KNESSET

Privacy Policy

What we store, why, and who else sees it.

Last updated: 2026-09-11

1. Who we are

The Game is operated by a private individual based in Israel. This policy describes what personal data the Game collects and how it is used. Contact: the support page.

2. What we collect

Without an account: nothing personal. Your game state is saved in your own browser (localStorage) and stays there.

With an account: your email address, a salted hash of your password (never the password itself), your interface language, your subscription status together with the payment provider's subscription and customer identifiers, your support tickets and — if you use the feature — your direct-message history with the Game's characters.

Technical data: your IP address is kept in memory only, for rate limiting, and is not written to the database.

3. Why

To sign you in, to know whether you have a subscription, to answer your support requests, and to keep the AI endpoints from being abused. We do not build profiles, sell data or show advertising.

4. Who else processes data

Anthropic (AI texts): when you play with live texts, the current game situation — parties, decisions, indicators — is sent to the model. Your email address is not.

Polar (payments): receives your email address and payment details when you subscribe, as merchant of record. We never see your card.

Resend (email): delivers sign-in links and support replies.

Google Analytics (Google Ireland Ltd.): anonymous visit statistics — which pages are opened, from which devices and countries, for how long. Google truncates IP addresses; this data is not linked to your account and is not used for advertising.

OVH (hosting): the server that runs the Game and stores its database, located in the European Union.

5. Cookies and local storage

One cookie, ks_session, keeps you signed in (httpOnly, 90 days). localStorage keeps your saved game and language choice. Google Analytics sets its own cookies (_ga, _ga_*) to tell visitors apart; they contain no name or email. They are set only after you agree in the banner. Without consent, Google Analytics counts visits with no cookies and no visitor identifier (Google consent mode): it can see that a page was opened, not by whom. You can change your mind at any time via the "Cookie settings" link at the bottom of the page. There are no advertising cookies.

6. Retention and deletion

Account data is kept while the account exists. Deleting the account removes your user record, sessions and sign-in tokens immediately; support tickets are kept without the link to your account. Database backups are kept for 14 days and then overwritten.

7. Your rights

You can see and delete your data on the account page and ask us anything about it via support. If you are in the EU/EEA or the UK you additionally have the rights set out in the GDPR, including the right to complain to your supervisory authority.

8. Children

The Game is political satire for adults. Do not create an account if you are under 16.

9. Changes

We may update this policy; the date at the top tells you when.