Privacy Policy
Effective: 2026-05-26 · Kryptós CronOS (κρυπτός χρόνος)
1. What we collect
When you create an account, we collect:
- Username — chosen by you at registration
- Email address — used to notify the admin of new registrations; not shared with third parties
- Training progress — completed stage IDs, XP, earned badges, and streak data
- Last active timestamp — used for the leaderboard
We do not collect passwords. Authentication is handled server-side; password hashes and salts never leave our servers and are not stored in your browser.
2. How we use your data
- Display your progress on the stage map and leaderboard
- Persist progress across devices when you log in
- Send a one-time admin notification email when you register (via Resend)
- Maintain daily and weekly leaderboard rankings
We do not sell your data, use it for advertising, or share it with third parties beyond the infrastructure providers listed below.
3. Infrastructure & third parties
Upstash Redis
Server-side storage for user accounts, progress, streaks, leaderboard data, and survey responses
Privacy policy →Resend
Transactional email — registration, stage completion, and password reset emails
Privacy policy →Anthropic Claude
AI hint assistant (ARIA) — stage context is sent; no personal data is included in hint requests
Privacy policy →Stripe
Payment processing for Pro subscriptions — payment data is handled by Stripe directly and never stored on our servers
Privacy policy →Plausible Analytics
Privacy-friendly analytics — no cookies, no cross-site tracking, no personal data collected; aggregate page view counts only
Privacy policy →4. Cookies & local storage
- session_token — HttpOnly cookie; authenticates your session; 30-day expiry
- admin_token — HttpOnly cookie; admin-only; issued only on admin login
- kryptos_progress_* — localStorage; caches your progress for offline and instant display
We do not use tracking cookies or advertising cookies. Analytics are collected via Plausible, which uses no cookies and collects no personal data.
5. Your rights — data deletion
You may delete your account and all associated data at any time. Deletion removes your username, email, progress, streaks, and leaderboard entries from our servers immediately and permanently.
To delete your account, log in and use the Delete Account option on the stage map page, or submit a request to hello@kryptoscronos.com.
Note: Vercel access logs and Resend delivery records may retain IP and metadata per their own data retention policies.
6. Changes
We may update this policy as the platform evolves. Material changes will be noted with a new effective date. Continued use after changes constitutes acceptance.