PRIVACY POLICY

WHO WE ARE

Planktillion is an independent project. It is not affiliated with, endorsed by, or associated with Krillion or Krillion.io. Play the original at krillion.io. Any trademarks referenced belong to their respective owners.

For any privacy question, or to exercise any right below, write to hello@planktillion.io. That address is the data controller contact for the purposes of the UK GDPR and the EU GDPR.

THERE IS NO ACCOUNT

You cannot sign up or sign in, because there is nothing to sign in to. We hold no email addresses, no passwords, and no user records. There is no database of players. Nothing you do here is tied to a persistent identity by us.

WHAT THE GAME ITSELF STORES

• Your browser’s local storage holds your last-used callsign, your sound, spelling, motion and scanline settings, and the ids of prompts you have already been shown so the game does not repeat questions at you. This stays on your device. We never receive it. Clearing your browser data erases it.
• One value in session storage during a battle — a random token that lets you rejoin your room if your connection drops. It is meaningless outside that room and disappears when you close the tab.
• The room you are in, while you are in it. The server keeps your typed callsign, your answers and your score in memory for the length of the game so it can run the round and show the scoreboard. It is never written to disk. When the room empties, or goes idle for thirty minutes, it is deleted. Restarting the server erases every room.
• Ordinary server logs. Like every web server, ours records the IP address, timestamp and URL of requests, for security and debugging. These rotate out and are not used to build a profile of you.

ADVERTISING, AND THE COOKIES IT USES

This game is free and is funded by advertising. Our advertising partner is Google AdSense. When ads are served, Google and its partners may set and read cookies or similar identifiers on your device in order to:

• count how often an ad was shown, and whether it was clicked;
• limit how many times you see the same ad;
• detect and prevent fraudulent clicks;
• and, only if you consent, select ads based on your interests or previous browsing.

Google’s use of information from sites that use its advertising is described in How Google uses information from sites or apps that use our services. You can review Google’s own ad settings at My Ad Center, and opt out of interest-based advertising from many vendors at optout.aboutads.info or youronlinechoices.eu.

Our lawful basis for advertising cookies is your consent. If you are in the UK or the EEA you are asked before any non-essential cookie is set. You can change or withdraw that answer at any time from the cookie settings link in the footer. Withdrawing consent does not make the ads disappear — it makes them non-personalised.

Everything else here — running the game, keeping a room alive — rests on our legitimate interest in providing a game you asked to play. There is no profiling by us and no automated decision-making.

COOKIES, PRECISELY

We set no cookies of our own for tracking. We run no analytics of any kind: no Google Analytics, no tracking pixels, no fingerprinting. The local and session storage described above are not cookies and are never sent to us. The only cookies this site can cause are:

• A consent record — stores your answer to the cookie banner so you are not asked again on every visit. Strictly necessary; it exists only because you were asked.
• Google advertising cookies — set by Google when ads are served, as described above, and only to the extent you have consented.

OTHER SERVICES THIS PAGE TOUCHES

• Google Fonts serves the typeface. Your browser requests it from Google’s servers, which exposes your IP address and user agent to Google under their privacy policy.
• Our hosting and network provider processes traffic to reach the game and sees connection metadata in the ordinary course of routing it.

CHILDREN

Planktillion is a general-audience game. It is not directed at children under 13, we do not knowingly collect personal information from children under 13, and we do not ask any visitor their age because there is no personal information to attach it to.

Advertising on this site is configured so that ad requests are not used for personalised advertising to children. If you believe a child has provided personal information through this site, write to hello@planktillion.io and we will delete it. If you are under 13, please do not use the game.

WHAT OTHER PLAYERS SEE

In a battle, the other people in your room see the callsign you typed and the answers you submit. That is all. Pick a callsign you are happy for strangers to read, and do not type anything into the answer box you would mind them seeing. Public rooms are listed by name and host callsign so anyone can find them; a code-only room is not listed anywhere.

WHAT WE NEVER DO

• We never sell your personal information, and we never share it for cross-context behavioural advertising beyond the advertising described above.
• We never ask for payment details. The game is free. If anything anywhere asks you to pay for Planktillion, it is not us.
• We never ask for a password, because there are no passwords here.

YOUR RIGHTS

If you are in the UK, the EEA, or a US state with a comprehensive privacy law, you have rights of access, correction, deletion, restriction, objection and portability, and the right to complain to your data protection authority (in the UK, the ICO). In practice there is very little for those rights to reach: clearing your browser data removes your side, closing the tab removes ours, and the cookie settings link controls the rest.

California residents have the right to know, delete, correct, and to opt out of the sale or sharing of personal information. We do not sell personal information. Serving personalised ads may count as “sharing” under the CPRA — which is precisely what the consent banner controls, so setting it to reject stops any such sharing. Write to hello@planktillion.io and we will answer within 30 days.

SECURITY AND RETENTION

We keep the amount of data we hold at close to zero on purpose, because the safest data is the data that was never collected. Rooms live in memory and die with the process. Server logs rotate. If we ever discover a breach affecting anything about you, we will say so publicly and notify the relevant authority as required.

CHANGES

If this policy changes we will update the date at the top, and material changes will be flagged in the game before they take effect. If we ever add an advertising partner beyond Google, this page will name them before their ads go live.