Layton Labs AB

Kubb privacy policy

Last updated 11 November 2026

This policy explains how personal data is handled when you play Kubb, our kubb game for iPhone (on the App Store as Kubb: Viking Throwing Game, in Swedish Kubb: Kungen ska falla). In short: you can play without an account, and your game stays on your device. Your coins are kept in an anonymous wallet on our server. If you sign in with a Layton Account you can add friends, join a clan and take your place on the leaderboards. Online matches go through our own match server. The game shows no ads, does not track you and sends us no usage statistics. Purchases go through Apple. We never sell your data.

For our website, Layton Account and our other games, see our general privacy policy.

Who is responsible for your data

The data controller is Layton Labs AB, Swedish company registration number 559590-8202, based in Stockholm, Sweden. If you have questions about how we handle your data, reach us at jean@laytonlabs.se.

Data that stays on your device

Kubb stores your game on your device: the name you type, your player's look and outfits, your wins, losses and rank points, cup results, season pass progress, matches in progress, settings such as language, sound, vibration and graphics, and a random ID that the game creates for this installation (it is not your device's own identifier). It also remembers the players you last met online (their names and looks), so that you can add them as friends, and keeps a small log file for troubleshooting. The log stays on your device and is never sent to us.

Matches against the computer, the Kubb Cup and practice are played entirely on your device. This data is deleted when you delete the app, and it may be included in the backups your iPhone makes. The key to your coin wallet is the exception: see below.

Your coin wallet (no account needed)

Coins, the things you buy with them and the season pass rewards you collect are kept in a wallet on our server, so that purchases can be checked and your coins are still there if you install the game again. The first time you start the game it creates a long random key and stores it in your iPhone's Keychain, where it can remain after the app is deleted. The game sends the key to our wallet server each time it opens the wallet.

The wallet server stores only a one-way code made from that key, together with your coin balance, the items you own, the season rewards you have collected and, for each purchase of coins, the product, Apple's transaction identifier, the number of coins and the time. The wallet is not connected to your name, your email address or your Layton Account, and we cannot tell whose wallet it is. The server receives your IP address when the game talks to it, but does not log it.

Layton Account (optional)

You can sign in with a Layton Account, our own account service, using Sign in with Apple, your email address (we email you a one-time code) or Google, on our account page at laytonlabs.se/account, which the game opens for you. With Apple or Google we receive an account identifier and the email address they share with us (with Apple this can be a private relay address), and never your password. Apple may also offer the game your first name. The game only uses it on your device to suggest a display name.

If you sign in, we store your email address; the display name you choose; your avatar (a short code for your player's look and outfit); your friend code; your Kubb totals (rank points, cups won, wins, losses and draws); your online rating with its wins and losses; the day you were last active; your friends, friend requests, blocks and any reports you make or receive; the challenges you send to friends or get from them; your clan, your role in it, the points you earn for it and the messages you write in its chat; and the technical data needed to keep you signed in securely (session tokens, your device model and operating system version and, in server logs, your IP address). Kubb has no cloud save: the rest of your game stays on your device.

Your friends can see your display name, avatar, Kubb totals, online rating and the day you were last active, and whether you are online right now (in the menus, looking for a match, in a lobby or playing). They never see your email address. Someone becomes your friend only through a friend code that you choose to share, and you can remove, block or report anyone at any time. We review reports within 24 hours and can reset an inappropriate name or suspend an account.

You can sign out whenever you like and keep playing on your device. You can delete your account in the game under Settings, then Manage account, then Delete account: this immediately removes your account, your display name and avatar, your friend code, your Kubb totals and online rating, your friends, requests, blocks and challenges, your clan membership and the messages you wrote in clan chat. Reports that involve you are kept, but no longer linked to your account. The game on your device, your coin wallet and the matches you played with a code are not connected to the account, so they stay (see those sections).

Leaderboards

The online leaderboard is open to everyone who plays Kubb. It shows the display names, avatars, online ratings, wins and losses of the players on it. You only appear on it if you are signed in and play online matches that count. The friends leaderboard shows you and your friends with your Kubb totals.

Clans

Clans are open to view for everyone who plays Kubb: a clan's name, tag, badge, description and points, and its members with their display names, avatars, roles, when they joined, the points they earned this week and the day they were last active. The leader and elders of a clan see who asks to join, with display name, avatar and online rating.

Only members can read a clan's chat. Messages pass an automatic filter: blocked words are masked, and links, email addresses, phone numbers and social media handles are refused. The author, the leader and the elders can delete a message, and any member can report one, which shows us the message. We keep the most recent 1,000 messages of each clan.

Playing online

You can play live matches without an account. When you play online, the game connects to our match server and sends the random installation ID, your name (your display name, or the name you typed), your player's look, your rank badge, the app version and, if you are signed in, your sign-in token, and then your throws, your aim and your emotes during the match. The players in your match, and players waiting for a quick match with you, see your name and look. There is no free-text chat in matches, only preset emotes.

The match server keeps this in memory while you are connected and stores no matches afterwards. If you and the other players are signed in, it reports who won and who lost to Layton Account after a match that counts, for the online rating and clan points. While you are signed in, the game also stays connected to the match server in the menus, so that your friends can see that you are online and invite you to a match. Sign out to stop that.

When you invite someone with a link, the page behind the link shows your name, the team size, the venue and the number of free seats to anyone who has the link.

Friend matches with a code

When you challenge someone to Three Throws or to a kubb match where you take turns when it suits you, the game stores the match on our server under a code: both players' names, random installation IDs and looks, the venue, the throws and the result, so that each phone can replay the other player's turn. No account is needed, and anyone who has the code can open the match. These matches are not deleted automatically. Email us the code if you want one removed.

In-app purchases (Apple)

Coin packs and the starter pack are bought through Apple's App Store. Apple handles the payment; we never see your payment details or your Apple ID. The game receives a receipt from Apple and sends it, with the product and Apple's transaction identifier, to our wallet server, which checks it with Apple and adds the coins to your wallet. The season pass and items in the game are bought with coins. Apple's handling of your data is described in Apple's privacy policy.

Other software in the game

• Unity: Kubb is built with the Unity game engine and uses Unity's library for in-app purchases to talk to the App Store. We have switched off Unity's analytics services, so the game does not send gameplay analytics to Unity.
• Clipboard: the game asks iOS whether the clipboard holds something that looks like an invite link or a code, without reading it, and reads it only when you tap Join or Paste.
• Haptics: vibration feedback runs entirely on your device.

What we do not collect

Kubb does not collect your real name, contacts, photos, location, microphone or camera, your device's advertising identifier or crash reports, and it only collects your email address if you sign in with a Layton Account. The game sends no push notifications. We show no ads and we do not build a profile of you.

Why we process your data, and the legal basis

• The coin wallet, and delivering and restoring purchases: performance of our agreement with you.
• Layton Account, friends, clans and leaderboards: performance of our agreement with you, when you choose to create an account.
• Online matches and friend matches with a code: performance of our agreement with you when you use the game's online features.
• Sign-in emails: performance of our agreement with you. We never use your email address for marketing.
• Security and preventing abuse (sign-in protection, rate limits, the name and chat filters, blocks and reports): our legitimate interest in keeping the service safe for players.

Who we share data with

• Apple: App Store purchases and app distribution, and Sign in with Apple if you choose it.
• Google: only if you choose to sign in with Google on the account page.
• Cloudflare (Cloudflare, Inc.): runs Layton Account and the coin wallet for us, with their databases in Europe, and sends the sign-in emails.
• Hetzner (Hetzner Online GmbH, Germany): hosts our match server, on servers in Finland.
• Other players: as described above, your friends, your clan, the players you meet online and the leaderboards show your display name and avatar with your results.

We do not share your data with anyone for marketing, and we never sell it. Where data is processed outside the EU/EEA, for example by Cloudflare or Apple in the United States, it is done under appropriate safeguards, such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

How long we keep it

Game data stays on your device until you delete the app. Your coin wallet and its purchase records are kept for as long as the game is in service, so that your coins and items survive a reinstall. If you sign in, we keep your Layton Account data until you delete your account, which removes it immediately. A sign-in stops working when you sign out, or after 90 days without use. Friend requests expire after 30 days and challenges sent to friends after 72 hours. Each clan keeps its most recent 1,000 chat messages. Friend matches with a code are kept until you ask us to remove them. The match server stores no matches, and server logs are kept only briefly, for security. Apple keeps purchase records according to its own policies.

Children

Kubb is suitable for all ages but is not directed at children under 13, and we do not knowingly collect personal data from children. If you believe a child has shared personal data through the game, contact us and we will help.

Your rights

You have the right to request access to your data, to have it corrected or erased, to object to or restrict processing, and to receive your data (data portability). You can erase the data on your device by deleting the app, and your Layton Account data by deleting your account in the game (Settings, then Manage account, then Delete account) or as described on the account deletion page. For data held by Apple, you can also use Apple's own privacy tools. Get in touch at jean@laytonlabs.se and we will help you.

If you are unhappy with how we handle your data, you have the right to complain to the Swedish Authority for Privacy Protection, IMY.

Changes to this policy

If we change this policy, we update the date at the top of the page.