Draft, not for publication: operator details are not filled in and the text has not been reviewed by a lawyer.
Cookie Policy
What the site and the game store in your browser, why and for how long, what your banner answer means and how to delete everything. There are no ads, analytics or trackers.
What these are
A cookie is a small record a site leaves in your browser, which the browser sends back to the server. localStorage is browser storage: it stays on your computer and is not sent to the server by itself. Both are listed below, because the same rules apply to them.
The site sets one cookie — the sign-in session, and only if you sign in. Everything else is localStorage: settings, nickname and game saves, and your banner answer.
Full list
| Name | Type | Set by | Purpose | Lifetime |
|---|---|---|---|---|
zl_session | cookie | server, after you sign in | keeps you signed in: a random session token the server uses to find your account. HttpOnly — page scripts cannot read it; SameSite=Lax; Secure over HTTPS. Not set unless you sign in | 30 days, extended while you keep visiting; removed when you sign out or delete the account |
zombie-land. | localStorage (browser storage) | site, after you sign in | “signed in as…” marker: account number and nickname (no email). The game uses it to know it may send results to the shared leaderboard | until you sign out, delete the account or clear the site data in your browser |
zombie-land. | localStorage (browser storage) | site, after you answer the banner | your answer — “I agree” or “Necessary only” — with the site version, the version of this policy and the time. Without it the banner would show on every page | until you change it or clear the site data; we ask again when this policy changes |
zombie-land. | localStorage (browser storage) | game and site | nickname in the game menu (random until you change it), site and game language, chosen mode and run statistics: runs, zombies killed, best results | until you clear the site data in your browser |
zombie-land. | localStorage (browser storage) | game | game settings: music and sound volume, music on/off, difficulty, speed, camera shake, light | until you clear the site data in your browser |
zombie-land. | localStorage (browser storage) | game, when you change numbers in the lab | lab recipe: which game numbers you changed (damage, zombie speed, darkness…) and the previous recipe so you can bring it back. Numbers only, no personal data; never sent to the server | until you clear the site data in your browser |
zombie-land. | localStorage (browser storage) | game | local Arena leaderboard: the 10 best results on this computer (nickname, score, level, date). Not sent to the server by itself | until you clear the site data in your browser |
zombie-land. | localStorage (browser storage) | game | local Cities leaderboard: the 10 best campaigns on this computer (nickname, score, cities cleared, where the campaign ended). Not sent to the server by itself | until you clear the site data in your browser |
The site and the game write nothing else: no third-party cookies, pixels or browser fingerprinting. The site loads nothing from other domains — no fonts, counters or videos.
Necessary and optional
- Necessary — everything in the list above. The session keeps you signed in after you sign in yourself; language, nickname, settings and saves are the game you ask for when you open it; the banner answer stops us asking on every page. These work whatever you answer.
- Optional — there are none right now: no analytics, no ads, no visit counters. If any are ever added, a new version of this policy comes out, the banner asks again, and they start only for those who answer “I agree”.
Your answer in the banner
- On your first visit a banner appears at the bottom of the page with two equal buttons, “I agree” and “Necessary only”, and a link to this policy.
- “I agree” means you accept this version of the policy as a whole. “Necessary only” means only necessary records work. While there are no optional ones, the site and the game work the same either way.
- Nothing optional starts before you answer. The answer, the policy version and the time are kept in the zombie-land.cookies record in your browser.
- If you are signed in, the answer with the policy version and time is also written to the consent log on the server, like your other consents (see the Privacy Policy).
- The game page itself (play.html) does not show the banner: it writes only the necessary records from the list.
How to change your answer or delete the records
- To change your answer, use the “Cookie settings” link in the footer of every page (or the button of the same name in your account). It shows your current choice, and you can press the other button. “Necessary only” is how you withdraw consent.
- Signing out removes the session cookie and the sign-in marker. Deleting the account does the same and also removes the data on the server, including the consent log.
- Clearing the site data in your browser settings (usually “Settings → Privacy → Cookies and site data”) removes everything in the list: nickname, local records, settings and the banner answer. The game then starts from scratch with a new nickname, and the banner asks again.
- If you block the site from storing data altogether, the game still starts but remembers no nickname, records or settings, and signing in will not work.
What the server sees
The browser sends the server only the session cookie, and only to the /api addresses of this same site. localStorage records are not sent by themselves. If you are signed in, after a run the game sends the result (mode, score, level or city) to the shared leaderboard; it shows nicknames only, and your email is never shown to anyone.
Changes and contacts
The version number and date are at the top of this page. When the version changes, the banner appears again. More about account data is in the Privacy Policy.
The site is run by [[ОПЕРАТОР: legal name of the controller — person or company]]. Questions: [[ОПЕРАТОР: contact email for privacy requests]].