Privacy

In short

• You can play every game without signing up. Then we don't know who you are.
• If you create an account, we store your email address, the name you choose and your progress in the games.
• The name you choose is shown on the weekly leaderboard. A nickname is perfectly fine.
• We never sell information about you, and there are no ads on Kokomo.
• Measurements that tell us where you came from only start if you choose “Accept”. The games work exactly the same if you decline.
• If you are under 13, you need permission from a parent or guardian to create an account.
• You can always ask us to see or delete everything we store about you.

Everything is explained in more detail below.

1. Who is responsible for your information

Kokomo is run by Nordic Dynamic ehf., reg. no. 580711-0810, Bræðratunga 16, 200 Kópavogur, Iceland. The company is the controller of the personal data described here. Questions about privacy go to kokomo@kokomo.is.

This policy is based on the Icelandic Data Protection Act no. 90/2018 and the EU General Data Protection Regulation (GDPR).

2. When you play without an account

Game progress and settings are stored in your browser (localStorage) and are not sent to us. This is needed so the games remember where you were and whether you chose a light or dark look.

Anonymous counting. When you open or finish a game we record the event: which game it was, whether the device is a phone, tablet or computer, and whether the page is in Icelandic or English. No identifier is attached, nothing is written to your device and we cannot link two visits together. We use this to know which games are played and what needs fixing. The legal basis is our legitimate interest in running and improving the site.

Error reports. If something breaks on a page, your browser sends us the error message, the page address and the browser type. These are deleted automatically after 30 days. The legal basis is our legitimate interest in keeping the site working.

Feedback. If you send us feedback, we store the text, which game it concerns and the browser type. Please don't write your name or other personal details in feedback. Feedback and error reports are collected in a task list on GitHub, and we use an AI tool (Claude by Anthropic) to sort them and find fixes. Feedback is deleted after 24 months.

The weather on the front page is fetched directly from Open-Meteo, a Swiss weather service. Your browser connects to it to do this, so it sees your device's IP address. Nothing else is sent to it.

Speaking practice. In “First steps in Icelandic” you can practise pronunciation with your microphone. This uses the speech recognition built into your browser, and the audio goes to the browser maker (for example Google in Chrome) but never to Kokomo. The microphone only starts when you press it.

Servers. As on every website, the servers that host Kokomo see your IP address when you load a page. Our hosting providers keep such connection logs for a short time for security. We don't use them to find out who you are.

3. If you choose “Accept” in the cookie banner

Then measurements are added that tell us how people find Kokomo and whether they come back:

• Our own measurement. A random number is saved in your browser so we can see whether the same browser returns. We also record where you came from (for example a search engine or the domain of the site that linked to us, never the full address), whether this is a first visit, and if you have signed in we link the events to your account.
• Google Analytics. Google collects similar information for us and sets its own cookies. Google processes the data as our processor.

The legal basis is your consent. You can withdraw it at any time by clicking “Cookies” at the bottom of any page and choosing “Decline”. The measurement then stops and the number is deleted from your browser.

If you decline or don't answer the banner, only the anonymous counting from section 2 takes place.

4. If you create an account

An account is optional. It lets you keep your progress, palms and outfits across devices.

What we store:

• Email address and password. The password is stored encrypted and nobody at Kokomo can read it.
• Signing in with Google. Google sends us your name, email address and a link to your profile picture. We use the email address to sign you in, but we don't display the name from Google or the picture.
• Display name that you choose and can change at any time. If you don't choose one, you get “Lundi” and four digits.
• Game data: progress in each game, points, streaks, achievements, palms, what you have bought with palms and your puffin's outfit.
• Friends, gifts and duels, if you use them: who your friends are, which gifts you send and receive, and duel results.
• Invite links: if you signed up through another player's link, we record who invited you so they get their palms.
• Push notifications: if you turn them on, we store a technical address provided by your browser so we can remind you about your streak. You can turn them off in the account window or in your browser.
• Marketing email: if you tick the box to receive news by email, we store that choice and when it was made. You can opt out at any time in the account window or through a link in every email.
• Age confirmation: that you confirmed being 13 or older, or having a parent's permission, and when.

Legal basis: The account itself and what comes with it is based on our agreement with you (the terms). Push notifications and marketing email are based on your consent.

5. What is public

The weekly leaderboard shows your display name, your points, your streak and your puffin's outfit. Anyone who visits Kokomo can see the list. Use a nickname if you don't want others to recognise you, and never use your full name as your display name if you are a child.

Your friends can also see your name and number of palms on the friends list.

Everything else connected to your account is only visible to you.

6. Children

Kokomo is for all ages and many players are school pupils. That is why:

• All games are open without an account and without measurement.
• To create an account you must be 13 or older. Younger children may create an account with permission from a parent or guardian, as article 10 of Act no. 90/2018 provides.
• We show no ads, do no profiling and make no automated decisions about players.
• Parents and guardians can contact us on behalf of their child to see, correct or delete the child's data.
• If we learn that a child under 13 has created an account without permission, we may delete the account.

7. Schools and teachers

Some teachers send pupils to Kokomo, even though the site is made for fun and is not reviewed teaching material. For them, this matters:

• Pupils don't need an account to play, and we recommend they play without one.
• Kokomo collects no class lists, pupil numbers or grades and receives no data from schools.
• Kokomo is itself responsible for the processing described here. A school that sends pupils to the site is not our processor, nor are we the school's.
• If a school needs information about the processing for its own assessment, we are happy to answer at kokomo@kokomo.is.

8. Who processes data with us

We never sell personal data. The following service providers process data on our behalf and only for the purposes described here:

When data leaves the European Economic Area, the transfer relies on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's standard contractual clauses.

9. How long we keep data

When an account is deleted we delete the email address, the display name and all game data, and disconnect measurements from the account. Information in backups disappears when the backup expires, after 90 days at the latest.

10. Your rights

You have the right to:

• know what information we store about you and get a copy of it,
• have incorrect information corrected,
• have the information deleted,
• receive your data in a machine-readable format,
• object to processing based on legitimate interests,
• restrict processing while a complaint is being looked into,
• withdraw consent at any time, without affecting what was done before.

Send your request to kokomo@kokomo.is from the email address registered on the account, so we know the request comes from you. We reply within one month.

If our answer doesn't settle the matter, you can complain to the Icelandic Data Protection Authority, Persónuvernd (personuvernd.is).

11. Cookies and storage in your browser

Kokomo itself sets no traditional cookies. We use your browser's storage (localStorage) for game progress, settings and sign-in, which is needed for the site to work. Your choice in the cookie banner is also stored there.

The measurements in section 3 and the Google Analytics cookies are only switched on if you choose “Accept”. You can change your choice at any time under “Cookies” at the bottom of the page.

12. Security

Data is sent encrypted, access to the database is restricted so each player only sees their own data, and backups are encrypted. Only the owner of Kokomo has access to the admin panel.

13. Changes to this policy

If we change this policy we update the date at the top. If a change matters to account holders, we let them know on the site or by email before it takes effect.

14. Contact

Nordic Dynamic ehf., reg. no. 580711-0810, Bræðratunga 16, 200 Kópavogur, Iceland, kokomo@kokomo.is. See also the terms and the contact page.