[ PRIVACY POLICY ]
Privacy Policy
Last updated: 28 September 2026
Short version. Kute is free and open source. It needs no account with us, shows no ads and sells nothing. What the client sends to our server is only what it needs to work. The client sends no telemetry.
1. Who is responsible
Kute is developed by NullDev e.U. This policy follows Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and the Austrian Data Protection Act (Datenschutzgesetz, "DSG"). The data controller within the meaning of Art. 4(7) GDPR is:
NullDev e.U.Bergmanngasse 61a, TOP 4
8010 Graz, Austria
Firmenbuch: FN 677239 (LG für ZRS Graz)
VAT ID: ATU80745035
Email: [email protected]
We have not appointed a Data Protection Officer, as the conditions of Art. 37 GDPR do not apply. For all data protection enquiries, contact [email protected].
2. This website
kute.lol is served by our own server behind Cloudflare. To deliver the pages, Cloudflare and our server process your IP address and the usual request data (URL, browser, time). This is technically necessary (Art. 6(1)(f) GDPR). Our server's log records the requested path, not your IP address, and is deleted after 31 days.
The website sets no cookies and uses no analytics or tracking. It loads the current player count from our own server.
3. The Kute client
Kute badge and player count
While the client runs, it keeps a connection to our server. When you are logged in to Krunker, it sends a hash of the lobby id and your in-game display name, so that other Kute users in the same match can see the Kute badge next to you. The hash is only held in memory while you are connected and is never stored. The server also counts open connections and how many clients were started for the first time. The client remembers itself that it was counted, the server keeps no list.
To stop all contact with our server, turn on Disable Kute Online Features (Settings, About). The client then sends nothing to kute.lol and receives nothing from it. Hiding badges with Show Kute Badge only affects what you see.
Kute Market
Your watchlist, target prices, alert state, and simple or advanced view preference are stored on this device. Price refreshes send the watched item identifiers to our server; target prices stay local. Target checks run while the menu is visible and pause during gameplay. Viewing an inventory sends the requested username to the server to retrieve its public holdings.
With Kute Market on (Settings, General, on by default), the client asks our server for market statistics (values, prices, listings, trends of Krunker's items) and shows them in the game. To use the market the client proves once a day that it is a Kute client with a logged in game, through a signature your Kute installation makes; your Krunker login or token is never sent to Kute. The server keeps that session in memory, tied to your IP address, for 24 hours, and never stores it.
With Kute Market enabled, the client observes recent completed sales and trades in history responses the game loads while you browse its history screens. Kute does not read your FRVR token, make extra history requests, or load additional pages. It contributes item and transaction identifiers, quantities, available serial, wear, style, paint and item instance attributes, currencies and reported dates. Only the listed transaction facts are selected for submission; player names, account identifiers, trade messages and login tokens are excluded. The server retains these market facts, an opaque source hash for deduplication and validation (made from your connection with a random value the server keeps in memory only and replaces on every restart, so it cannot be turned back into an address), and audit records of consistency checks. Corroborated private trade reports can contribute to Kute values and labeled exchange comparisons; market-sale reports are checked against public evidence. Reports are not treated as independently verified transactions. Draft offers sent to the analyzer are processed without being stored as completed trades. Turn off Kute Market to stop both collection and market requests; Disable Kute Online Features stops all contact with Kute's server.
The portfolio view reads the inventory of the name you enter from Krunker's public developer API through our server and shows it to you; nothing of it is stored.
Rate limiting
To protect the server from abuse, request counts are kept per IP address. The address is replaced by a salted hash in memory. The salt is never stored and changes on every restart. Entries are deleted within 75 minutes.
Other services
- Updates: the client checks GitHub (
api.github.com,raw.githubusercontent.com) for new versions. GitHub's privacy statement applies to these requests. - Krunker: the game itself is run by its operator. Their privacy policy applies. Kute does not change what Krunker collects.
- Discord: with Rich Presence on, the client tells the Discord app on your PC your current mode and map. Discord's privacy policy applies.
Stored only on your PC
Settings, userscripts, swapped files, the browser cache, crash logs and saved accounts stay in Documents\kute. Saved account passwords are encrypted with Windows (DPAPI) and are never sent to us.
4. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object (Art. 15 to 21 GDPR). Because we store no ids, names or IP addresses, we usually cannot tell which data came from you (Art. 11 GDPR). If you can point us to data that is yours, contact [email protected]. We answer without undue delay and within one month at the latest (Art. 12(3) GDPR).
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR). The competent authority in Austria is:
Österreichische DatenschutzbehördeBarichgasse 40-42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: [email protected]
Web: www.dsb.gv.at
5. International data transfers
Cloudflare, which delivers kute.lol, is based in the United States. Transfers to Cloudflare are covered by the European Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR).
6. Automated decision-making
We do not use personal data for automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
7. Changes
We update this policy when the client or the website changes what they process. The date at the top shows the current version.