Privacy Policy

1. Who we are

This policy describes how Kat's Lil Kitchen ("we", "us", "our") handles information when you use the Starter & Hearth game app and our website at katslilkitchen.com, including pages linked from the app.

Our game API is hosted at api.katslilkitchen.com. We are based in Puriscal, Costa Rica.

2. Information stored on your device

The game saves progress locally on your phone or tablet. This data is not uploaded automatically just because you play offline.

You can export an optional "AI analysis bundle" from the app for debugging or support. That export is created only when you choose it, and it omits passwords and session tokens. Treat exports like a save file — they can still contain gameplay history.

3. Information when you use online features

Online features are optional. If you do not sign in or connect, most of this section does not apply.

3.1 Anonymous play

When the app connects to our servers, it may create an anonymous player record using:

• a random install ID generated on your device,
• your app version, and
• a session token returned by our server.

3.2 Account registration (community trading)

If you create an account to post on the ingredient trading board, we collect:

• email address,
• password (stored only as a one-way hash — never plain text),
• display name shown on trade posts, and
• verification codes sent by email.

Browsing trade posts does not require an account. Posting requires a verified email.

3.3 Trade posts

When you publish a trade, we store the items you offer and seek, an optional short note, your display name, and timestamps. Open posts are visible to other players and expire after about two weeks unless you remove them sooner.

3.4 Events and rewards

If you participate in timed in-game events, we may process your player ID, event progress, and reward claims to prevent duplicate payouts and validate rewards server-side.

3.5 Diagnostics you choose to send

From Settings you can voluntarily send a diagnostics report. This may include app version, install ID, in-game day, recent error summaries, and a redacted gameplay snapshot. We use this only to fix bugs and improve stability — not for advertising.

3.6 Session heartbeat

If you are logged in, the app may occasionally send a lightweight heartbeat with session length and app version. This is not continuous location tracking.

3.7 Website feedback

If you submit our website feedback form, we receive whatever you type (feedback text and optional name or email).

4. Optional advertisements

The game may offer optional rewarded ads (for example cosmetic tokens) with a daily limit. If a third-party ad network is enabled in a future release, that provider may collect device and ad-interaction data under its own privacy policy. We will update this page before enabling third-party ad SDKs in production builds.

5. How we use information

• Run and improve the game and API
• Authenticate accounts and trade posts
• Send verification and service-related email
• Validate event rewards and prevent abuse
• Respond to feedback and diagnostic reports you send
• Maintain security, rate limits, and reliability

We do not sell your personal information.

6. How long we keep data

• Local saves: until you uninstall the app or clear its data.
• Trade posts: until you delete them or they expire (about 14 days).
• Account data: while your account is active; you may request deletion (see Contact).
• Diagnostics reports: as long as needed to investigate issues, then archived or deleted.
• Server logs: short-term retention for security and troubleshooting.

7. Sharing with others

We share information only:

• with infrastructure providers that host our API and email,
• with other players when you post on the public trade board, and
• when required by law or to protect users and our service.

8. Security

We use HTTPS, hashed passwords, and access controls on our servers. No method of transmission or storage is perfectly secure; please use a unique password for your account.

9. Children

Starter & Hearth is a family-friendly game, but account registration and online posting are intended for users who can provide a valid email address. We do not knowingly collect personal information from children under 13 without appropriate parental consent. If you believe a child has provided us personal information, contact us and we will delete it.

10. Your choices

• Play offline: core gameplay works without an account.
• Skip trading: you do not need to register to play.
• Do not send diagnostics: reports are manual, not automatic.
• Delete local data: uninstall the app or clear app storage in Android settings.
• Account deletion: contact us from the email on your account and ask us to delete it.

11. International users

Our servers may be located outside your country. By using online features, you understand that information may be processed in Costa Rica, the United States, or other locations where our hosting providers operate.

12. Changes to this policy

We may update this page when features change. We will revise the effective date at the top. Continued use of online features after an update means you accept the revised policy.

13. Contact us

Questions about privacy or account deletion:

Website feedback form — use a subject like "Privacy" or "Delete my account"

In the game app: Settings → Privacy Policy opens this page.