Effective 22 September 2026 · applies to kludoku.com and its regional hosts
Kludoku is operated by Suenram Productions Inc., DBA OnnieHEX ("we"). This page describes everything the game stores and why. The short version: we keep what the game needs to work, we do not sell data, and you can download or delete everything yourself.
If you play as a guest, your games, settings and results are stored under one anonymous
session identifier, kept in an essential cookie called mdk_sid. If you create an
account, we additionally store your chosen username, your email address and a salted hash of
your password — never the password itself. Leaderboards show the username you picked and
nothing else.
We record gameplay events: screens visited, moves made, time spent, and the places players get stuck. They are stored against the session identifier described above, and against your account if you have one. We do not ask for consent to do this and we do not hide behind calling it anonymous: it is pseudonymous personal data, and we rely on legitimate interest rather than consent because it is first-party, never shared with anyone, never sold, kept in a separate database, deleted after 180 days, and because you can stop it at any time. Settings → Gameplay analytics → Off stops it immediately, in your browser and on our side, whether or not you have an account. That switch is your right to object under Article 21, and it takes one click.
We use this data to find out where the game is failing people and to fix it, and we use it in groups rather than one player at a time. If the events say that players who reach a particular case tend to start guessing, that tells us the case is badly taught, and we rewrite the case for everyone. What we do not do is build a profile of you in order to treat you differently from the next player: no targeting, no personalized advertising from your play, no selling or sharing a behavioural profile, no decision about you made automatically from one. If we ever want to use what we know about your own play to change your own game — offering a hint because you seem stuck, say — we will say so on this page first, in this section, before we ship it.
Some numbers are kept with no subject attached at all: how many people opened an expert case today, how many finished one, and on which platform. No session, no account and no IP is recorded against them, so there is nothing in a counter to identify, export or delete. They are what still tells us a difficulty is broken when most players have switched analytics off.
Where ads appear on this site they are served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on a visitor's prior visits to this website and to other websites. Google's use of advertising cookies enables it and its partners to personalize the ads you see. You can opt out of personalized advertising at Google Ads Settings, or opt out of a wider set of third-party vendors' cookies at www.aboutads.info/choices. Visitors in the European Economic Area and the UK are asked for consent before any personalized advertising through a certified consent banner. Premium accounts see no ads at all.
We use the country you connect from to send you to our nearest server, to keep ads off in mainland China, where our site may not show them, and to count players by country; the country is kept with each game you start. Usually Cloudflare, the network our site runs behind, tells us the country (and, where its location headers are on, the city, which goes into aggregate visit counts only). Our mainland-China server has no Cloudflare in front of it, so there we look your IP address up ourselves — in memory, keeping only the country and never storing the address — in the free country database by DB-IP: IP Geolocation by DB-IP.
Premium purchases are processed by the payment provider shown at checkout; we never see or store card numbers.
The games and gameplay events from that browser session are attached to your new account. That is so your own history is actually yours — and so that deleting the account deletes them, which it could not do while they were filed under a session id that nothing connected to you.
From Settings → Account inside the game you can download every record we hold about you as a JSON file, change your password, or permanently delete your account and everything attached to it — games, points, analytics events and all, in one transaction. Guests can wipe their session the same way, and it reaches just as far. To object to analytics without deleting anything, use the switch described above. For requests under GDPR, CCPA or any other privacy law — access, correction, deletion, objection — write to [email protected] and we will answer within 30 days.
mdk_sid — essential session cookie, keeps your games attached to you.
Local storage holds your settings (theme, language, sound) on your own device. Advertising
cookies, when ads are enabled, are set by Google as described above. That is the complete
list.
Questions: [email protected] · Contact · Terms of service