Privacy
Last updated: 4 October 2026
This page explains which personal data Kuri x Kuri handles, what for, and what you can do about it. In short: we keep what is needed for you to play, we don’t sell your data, and there is no advertising or tracking.
Who is responsible
The controller of your data is Kuri x Kuri. For anything related to privacy, write to info@motor-scope.com.
What data we handle
- Your account: name, email and date of birth. If you sign up with email, also a password, which is never stored in plain text and which nobody at Kuri x Kuri can see. If you sign in with Google, we receive your name and email from Google.
- Your settings: interface language, active course, time zone and whether you want vibration.
- Your play: the games and exams you finish, what you type in each answer, whether it is correct and how long you take, and what is worked out from that: XP, level, daily streak, stats and rebel words.
- Technical data: when you use the site, the servers log data such as your IP address, browser type and the date of each request, so the service works and stays secure.
We don’t ask for or handle specially sensitive data.
What we use it for, and on what legal basis
- Providing the service: creating your account, saving your progress, showing you your stats and sending you account emails, such as verification or password changes. Legal basis: performing the terms you accept when you sign up.
- Checking the minimum age with your date of birth. Legal basis: complying with the rules that protect minors’ data.
- Keeping the game fair and secure: preventing cheating and abuse and fixing errors. Legal basis: our legitimate interest in the service working well for everyone.
- Understanding how Kuri x Kuri is used through aggregate figures that identify no one (for example, how many people play, or their ages). Legal basis: our legitimate interest in improving the game.
We don’t send you advertising, we don’t build commercial profiles and we don’t make automated decisions with legal effects on you.
Who else handles your data
We don’t sell or share your data. It is only handled, on our behalf, by the providers that make the site possible:
- Supabase: database and account system.
- Vercel: hosting.
- Resend: sending account emails.
- Google: only if you choose “Continue with Google”, to identify you.
Some of these providers are in the United States or may process data from there. In those cases the transfer relies on the safeguards set out in the GDPR, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.
How long we keep it
For as long as you have the account. If you delete it, your profile, your progress, your games and your stats are deleted. Games you leave unfinished are deleted automatically after an hour.
After deletion, traces may remain for a limited time in the providers’ backups and technical logs, until those are renewed.
Your rights
You can ask for access to your data, for it to be corrected or erased, for its processing to be restricted or to object to it, and for portability. To do so, write to info@motor-scope.com from your account email. We reply within one month at most.
You can also change the language, the course and vibration yourself in your profile settings, and delete the whole account with “Delete account”.
If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the data protection authority in your country.
Minors
Kuri x Kuri is for people aged 14 or older. Signing up below that age is not allowed and, if we find an account that belongs to someone under 14, we delete it.
If the age of consent for data processing is higher in your country, you need permission from a parent or guardian to sign up.
Cookies and browser storage
We only use what the site needs to work:
- Session and sign-up cookies, to keep you signed in and to complete your email verification.
- A cookie to remember your language.
- Small pieces of data stored in your browser, such as whether you have already seen the notice of a new exam.
There are no advertising or third-party analytics cookies; that is why you don’t see a cookie banner.
Security
The connection is encrypted (HTTPS), passwords are never stored in plain text and each account can only read its own data. No system is infallible: if there were a security breach that affects you, we will let you know as the law requires.
Changes to this policy
If we change anything important, we will announce it on the site or by email before it applies. The date at the top shows the latest version.