KittyKlash — Children's Privacy Notice

Effective 2026-08-13. Version 1.0.0.

This notice is for parents and guardians. It explains everything KittyKlash keeps about a child, why, who can see it, and how to make us delete it.

KittyKlash is operated by Raging Rhino Group, LLC. It is directed to children, so we follow the Children's Online Privacy Protection Act (COPPA).

The short version. We keep a made-up name, a PIN, and how many matches they won. No real name, no birthday, no address, no photos, no location, no advertising, no tracking. You can read it all or have it deleted by emailing privacy@companywrx.com.

1. What we collect from a child

Everything, in full:

What	Why	Required?
Username — a made-up login name	So they can sign back in	Yes
Display name — the name above the cat	So other players can tell cats apart	Yes (auto-assigned unless you buy full access)
PIN — 4 digits, stored scrambled	So nobody else can use their account	Yes
Game progress — coins, matches played, matches won, eliminations, which cat and outfit	So the game remembers between visits	Yes
Friend code, friends list, and which room they are in	So friends can play together	Only if they use friends
Session token	Keeps them signed in	Yes
Voice audio	Live voice chat, only if you turned it on	No — off by default

We ask a child for nothing else. No real name. No date of birth. No email address. No phone number. No home address. No photographs. No location. No school. Nothing about their family.

We never require a child to give more than is needed to play. That is a COPPA rule and also just the right way to build this.

2. What we collect from you, the parent

Your email address, and only that. We use it to:

record that you gave permission, and when;
let you exercise the rights in Section 6; and
tell you if something changes that matters.

We will not send you marketing. We will not sell or share it. It is not used for anything except your child's account.

3. Voice audio — what actually happens to it

If you enabled voice chat, audio passes live between players and is never recorded and never stored. We do not keep it, we cannot play it back, and we cannot review it.

That is a genuine privacy protection and a genuine limitation: if something is said to your child that you would want to know about, we will have no recording of it. That is the trade, and it is why the default is off.

4. Who can see what

Other players in a match see the display name and how the cat is dressed. Nothing else.
Friends additionally see whether the child is online and which room they are in, so they can join.
Nobody can search for a child by name. Friends are added by a code the child gives to someone they already know.
There is no free-text chat, so a child cannot type anything to a stranger and cannot be typed at.

We do not sell personal information. We do not share it for advertising. There is no advertising in KittyKlash and no third-party tracking or analytics.

The only outside companies involved:

Who	What they get	Why
DigitalOcean	The game's data, on their servers	Hosting
Stripe	Your card details, your email — never anything about your child	Only if you buy full access
Resend	Your email address	Only to email you about consent or your requests

We would also disclose information if the law required it, or to protect a child from harm. If that ever happened and we were permitted to tell you, we would.

6. Your rights — and how to use them

Email privacy@companywrx.com from the address you registered with. That is the whole process.

You can ask us to:

show you everything we hold about your child;
delete all of it, permanently;
stop collecting anything more — this closes the account;
turn voice chat off, or change it; or
remove friends, or turn friends off entirely.

Free, no reason needed, no obstacles. We aim to reply within a few days and will never take more than 30. We may ask you to confirm you are the same person who registered — that is to stop someone else deleting your child's account, not to slow you down.

Refusing or withdrawing consent is always allowed and the only consequence is that the account closes, because we cannot run it without keeping the things in Section 1.

7. How long we keep it

While the account is used — and no longer than we need it.
"Just play" accounts, created without a name or PIN, are deleted automatically once unused for a while. Nobody can sign back into one, so keeping it would be keeping data about a child for no reason.
When you ask us to delete — we do it, and it is gone from the live system immediately and from backups as those expire on their normal cycle.
Your consent record — we keep the fact that you gave permission, and when, for as long as the account exists. It is the evidence that we were allowed to run it.

8. Security

PINs are stored scrambled (scrypt), never in plain text. Session tokens are stored hashed. Accounts lock after repeated wrong PINs. Traffic is encrypted.

A 4-digit PIN is weak by design — it is what a young child can actually type — so it is protected by lockout rather than by complexity rules nobody would follow.

No system is perfectly secure. If information about your child were ever exposed, we would email you.

9. Changes to this notice

If we ever want to collect something new, share it with someone new, or change who can see what, we will email you and ask permission again before doing it. Silence is not consent.

10. Contact

A real person reads this address.

Raging Rhino Group, LLC 1521 Blake St Ste 1123, Denver, CO 80202

privacy@companywrx.com

You may also contact the Federal Trade Commission at ftc.gov/complaint about any children's privacy concern.

Version 1.0.0 — effective 2026-08-13.

Raging Rhino Group, LLC