Privacy in the Knowledge Arena

Controller

The current Knowledge Arena service is operated under the Kirelden brand by a sole proprietorship established in Türkiye.

Historic guest play

Historic guest attempts use a random capability in a secure browser cookie and a one-way digest on the server. New gameplay requires a player account. Quiz records include the question set, randomized choice order, submitted choice, correctness, response time, score, completion status and whether the attempt is ranking-eligible. Correct answers are not sent before submission.

Accounts and progression

New gameplay requires authentication by email, Google or Facebook and a player profile containing a unique public username, selected country and preferred language. Authentication email and provider identifiers are not public player fields. Question exposure, submitted answers, scores, XP, levels, category statistics and quiz history belong to the account. Public leaderboards show username, selected country and eligible scores, and may show active Pro badges and chosen cosmetic styles.

Optional Pro profile customization

Pro players may upload a profile image and select cosmetic name and frame styles. Uploaded images are resized and re-encoded without their original metadata. The image is intentionally public on profile and ranking identity surfaces while Pro access is active; do not upload confidential images. The original upload is not retained. You may replace or remove the stored image in Pro profile settings. If Pro is revoked, its cosmetic data remains stored but is no longer rendered as Pro customization. Account deletion removes the linked cosmetic data and image. Cosmetics do not change quiz scores, XP or ranking calculations.

Challenges, sharing and leaderboards

A friend challenge uses a high-entropy private link whose raw secret is not stored in the database. A result card contains only score, accuracy and Kirelden branding; it does not include answers, email addresses, account identifiers or private access links. Public ranks or percentiles are not shown unless supported by real, statistically meaningful play data.

Security and operational data

Kirelden uses server-side scoring, one-way capability digests, forced row-level security, restricted server credentials and request protections. Hosting and database providers may process request, error and security logs under their applicable terms. Kirelden does not promise absolute security.

Service providers

Vercel hosts the application. Supabase provides the production database and authentication. Google and Facebook process their respective sign-in flows. These providers may process data in countries other than yours. Kirelden currently uses no advertising cookies or marketing analytics SDKs.

Pro purchases

Gumroad handles checkout and payment under its own privacy notice and applicable terms. Kirelden sends an opaque checkout reference so a verified purchase can be linked to the purchasing account; it is not a public player identifier. Kirelden stores a one-way digest, limited provider purchase identifiers, product and account linkage, verification and transaction timestamps, purchase status and entitlement records. Payment notifications trigger an authenticated provider lookup; their content alone does not authorize access. Kirelden does not persist full Gumroad sale payloads, buyer billing addresses or card details in its payment ledger.

These records support delivery, payment verification, refunds, chargebacks, revocations, fraud prevention, security and necessary accounting, legal and audit purposes. Retention depends on those purposes and applicable obligations, rather than an invented fixed period. Records should be deleted or anonymized when no longer necessary and legally permitted; this statement does not promise automatic deletion of all payment records on account deletion. Hosting and payment providers have their own retention practices.

Retention and deletion

Trivia attempts and private challenge records are retained only as needed for game history, fair-play controls, security and the features described here. The authenticated account-deletion workflow removes linked player profiles, attempts, answers, exposure and progression. A separate history-only deletion interface is not yet active. Existing guest records remain under their browser capabilities; contact support for requests concerning those records. Historic compatibility source data expires 30 days after creation; a former Pro purchase did not extend that source-data retention. New compatibility assessments and purchases are disabled.

Your rights and contact

Depending on where you live, you may have privacy rights. Signed-in users can submit a privacy request through Help / Support without sending cookies, challenge links or other access credentials.

In-app support

Signed-in account holders can submit a subject and message using Help / Support and read their own requests, statuses and replies. Kirelden stores the account link, category, messages, status and timestamps. Only the account holder and explicitly authorized support operators can read the thread. This is not live chat, email delivery or a 24/7 service. Do not include passwords, card details, access codes or private links.

Resolved support content is eligible for automatic deletion after 30 days only after an operator confirms that no dispute, payment obligation, fraud/security investigation or legal retention requirement remains. Other threads are held for review. Account deletion removes the account link but may retain necessary support evidence; support content is not promised to be erased immediately on account deletion. In-app support requires a signed-in account and is not available after account deletion.

Age restrictions

Knowledge Arena is general-audience trivia and is not offered to children under 13. Parental or guardian permission may be required by applicable law. Pro purchasers must meet applicable legal contract-age and capacity requirements and Gumroad’s eligibility requirements. The current trivia profile does not collect a date of birth; purchase acknowledgement is self-declared, not identity or age verification. Use in-app support if you believe a child under 13 has created an account.

First-party aggregate measurement

Kirelden measures Brain landing visits, Start clicks and Pro-page visits with short-lived, random per-page request identifiers to suppress duplicate requests. These identifiers are not stored in browser cookies or persistent browser storage. Events contain no account identity, email, IP address, puzzle answers, private links or payment credentials. Only predefined Instagram campaign labels are accepted; arbitrary URL parameters are not saved. The optional browser measurement respects Do Not Track and Global Privacy Control signals.

Completed onboarding and Brain attempts are counted from authoritative server-side completion transitions without adding a visitor or account identity to these events. Verified purchases are counted separately from payment records, never from checkout clicks. Kirelden does not link anonymous visitors across login or devices; aggregate counts are not unique people or an end-to-end attributed conversion rate. New measurement events are eligible for deletion after 30 days by the protected scheduled cleanup. Payment records retain their separate purpose-based policy.

Updated 9 October 2026.