What we keep, and why

The website (kcd-mp.com)

There are no accounts here. The site sets two technical cookies it cannot work without — one holds your visit together, the other protects its forms — and both lapse two hours after your last page. The web server keeps ordinary access logs — the address you connect from, the page you asked for, the time — for a short while, for security and debugging, and nothing else is done with them. Analytics run only if you allow them — see below. The site is served through Cloudflare, which may set its own technical cookies.

The forum (forum.kcd-mp.com)

An account is a username, an email address and either a password (stored hashed) or a link to the account you signed in with. What you post is public, and the forum records the address a post was made from so that abuse can be dealt with. It sets cookies to keep you signed in. It sends email only about your account — confirmation, password reset, and the notifications you turn on yourself.

Signing in with Discord or Google gives the forum your name or username, your email address and your avatar, and nothing more: it cannot read your messages or post as you. You can unlink that account from your forum settings at any time and keep the forum account with a password instead.

The docs (docs.kcd-mp.com)

Plain pages with nothing to sign in to. They set no cookies of their own; the light or dark theme you pick stays in your browser's storage and is sent nowhere. Analytics as on the site: only if you allow them.

Analytics, only if you say so

On your first visit a notice asks whether we may count your visit with Google Analytics. Until you click Accept, nothing is loaded from Google and nothing is sent to it. Declining keeps it that way, and every page works the same whichever you choose.

If you accept, the site, the forum and the docs load Google Analytics. It records the pages you open, the files you download and the links you follow out, the page you came from, your browser, device, screen size and language, and roughly where you are — a country and a city, worked out from your IP address, which Google Analytics does not keep. Its two cookies, _ga and _ga_…, tell one visitor's visits apart from another's.

Google handles this for us as a processor, and may do so in the United States under the EU–US Data Privacy Framework. Google signals and every advertising feature are off: nothing is used for ads or tied to a Google account. The detailed records are deleted after two months; what stays is totals — so many visits to a page, so many downloads.

Cookies

Every cookie the site, the forum and the docs set:

One answer covers all three, and you can change it whenever you like — with “Cookie settings” at the foot of every page, or right here. Declining after you accepted deletes the Google Analytics cookies.

Change your cookie choice

Game servers

Servers are run by whoever hosts them, on their own machines. When you join one, it sees:

• the name you chose in the launcher and the address you connect from;
• a player key your game makes for that server, so it can tell you apart when you come back — every server gets a different one;
• the Steam account number your game reports, when it runs from Steam, so a game mode can tie you to your Steam account;
• a scrambled code for your PC, so a game mode can keep a banned player from coming back under a new name. Your PC makes it from four parts — the system, the motherboard, the disk Windows runs from and the Windows install — and every server gets a different one, so servers cannot compare notes. The serial numbers themselves never leave your computer.

The server's host decides what to keep, such as a record of your visits and your name on that server. KCD:MP does not collect any of this centrally. The public server list on this site shows servers, not players.

Crash reports

When the game crashes or freezes, the launcher sends a report to Sentry, an error-tracking service, on its servers in the EU. A report holds the game's logs, a snapshot of the game's memory at that moment, your Windows version, graphics card and memory, and an anonymous id the launcher made for your install. Before it leaves your computer, every folder path with your user name in it, your Windows user name, your computer's name, any server password and, with the Epic Games Store copy, your Epic account's sign-in, name and id are taken out. One install sends at most three crash reports and one freeze report a day, with one memory snapshot of each. While you play, the error lines KCD:MP writes into its log go the same way.

Both are on unless you turn them off: untick “Send crash reports and error messages to the KCD:MP team” in the launcher's Settings. “Report a problem” in the launcher sends what you write with the logs of your last game, cleaned the same way, and your email address only if you type one in.

Who else sees anything

Cloudflare, in front of the site, the forum and the docs; Discord and Google, if you sign in with them; Google Analytics, if you accept it; Sentry, for the launcher's crash and problem reports; and the mail service the forum sends through. Nothing is sold, shared or handed to anyone else. Kingdom Come: Deliverance II, Steam, the Microsoft Store and the Epic Games Store belong to Warhorse Studios, Valve, Microsoft and Epic Games — their own policies apply to the game itself.

Your account, your call

Want a copy of what the forum holds about you, a correction, or the account gone? Ask an administrator on the forum, and it is done. Questions about this page go the same way.