How Kingbot handles your game login
Last updated 30 October 2026 ยท Version 2026-10-30
To run your game account, Kingbot needs a way to sign in to it. This page explains exactly what we receive, how we keep it, who can use it and how to take it away. It is part of our Privacy Policy.
The short version
- You sign in on your own computer, in the Kingbot companion, on Google's or Facebook's own sign-in page. We never see your Google or Facebook password.
- We receive and store only the game's login session, encrypted.
- It is used only to connect your game account, and only through your companion, from your own internet connection.
- Nobody at Kingbot can view or export it, including support.
- Unlink the game account in the dashboard and we delete it straight away.
1. Signing in
- You download the companion only from kingbot.app.
- In the companion, you choose Google or Facebook. The companion opens that provider's own sign-in page. Your password goes only to Google or Facebook.
- The provider gives the companion a sign-in token. The companion sends that token only to Century Games, which returns a game login session for your game account. The provider token is not sent to Kingbot and is not stored.
- The companion sends the game login session to Kingbot over an encrypted (HTTPS) connection.
The companion stores your Kingbot sign-in (a renewable device token, not your password) in your operating system's keychain. It does not store your Google, Facebook or game password.
2. What we store
| What | How |
|---|---|
| The game login session and the game server address | Encrypted with AES-256-GCM. The key is kept outside the database, so a copy of the database alone cannot be decrypted |
| A code derived from your game account ID | A one-way keyed hash, so the same game account cannot be linked to two Kingbot accounts |
| The login provider (Google or Facebook) | Plain text, to show you which one you used |
We do not store your Google, Facebook or game passwords, or the provider's sign-in token.
3. How it is used
- The login is decrypted only in the server's memory, at the moment a runner connects your game account, and only for that connection. It is never written to disk or logs in readable form.
- Game traffic goes through your companion, so the game sees your own internet connection. When your companion is offline, Kingbot does not connect.
- Kingbot uses the login only to run the automation you set up for that game account. We never use it to buy items for you, change your game account's sign-in, or link it to anything else.
4. Who can access it
- You, through the automation you control.
- Kingbot administrators cannot view, copy or export your game login. For support and to keep the Service safe, they can see whether an account is connected and can start, stop or change its automation. Administrators must use two-factor sign-in, and their actions are recorded.
- Our hosting provider stores the encrypted data but does not have the key.
5. Taking it away
- Unlink the game account in the dashboard: automation stops and we delete the stored game login straight away.
- Delete your Kingbot account: all your game logins are deleted at once.
- When your access ends: if you do not return, we delete your game logins 90 days after your last trial or paid access ended.
- Unlinking deletes our copy. The game session itself may stay valid at Century Games until it expires. To end it there as well,.
6. If something goes wrong
If we learn of unauthorised access to stored game logins, we will stop all connections, tell affected customers and, where the law requires it, the relevant authorities, and explain what you should do.
7. Questions
support@kingbot.app. We never ask for your password, by email or otherwise.