Privacy Policy — King of the City (KOTC)
Effective date: February 13, 2026 App: King of the City (KOTC) Controller: Marin Komadina (King of the City / KOTC) ("we", "us") Contact: ktcspprt@gmail.com Country: Croatia / EU (GDPR applies)
1) Scope
This Privacy Policy explains how we collect, use, share, and protect personal data when you use KOTC.
2) Data we collect
A) Account data (required)
- Email address (used to create and manage your account and sign-in).
B) Profile data (optional, depending on what you enter)
- Username / display name
- Real name (if you choose to provide it)
- Phone number (if you choose to provide it)
C) Gameplay and ranking data (generated by use)
- Challenge records (who challenged whom, timestamps, statuses)
- Results (wins/losses), ladder/rank position, rating/ELO-like values
- Disputes and admin decisions (if applicable)
D) Content you submit (user-generated)
- Video link(s) you submit as match evidence (e.g., YouTube URL)
- Optional notes/comments you attach to challenges or disputes
E) Support and communications
- Messages you send to support (and metadata needed to respond)
F) Technical and security data
Our infrastructure and service providers may process technical identifiers needed to operate and secure the service, such as IP address, device/app identifiers, timestamps, and logs for abuse prevention and debugging.
3) How we use your data
| Purpose | Data used | Typical legal basis (GDPR) |
|---|---|---|
| Create and manage your account | Contract (Art. 6(1)(b)) | |
| Run game features (challenges, ladder, results) | Profile + gameplay data | Contract (Art. 6(1)(b)) |
| Show leaderboards and challenge history to other users | Username/display name + ranking/gameplay data + (where relevant) video link | Contract (Art. 6(1)(b)); Legitimate interests (Art. 6(1)(f)) |
| Moderation, fraud prevention, dispute handling | Gameplay data, content links, logs | Legitimate interests (Art. 6(1)(f)) |
| Support | Support messages + account identifiers | Contract (Art. 6(1)(b)) |
| Legal compliance | Any necessary data | Legal obligation (Art. 6(1)(c)) |
4) What other users can see (in-app visibility)
KOTC is a competitive ladder app. Other users may be able to see:
- Your username/display name
- Your rank, wins/losses, and related ladder stats
- Challenge activity involving you (e.g., opponent, status)
- The video link you submitted for a specific match (if your workflow shows it to other users for verification)
Your email is not intended to be displayed publicly.
5) Sharing and third parties
We share data only as needed to operate the service:
- Infrastructure / backend provider (Supabase) We use Supabase to provide authentication and database functionality. Supabase offers a Data Processing Addendum (DPA) and describes safeguards for international transfers (including use of Standard Contractual Clauses where applicable).
- Video platform (YouTube, if you submit YouTube links) If you submit a YouTube link, that content is hosted by YouTube/Google and is governed by their privacy practices.
- Legal / safety We may disclose information if required by law, to enforce our terms, or to protect users and the service (e.g., fraud/abuse).
We do not sell your personal data.
6) International data transfers
If personal data is processed outside the European Economic Area (EEA), we use appropriate safeguards (for example, contractual protections such as Standard Contractual Clauses) as described by our providers’ data protection terms.
7) Data retention
- Account and core gameplay data: kept while your account is active to operate the ladder/challenge system.
- Support communications: kept as needed to resolve issues and for record-keeping.
- Logs/security data: kept for a limited period appropriate for security and debugging.
When you request deletion, we delete or anonymize data unless we must keep some data to comply with law, resolve disputes, or enforce terms.
8) Security
We use reasonable technical and organizational measures to protect data (access controls, least-privilege, and provider security features). No method of transmission or storage is 100% secure.
9) Your rights (EEA/UK GDPR)
Depending on your location, you may have rights to:
- Access your data
- Correct inaccurate data
- Delete data
- Restrict or object to processing
- Data portability
- Withdraw consent (where processing is based on consent)
To exercise rights, contact ktcspprt@gmail.com.
Complaints (Croatia supervisory authority)
You can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).
10) Children
KOTC is not intended for children. If you are under the age at which you can legally consent to data processing for online services in Croatia, you must not use KOTC unless a parent/guardian has authorized it. Croatia’s age threshold is commonly stated as 16 for such consent.
11) Changes to this policy
We may update this policy. If changes are material, we will provide notice in-app or via other appropriate means. The “Effective date” above shows when this version took effect.