Privacy policy
Last updated: 2026-08-21
Who we are
Kosal is an online game published at kosalgame.com. Questions about this policy go to support@kosalgame.com.
What we store about your account
- Your username and email address.
- A salted hash of your password. We never store the password itself.
- Whether your email address is verified, and the roles attached to the account (for example, site admin).
- Which of our games the account has been used in, and when the account was created.
Cookies
This site sets one cookie, mundus_session, when you log in. It keeps you signed in and
nothing else. It is HttpOnly, so scripts cannot read it, and it expires after 30 days, when you log out, or when
you change your password. There are no analytics or marketing cookies, and no third-party scripts or fonts load
from this site.
If you have an account, we email you only to verify your address and to reset your password.
Separately, you may ask us for news by email on the home page. That is optional, it is never switched on for you, and creating an account does not sign you up. If you do ask, we store the address, the date you asked and the wording you agreed to, so we can show that you consented. We use it to send news about Kosal and nothing else; we do not sell it, and we do not pass it to an advertiser. The list is held in our own database on our own server, and if we later move it to an email delivery provider we will say so here first. Every mail carries an unsubscribe link, and you may also write to support@kosalgame.com to be removed. We keep the record of a withdrawn consent so that we can prove we acted on it.
Game data
Your characters, items and progress are stored under your account id in the game's own database, and posts or uploads you make on this site are stored under the same id.
Retention
We keep the data above for as long as the account exists.
Deleting your account
Self-service deletion is not available yet. Email support@kosalgame.com from the address on the account. Within 30 days we delete the account record, its game data and any uploads it made, and confirm by reply.
Your rights
Under the GDPR you may ask for a copy of your data, have it corrected or deleted, receive it in a portable form, or object to how it is used. Write to the support address for any of these.
Changes
When this policy changes, the date at the top changes with it.