This explains what Kahuut stores about you, why, and for how long. It is written from what the software actually does.
Last updated 2026-08-28
German Vimb
info@staysmart.ee
To make an account we store your name, email address, a hashed password (never the password itself), and the two setup answers about what you host and how big your crowd usually is.
If you sign in with Google we receive your email address, name and whether Google has verified that address. We never receive your Google password, and we ask for nothing else.
We also count how many games you have hosted, so the free allowance can be enforced, and keep your plan and any orders you place.
Joining a game needs no account. We store the nickname and mascot you pick, your answers, your score, and any hype or shouts you send, all attached to that one game.
Your nickname and mascot are remembered on your device for six months so you do not have to type them again. Nothing else about you is kept.
Shouts appear on the host's projector as you send them. Do not type anything into a shout that you would not want the room to read.
No card or payment details are handled by this service at all. If a plan is bought, the payment is settled elsewhere and we store only which plan and what it cost.
No advertising, no analytics, no tracking pixels, no profiling, and nothing is sold or shared with anyone for marketing.
The table below lists every cookie and browser-storage key the app sets, and what each is for. The ones marked essential are needed for the service to work at all; the functional ones only remember your choices.
Google sign-in is the only third party. Its script is not loaded unless you accept it, and if you decline you can still sign in with an email address and password.
| Name | Kind | Kept for | What it does |
|---|---|---|---|
PHPSESSID |
essential | 30 days from last visit | Keeps a host signed in. |
kh_remember |
essential | 30 days | Signs a host back in after the session ends. |
kh_consent |
essential | 1 year | Remembers this cookie choice. |
klang |
functional | 1 year | Remembers the language you picked. |
kh_nick, kh_avatar |
functional | 180 days | Remembers a player's nickname and mascot so they need not retype them. |
kahuut_token, kahuut_code |
essential | until the tab closes | Holds your place in the game you are playing. |
kahuut_nick, kahuut_avatar, kahuut_autonext |
functional | until you clear the browser | Remembers small choices, like whether the projector advances by itself. |
Google |
third party | set by Google, only if accepted | Google's own sign-in cookies. Only loaded if you accept; email sign-in works without it. |
Your current choice: not chosen yet.
Account data stays until you delete the account. Deleting an account removes its quizzes, games, reports and share links with it.
A player row lives with its game. Delete the quiz and its games, answers and scores go too.
Uploaded pictures, videos and audio stay until the quiz that uses them is deleted.
A host sees the nicknames, answers and scores of players in their own games, and the reports afterwards.
An administrator of this installation can see accounts, quizzes, games and orders in order to run the service.
Nobody else. There is no third-party access beyond Google sign-in, and only for people who use it.
You can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted. Write to the contact address above and we will act within one month.
You can also withdraw cookie consent at any time using the link in the footer of any page.
Passwords are stored only as bcrypt hashes. Sign-in sessions and the remember-me token use HTTP-only cookies. Uploads are checked by content, not by filename.
No system is perfect. If something goes wrong that affects you, we will tell you.
If this policy changes materially we will say so on this page and update the date at the top.