Privacy Policy
Last updated: 2026-10-21. This page describes, as it actually works today, how KenQ Play handles data. We update it when that changes.
Who runs this site · Contact
KenQ Play is a free mini-game site run by an individual. For any question, including deleting your account or seeing or correcting your data, email a42599@gmail.com.
What we store
- Member accounts: username, email, a password hash (we can’t see your password), sign-up and last-login times, and whether your email is verified.
- Members’ favorites and recently played games (to sync across devices).
- Login sessions: a random token; the database stores only its hash.
- Verification and password-reset emails: our mailer is currently a development version. Emails are recorded in our database and not actually sent, and site admins can see the recipient and content.
- Abuse-prevention records: counts of logins, sign-ups and emails sent, keyed by your IP address, used only to stop password guessing and mass sign-ups.
- Site statistics: daily totals only (e.g. views, language, device type, game clicks). No email, no IP, and not shared with third-party trackers.
How long we keep it
- Account data: until the account is deleted.
- Login sessions: up to 30 days with “Remember me”, otherwise 1 day.
- Verify / reset links: expire quickly and work only once.
- Abuse-prevention counts: unused once their time window ends, and purged after 2 days.
- Daily statistics: the totals are kept long-term.
Cookies and local storage
- kq_session: keeps you logged in (HttpOnly), up to 30 days.
- kq_merge: merges this device’s favorites into your account after login, then deleted.
- kq_anon: a random anonymous ID, 400 days. It is not linked to your account and is currently not stored in our database.
- kq_first: the date of your first visit, 400 days, to count new and returning visitors.
- kq_vd / kq_vm / kq_r7: avoid counting a visitor twice in a day / month, 2 / 40 / 30 days.
- kq_env: only appears when a tester turns on QA mode, to keep test data apart from real data.
- Browser local storage kq_favs: when you’re not logged in, favorites stay on this device only.
- lang: remembers the language you picked when you switch languages, 1 year.
Third parties
- Hosting: the site and database run on Cloudflare (Workers, D1), so your connection passes through Cloudflare.
- Games: games come from third-party platforms such as GameMonetize and run in embedded frames (iframes). Those games and platforms may have their own ads, cookies and privacy policies, which we don’t control.
- Ads: ads are shown in isolated sandboxed frames that can’t read this site’s cookies or navigate the page away. Ad providers may set cookies under their own policies.
We don’t sell your personal data.
Deleting your account
There is no self-service delete button yet. Email a42599@gmail.com and we will delete your account, favorites, play history and login sessions. Daily statistics that are already aggregated and can’t identify you are not affected.
Ads and advertising cookies (including Google)
- This site uses, or will use, third-party vendors to show ads, including Google (AdSense) and Monetag.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet. Details: https://policies.google.com/technologies/ads
- You can opt out of personalised advertising in Google Ads Settings: https://adssettings.google.com , or opt out of some third-party vendors' use of cookies for personalised advertising at https://www.aboutads.info (Europe: https://www.youronlinechoices.eu ).
- Other vendors: Monetag (https://monetag.com/privacy/ ) — see their site to learn more and opt out of personalised ads.
- Visitors in the EEA, the UK and Switzerland: before personalised ads are shown we ask for your consent through a Google-certified consent management platform (CMP), and you can withdraw it at any time.
- Ads are shown in an isolated sandboxed frame: they cannot read this site's login cookies, navigate the page away or change your browsing history.