Identity and website policy / Last updated 15 September 2026
KiraZone ID privacy.
This page covers KiraZone ID on kirazone.xyz, the optional daily check-in, and browser-based GameHub Plus. A connected application may also publish product-specific terms for the data it handles.
Choice first
You can explore the public website without an account. Starting a GameHub Plus game requires a signed-in, provisioned KiraZone ID. Joining a public leaderboard is not required to start: without a public handle, completed results stay private to your account. Public GameHub Rank and the optional daily check-in are separate choices, and signing in or playing never enables either one automatically.
One identity, separate product connections
KiraZone ID is designed so approved KiraZone clients can use the same Supabase Auth project and account UUID. Today, this website provides sign-in, the identity dashboard, and access to GameHub Rank. The listed Local Plus products and online multiplayer are not yet connected through this page. Current Claim and Chess play remains local pass-and-play even though completion can be ranked. A browser session does not automatically transfer to a native app; each client must establish its own secure session and authorization.
Account information
When you create or use KiraZone ID, we process your sign-in email, authentication provider identifier, private account UUID, identity-consent version and time, and an editable private display name. There is no public profile directory or public email lookup. We do not receive or store an identity-provider password. Authentication services also retain limited security records such as sign-in and account-change times.
GameHub Rank
GameHub stores completed results privately for every signed-in player. Joining public GameHub Rank requires separate consent and a public handle; enrolling makes eligible results from the rolling last 30 days available for public placement under that handle. Public leaderboard responses contain only the handle, 30-day rank position, a best-score or completed-session count, and the metric label. Your email, private display name, account UUID, raw attempt history, and elapsed-time detail are not returned on public boards. For Signal through Orbit, ranking uses each player's highest accepted score completed during that window. Claim and Chess count completed local sessions from the same window; they do not publish wins, opponents, Elo, or a skill rating. Older results remain in the caller-private history while the player keeps their website data but no longer affect current public placement. Ranked attempts store your account UUID, game, one-use attempt identifier, start and completion times, submitted score, a random result identifier used for safe retries, server-observed elapsed time, and a client-observed integrity label. Time, score bounds, cooldowns, and rate limits reduce obvious abuse, but KiraZone does not claim that browser-submitted scores are cheat-proof.
Product access
Product access records are controlled by trusted KiraZone services, not by account profile fields or browser-supplied roles. Your dashboard may show your own service-controlled access records, but an access record does not by itself mean a product connection, native sign-in, or cross-device sync is live. Each future app must enforce separate access rules for the same account UUID. Removing website data does not change service-controlled access assigned to a separately connected product.
Explicit daily check-ins
Identity consent and check-in consent are separate. A daily check-in is recorded only after you select the check-in choice and actively claim it while signed in. We keep your account identifier, chosen time zone, check-in date, consent version, and resulting streak state to prevent duplicate claims and show your progress. The authorized owner report contains aggregate totals and daily counts only; daily rows with fewer than five check-ins are omitted. It does not return emails, account identifiers, display names, or individual check-in records. A check-in is not a location check-in and never runs automatically.
Why we use it
Identity, ranking, and check-in information is used to provide authentication, your private account dashboard and display name, ranked-game access, public leaderboard placement you request, service-controlled product access, account security, optional check-in history, aggregate operations reporting, moderation and abuse prevention, and responses to account requests. We do not sell it, use it for behavioral advertising, or use it to build a cross-site profile.
Information kept on your device
GameHub Plus keeps settings and, where a game supports local progress or scores, an on-device copy in your browser's local storage. Ranked results are separately submitted to the website account after a valid attempt completes. A service worker may cache public website and game files for unreliable connections, but authenticated API responses, account data, and leaderboard results are not placed in the offline cache. Clearing site data removes the cache and device-local game data but does not delete accepted ranked results from your account.
Deployment analytics
KiraZone's application code does not write raw IP addresses, full user-agent strings, or full referrer URLs to its application database. Netlify Web Analytics is enabled at the CDN to produce aggregate, cookie-free measurements such as pageviews, unique visitors, routes, sources, and approximate countries. Those traffic measurements are kept separate from website accounts and are not joined to check-ins or identity data.
Retention and deletion
We keep KiraZone ID and optional check-in records while the feature is active. Private ranked attempts—including expired or incomplete tickets—and accepted results remain while you keep your website data; we do not claim a shorter automatic expiry. Leaving GameHub Rank removes your public handle and public placements immediately without interrupting private play. The account page can delete the website's display-name record, website ranking records, and check-in data. That self-service action does not delete the underlying authentication identity, service-controlled access assigned to a separately connected product, data governed by that product, or an abuse-enforcement record tied to the continuing Auth identity. To request an appeal or full identity deletion, email support@kirazone.xyz from the sign-in address. After verifying the requester, KiraZone may retain a limited request or security record where required for fraud prevention or law. Device-only settings and supported local game progress remain under your control and can be cleared in your browser.
Your choices and rights
You can edit your display name and export or delete the KiraZone ID, check-in, and website ranking records handled by this website from the account page. The export includes your sign-in email, private identity record, your own service-controlled access records, complete check-in history, and website ranking records. For access, correction, authentication-identity deletion, objection, or restriction requests available under applicable law, email support@kirazone.xyz.
Security
We use access controls and transport security designed to protect account and check-in data. No online service can promise absolute security, so please protect the email account or identity provider you use to sign in and email support@kirazone.xyz promptly if you believe your account was accessed without permission.
Device permissions
The website does not request camera, microphone, or location permission. Its security policy blocks those capabilities at the site level.
Other KiraZone products
Links to Local Plus terms, privacy, and support open a separate KiraZone product site. Until a product explicitly says it is connected, do not assume that this website's session, display name, or data is available there. That product's policy governs the additional information it handles.
Questions or requests
For privacy questions or an account request, email support@kirazone.xyz. Please do not send passwords or other sensitive credentials.
Changes
We will update this statement before a material change to how this website handles personal information and will revise the date above when we do.