Privacy Policy

Last updated: August 2026. This policy explains how we handle your data in line with the EU GDPR and applicable children's-privacy laws.

1. Who is responsible

The data controller is KOKOWorlds, Nikola Iliev, Stauffenbergstraße 25, 04552 Borna, Germany — info@inclusion-games.com. Full details are in our Imprint.

2. The data we process

Account data: the name and email address you provide, and a securely hashed password. We never store your password in readable form.
Subscription status: which plan you are on and whether your trial or subscription is active.
Technical data: standard server logs (e.g. IP address, browser type) needed to operate and secure the service.

📷 About the camera. The games use your device's webcam for hand tracking. This happens entirely in your browser, on your own device. No video, image, or camera frame is ever recorded, stored, or transmitted to us or any third party. Turn the camera off and the data is gone.

3. Children's privacy

InclusionGames is made for children, including children with disabilities, but accounts are created and managed by adults (parents, teachers or therapists). We do not knowingly collect personal data directly from children, and the games themselves do not require a child to enter personal information. If you believe a child has provided us personal data, contact us and we will delete it.

4. Cookies and local storage

We use your browser's local storage to keep you signed in (a login token) and to remember your chosen language. We do not use third-party advertising or cross-site tracking cookies.

5. Payments

Payments are processed by our payment providers Stripe and PayPal, which handle the payment data needed to complete your purchase under their own privacy policies. We do not receive or store your full card details.

6. Email

We send transactional emails (account verification, password reset, and — only if you ask — your game result) via an email delivery service. We do not send marketing email without your consent.

7. Hosting

The service is hosted on servers operated by Hetzner Online GmbH in the European Union. Hosting is covered by a data processing agreement (AVV) under Art. 28 GDPR.

8. Processors and transfers outside the EU

We use a small number of carefully selected service providers (processors) to operate InclusionGames: hosting, email delivery, payment processing, and technical services that support the preparation and translation of game content. Each of them acts only on our documented instructions and is bound by a data processing agreement under Art. 28 GDPR (Auftragsverarbeitungsvertrag, AVV).

Some of these providers are established in the United States. Where personal data is transferred outside the EU/EEA, we rely on the safeguards permitted by Chapter V GDPR — the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) and, where applicable, an adequacy decision such as the EU–US Data Privacy Framework (Art. 45 GDPR) — together with additional technical and organisational measures.

Only the data actually needed for the respective purpose is transmitted. In particular, no camera image, video or biometric data ever leaves your device: hand tracking runs entirely in your browser. You can request the list of processors and information about the applicable safeguards at any time at info@inclusion-games.com.

9. Legal bases & retention

We process account data to perform our contract with you (Art. 6(1)(b) GDPR) and to meet legal obligations (Art. 6(1)(c)). We keep account data for as long as your account exists; you can ask us to delete it at any time.

10. Your rights

Under the GDPR you have the right to access, correct, delete, restrict, and port your data, and to object to processing. To exercise any right, email info@inclusion-games.com. You also have the right to lodge a complaint with a supervisory authority.

11. Changes

We may update this policy as the service evolves. The current version is always available on this page.