In short: the game keeps a small account on our server so you can play online and keep your progress. You can sign in with Google if you want to. Ads are shown through Google AdMob, which collects some data by itself. This website only receives what you choose to send through the contact form.
Overview
This policy covers both the kora-heads.hakim.ma website — the page you are reading now, the contact page, and the pages linked from them — and the Kora Heads game app itself, currently on Android.
Your Game Account
The first time the game goes online, our game server gives it an account: a number that identifies your game, and nothing else about you. The game keeps that number on your phone.
On that account the server keeps your progress — your players, accessories, superpowers, coins and diamonds, levels and stadiums, missions, energy — and what other players see of you: the name you choose in the game, your player, your fans, your league and your place in the rankings. This is what lets you play online, find your progress again on another phone, and appear in leagues.
Your settings (sound, music, controls) are kept on your phone only.
The server is hosted by Railway, in the European Union (Amsterdam). Data travels to and from it over the internet while you play.
Signing In with Google
Signing in with Google is optional. If you do, Google gives the game a token that our server checks with Google, and the server keeps your Google account’s number so that signing in again on any phone leads to the same game account. We do not receive your Google password, and we do not keep your email address.
While you are signed in, your Google display picture can be shown to the players you meet online, next to your name. You can turn that off in the game (Profile → Google).
Online Matches
During an online match, the moves of both players go through our server. The player you meet sees your in-game name, your player and what it wears, your level and fans, and your Google picture if you allow it. Emojis you send in a match are seen by the other player. There is no chat.
The server keeps short technical logs (such as connection times and errors) to keep matches fair and running.
Advertising
Kora Heads is free to play and shows ads using the Google Mobile Ads SDK (Google AdMob): a full-screen ad may appear now and then when you leave a finished match (never during one, and not in your first matches), and you can choose to watch a rewarded ad for energy or a bigger prize.
To show and measure these ads, the AdMob SDK collects the following data and shares it with Google: your advertising ID and other device identifiers; your approximate location, worked out from your IP address; app interactions, such as ads viewed and tapped; and crash logs, diagnostics, and other app performance data.
Google uses this data for advertising, analytics, and fraud prevention. It is sent encrypted over HTTPS. The developer does not receive or store any of it: it is handled by Google under Google’s own policies, linked below.
Limiting Ad Tracking
On Android, you can delete or reset your advertising ID at any time: open Settings → Privacy → Ads, then tap “Delete advertising ID” (or “Reset advertising ID”, depending on your device). Menu names can vary slightly between phones.
After you delete it, apps can no longer use that ID to personalise ads. You will still see ads in Kora Heads, but they may be less relevant to you. Your game progress is not affected.
Permissions
The app asks Android for INTERNET and ACCESS_NETWORK_STATE (online matches, your account, and ads), AD_ID (ads only), and VIBRATE (asked for by the game engine).
The app has no real-money purchases: coins and diamonds are earned by playing. It sends no push notifications.
Google’s Policies
For details on how Google collects and uses data from apps that show its ads or offer its sign-in:
Information We Collect on the Website
If you use the contact form, we collect the name, email address, and message you submit, so we can reply to you.
Like most websites, our hosting provider (Netlify) automatically logs standard technical information for every visit — such as IP address, browser type, and pages requested — for security and reliability. We do not run any analytics or advertising trackers on this site.
Cookies
This site does not set its own tracking or advertising cookies. The contact form uses spam protection provided by Netlify (see below), which may set a cookie needed to verify you are not a bot.
Third-Party Services
The game server is hosted by Railway. Contact form submissions and spam filtering are handled by Netlify Forms; the form may use Google reCAPTCHA. Each has its own privacy policy.
Data Retention
Your game account is kept for as long as you play, so your progress is there when you come back. Contact form messages are kept only as long as needed to answer you.
Deleting Your Account
To delete your game account, follow the steps at kora-heads.hakim.ma/delete-account: write to us with your save code (Profile → SAVE CODE in the game) or the Google account you signed in with. We delete your progress, your name and place in the rankings, and the link to your Google account, and that code can never be used again.
Your Rights
You can ask us to see, correct, or delete what we hold about you — your game account or your contact form messages — at any time through the contact page.
Ad data collected in the app is held by Google, not by us. To limit it, delete your advertising ID as described above; for anything else, see Google’s policies.
Children
Kora Heads is not made for children under 13 and does not knowingly collect data from them. If you think a child has made an account, write to us and we will delete it.
Contact
Questions about this policy can be sent through the contact page.