What this site keeps about you, and why. Updated 6 October 2026.
KvK HQ helps Kingshot kingdoms collect KvK buff requests and build the buff schedule. We keep what that needs: your in-game details and answers if you send a request, and your Discord name if you sign in. We don't sell it, show ads, or use trackers or analytics. Players don't need an account unless their kingdom asks them to sign in with Discord, and we never ask for your email.
To check that a Player ID is real and matches the name and alliance you gave, the site may look it up with MightPulse, a Kingshot data service, when your kingdom has turned that on. MightPulse gets the Player ID; what comes back (name, kingdom, alliance and rank) is kept for a day.
Sending a request gives your browser an anonymous session, so you can come back to your request. Like every session, it keeps the IP address and browser it started from, for up to 30 days after you last use it. If you later sign in with Discord, your requests move to that account.
Admins sign in with Discord, and players can too (for reminder DMs, or when their kingdom asks for it). We ask Discord only for who you are: your Discord id, username, display name and avatar. Not your email, servers, friends or messages. Discord's sign-in tokens are stored encrypted.
Each sign-in keeps a session for up to 30 days after you last use it, with the IP address and browser it started from. For admins we also note the day you last used the site, which decides when an unused kingdom can be claimed by someone else.
Someone who tries to set up a kingdom that's already taken sees the owner's Discord username, the claiming player's name and rank, when it was claimed and the day an owner was last active, so they know who to talk to and when the claim lapses.
A kingdom's owner can add the bot to their server. It posts the KvK announcement and schedule in the one channel the owner picks, edits its own posts, can make a server invite, and sends reminder DMs to players who asked for them. To work out where it may post, it reads the server's channel and role names and permissions. It never reads messages or looks at who is in the server.
To stop abuse, the site counts requests per IP address and keeps a record of abuse (such as failed checks) by IP for 30 days. An IP blocked for abuse is remembered until 90 days after the block ends.
Cloudflare keeps request logs, including IP addresses, for 3 days, which we use only to find and fix errors.
Cookies keep you signed in (the session above) and, for ten minutes while an owner adds the bot, check the browser that comes back from Discord is the one that left. Your browser also keeps a copy of the request you sent (dropped once it's old), your draft, preferences like light or dark mode and time zone, and a note that you've signed in to the admin here, so the home page knows to show your kingdoms. None of it is used to track you.
Requests and schedules stay with the kingdom across KvKs, so admins can look back at earlier ones, until the kingdom's admins delete them or you ask us to. Your Discord details stay until you ask us to delete them. Reminders stay until you turn them off. Lookups, abuse records and IP blocks are cleared on the times above.
If this page changes, the date at the top changes too. Questions: @stramel on Discord. See also theterms.