Privacy policy
Last updated October 28, 2026. What Kingdom Island collects, why, who helps us handle it, and the choices you and your parents have.
Who we are
Kingdom Island (the game, the iPhone and iPad app, play.kingdomisland.com and this website) is run by Venbit ("we", "us"). You can reach us at support@kingdomisland.com or through the contact form.
What we collect
When you make an account
- A dragon name you make up, and a password. Passwords are stored by our account provider in hashed form; we never see or store them in plain text.
- Your birth month and year, so we know whether Safe Chat applies.
- For players under 13: a parent's email address, used to ask for approval and to send password resets.
- For players 13 and up: an optional recovery email for password resets and logging in by email.
While you play
- Game progress: silver and gold, items and outfits, card backgrounds, the dragons on your login, the players you follow, the players who follow you and the players you've blocked, friendship hearts with characters, Fireball Frenzy results, and the room and spot where you last played.
- Chat. Messages are sent through our multiplayer server to the other players in the room and checked against our chat rules on the way. To keep players safe, we keep a record of what's said in rooms, including messages our rules stopped, for 90 days and then delete it. Only our moderators can see it, and they use it to look into reports and rule-breaking.
- Reports. When a player reports another player, we keep the report, the reason they picked, the room and what was said there at the time, for our moderators to review.
- Basic technical information that any online service receives, such as IP address, device and browser type and the time of a request, which our hosting providers record in short-lived server logs.
What we don't collect
We don't ask for real names, photos, home addresses, schools, phone numbers or precise location. There are no ads in Kingdom Island, and we don't sell personal information or share it for advertising.
Children under 13
Kingdom Island is made for children, and we collect as little as we can from them.
- From a child under 13 we collect only the items above: a made-up dragon name, a password, birth month and year, a parent's email address and game progress.
- We use the parent's email address to tell the parent about the account and to let them approve it or decline it. Declining deletes the account and everything saved with it. Password resets for the account are also sent to the parent.
- Children under 13 always use Safe Chat. They can only send phrases from a fixed list and only see phrases from that list. They can't type their own messages, and parents can't turn Safe Chat off.
- Children under 13 never chat with the AI characters. The characters answer them with lines written by our team, and nothing a child says is sent to an AI service.
- A child can play with Safe Chat while the approval email is waiting for the parent.
- Other players in the same room see a child's dragon and dragon name. Anyone can follow a player, and the players a child follows or is followed by can see when the child is online and which room they're in. A child can remove a follower or block a player at any time.
Parents can ask to see the information we hold about their child, ask us to delete it, or tell us to stop collecting it, by emailing support@kingdomisland.com from the address on the account. We'll check that the request comes from the parent before acting on it.
How we use information
- To run the game: logging in, saving progress, showing your dragon to other players, Followers lists (which show the players you follow, and the players who follow you, when you're online and which room you're in), blocking and Fireball Frenzy.
- To keep chat safe: checking messages against our chat rules, applying Safe Chat, and letting moderators review reports and chat records and turn off chat or ban a player for a set time.
- To email parents about approvals and to send password resets.
- To answer messages sent to support.
- To fix problems and keep the service secure.
AI character replies
When a player who is 13 or older talks to one of the island's characters, the message and the recent conversation with that character are sent to our AI provider, Anthropic, to write the character's reply. The dragon name may be included so the character can greet the player. Anthropic processes this for us under its commercial terms and does not use it to train its models. Players under 13 are never sent to the AI service.
Who helps us run Kingdom Island
We use a small number of service providers, who handle information only to provide their service to us:
| Provider | What they do |
|---|---|
| Supabase | Stores accounts and game progress |
| Vercel | Hosts this website, the web game and our account and character services |
| Fly.io | Runs the multiplayer server that connects players in the same room |
| Mailgun | Sends parent approval, password reset and support emails |
| Anthropic | Writes the AI characters' replies to players 13 and up |
| Apple | Distributes the iPhone and iPad app through the App Store |
We may also share information if the law requires it, or to protect the safety of players.
Accounts from the original game
The original Kingdom Island (2012 onward) had 125,729 accounts. We kept each account's dragon name, a scrambled copy of its old password (used only to check it the first time the player logs in again), its email address if it had one, its items, last outfit, the players it followed and its ban status, so returning players can claim their dragons. We did not carry over IP addresses, chat logs, private messages or device identifiers. When a player claims an original account, it becomes a new account under this policy and the old password copy is replaced.
How long we keep information
We keep account information for as long as the account exists. A declined account is deleted straight away. When an account is deleted at your request, its profile and game progress are removed from our database. Password reset links expire after an hour and work once.
Your choices
- You can change or remove your recovery email, or ask us to delete your account, by contacting support.
- You can log out at any time, and untick "Remember me" so you're logged out when you close the game.
- Depending on where you live, you may have rights to access, correct or delete your information. Email us and we'll help.
This website
kingdomisland.com doesn't use advertising, analytics or tracking cookies. It remembers whether you picked the day or night look in your own browser's storage, which never leaves your device. If you use the contact form, we receive your email address, your message and any dragon name you add, and use them only to reply.
Security
Connections to Kingdom Island are encrypted. Passwords are stored hashed, private account details are kept in a separate table the game can't read, and players can only change their own progress. No system is perfectly secure, so please use a password you don't use anywhere else.
Changes and contact
If we change this policy, we'll update the date at the top. If a change affects how we handle children's information, we'll tell parents by email first. Questions? Email support@kingdomisland.com.