
| Scores and game history | Your records, your profile and the leaderboard | Until the account is deleted |
| Session cookie "kultio_session" | To keep you signed in. A strictly necessary cookie used for nothing else | 30 days |
This processing is based on providing the service you request by creating an account (Article 6(1)(b) GDPR).
What stays on your device
Your browser keeps a little information for your convenience: your records without an account, your last username, your game settings, your language and the questions you have already seen. It never leaves your device; you can erase it by clearing the site's data in your browser.
Multiplayer
In a room, your username, your answers and your score are visible to the other players in the room. Nothing is kept once everyone has left the room.
What Kultio does not do
No advertising, no selling of data, no advertising trackers and no third-party analytics. That is why the site shows no cookie banner.
Service providers
- Cloudflare hosts the site and the database (stored in Western Europe). Cloudflare may process some data in the United States, under the EU–US Data Privacy Framework and standard contractual clauses.
- Google Fonts provides the fonts: your browser contacts Google's servers, which receive your IP address.
Your rights
You can access, correct or delete your data at any time, and ask for a copy. Deletion is immediate from your profile (the "Delete my account" button). For any other request: [email protected]. If you feel your rights are not being respected, you can lodge a complaint with the French data protection authority, the CNIL, or with the authority in your country.
Under 15s
Under French law, a minor under 15 needs a parent's consent to create an account. Playing without an account remains open to everyone.