Privacy Policy

Last Updated: February 6, 2025

Overview

This Privacy Policy describes how KDAssist collects, uses, and protects your personal information. By using this site, you consent to the data practices described herein.

Information Collection

Information You Provide

When you create an account, we collect:

Email address
Password (encrypted via industry-standard hashing)
Username
Profile information (achievements, tracking data, custom descriptions)
Profile picture (if uploaded)
Cave score data

Automatically Collected Information

When you access KDAssist, we automatically collect:

IP address
Browser type and version
Operating system
Referring URLs
Pages accessed and time spent
Device identifiers

This data is collected through server logs and cookies.

Use of Information

We use collected information to:

Provide and maintain site functionality
Authenticate user accounts
Store user preferences and tracking data
Monitor and analyze site usage
Improve site performance and features
Communicate important updates or security notices
Detect and prevent fraudulent activity

We do not sell, rent, or trade your personal information to third parties.

Third-Party Services

Google Analytics

We use Google Analytics to analyze site traffic and user behavior. Google Analytics collects:

Anonymous usage statistics
Approximate geographic location (city/country level)
Browser and device information
Page views and session duration

Google Analytics operates under its own privacy policy. To opt out of Google Analytics tracking, visit: https://tools.google.com/dlpage/gaoptout

No Other Third Parties

We do not share your personal data with any other third-party services, advertisers, or data brokers.

User-Uploaded Content

Users may upload profile pictures. These images are:

Stored on our servers
Visible to other users on your profile
Subject to our Terms and Conditions and DMCA Copyright Policy

You are responsible for ensuring you have the right to upload any images.

Data Storage and Security

Security Measures:

Passwords are hashed using bcrypt or equivalent algorithms
Data transmission is encrypted via HTTPS
Access to user data is restricted to necessary system operations
Regular security audits are performed

Storage Location:
Data is stored on secure servers provided by our hosting service.

Security Limitations:
No system is completely secure. While we implement industry-standard security measures, we cannot guarantee absolute security. Users are responsible for maintaining strong, unique passwords.

Data Retention

Active Accounts: Data is retained for the duration of account existence
Deleted Accounts: Data is permanently deleted within 30 days of account deletion
Backups: Deleted data may persist in backups for up to 30 days before permanent removal
Analytics: Google Analytics retains anonymous data per their retention policy

Your Rights

You have the right to:

Access your personal data
Correct inaccurate information
Request deletion of your account and data
Export your data
Withdraw consent for data processing

Exercising Your Rights

Account Deletion:
Navigate to Account Settings and select "Delete Account." All associated data will be permanently removed within 30 days.

Data Access or Inquiries:
Submit requests to rvstum@gmail.com. We will respond within 30 days.

Cookies

KDAssist uses cookies for:

Session management (keeping users logged in)
User preferences
Analytics tracking

For detailed information, see our Cookie Policy.

Users may disable cookies through browser settings, though this may impair site functionality.

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected
Right to know whether personal information is sold or disclosed
Right to refuse the sale of personal information (we do not sell data)
Right to deletion of personal information
Right to non-discrimination for exercising privacy rights

To exercise these rights, contact rvstum@gmail.com.

International Users

KDAssist is operated from California, United States. If you access the site from outside the United States, your information will be transferred to and processed in the United States.

Children's Privacy

KDAssist does not have an age restriction. However, we do not knowingly collect personal information from children under 13 without verifiable parental consent. If we become aware that we have collected such data, we will delete it promptly.

Parents or guardians who believe we have inadvertently collected information from a child under 13 should contact rvstum@gmail.com.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated via the site or email. Continued use after changes constitutes acceptance of the updated policy.

Contact Information

For questions or concerns regarding this Privacy Policy or your data:

Email: rvstum@gmail.com

We will respond to legitimate inquiries within a reasonable timeframe.

Compliance

This Privacy Policy is designed to comply with:

California Consumer Privacy Act (CCPA)
General Data Protection Regulation (GDPR) basic requirements
Other applicable data protection regulations