Draft, not for publication: operator details are not filled in and the text has not been reviewed by a lawyer.
Privacy Policy
How Zombie Land handles personal data: what, why, where and for how long, and how you control it.
Who is responsible
- Controller: [[ОПЕРАТОР: legal name of the controller — person or company]]
- Registration: [[ОПЕРАТОР: company / registration number, if any]]
- Address: [[ОПЕРАТОР: postal address]]
- Email for privacy requests: [[ОПЕРАТОР: contact email for privacy requests]]
- EU/UK representative (Art. 27 GDPR): [[ОПЕРАТОР: EU/UK representative under GDPR Art. 27, or why one is not needed]]
In short
- You can play without an account: then the game and the site send nothing about you to the server. Records and settings stay in your browser.
- An account is only needed for the shared leaderboard. With one we keep your email, leaderboard name, results and a consent log.
- The site has no ads, analytics, counters, third-party fonts or trackers. We do not sell data.
- To download everything we hold about you or delete your account, use the two buttons on the account page.
What we collect and why
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Email address | Signing in with an emailed code; messages about your account | Contract — Art. 6(1)(b) GDPR | Until you delete the account |
| Leaderboard name | Shown next to your results on the shared leaderboard — visible to everyone | Contract — Art. 6(1)(b) GDPR | Until you delete the account; you can change it in the account |
| Language, account creation and last sign-in dates | Emails in your language; account housekeeping | Contract — Art. 6(1)(b) GDPR | Until you delete the account |
| Game results | The shared leaderboard: mode, score, level or city number, city name and cities cleared, time. We keep your best result and the last 20 in each mode | Contract — Art. 6(1)(b) GDPR | Until you delete the account |
| Consent log | Which document and version you accepted or withdrew, site version, time and IP address | Legitimate interests — Art. 6(1)(f): proving acceptance of the documents and handling abuse | Until you delete the account; the IP address is erased after 30 days |
| Session | Keeping you signed in. The server stores only a hash of a random token | Contract — Art. 6(1)(b) GDPR | 30 days, extended while you keep visiting; at most 10 sessions |
| Sign-in codes and rate limits | The code is stored only as a hash. For rate limits we keep keyed hashes of the address and IP; the IP itself only until the code is used or expires | Legitimate interests — Art. 6(1)(f): protection against code guessing and spam | Code — 10 minutes; records with hashes — about a day |
| Consent to news emails | Only if you ticked the separate box: game news by email | Consent — Art. 6(1)(a) GDPR, can be withdrawn at any time | Until you withdraw it — a switch in your account |
The server's own logs contain the request method, page address, status code and time — no email addresses, IP addresses or codes. Reverse proxy and hosting logs: [[ОПЕРАТОР: whether the reverse proxy / hosting keeps access logs with IP addresses, and for how long]]
What other people see
On the shared leaderboard every visitor sees your name, score, level or city and the time of the result. Your email is never shown. Do not put your real full name or contact details in the name.
What is stored in your browser
The game and site keep settings, local records, language and your cookie choice in your browser, and after sign-in a session cookie and a “signed in as…” marker. The full list with purposes and lifetimes is in the Cookie Policy.
Who else receives data
- Hosting provider running the server and database: [[ОПЕРАТОР: hosting provider and its country]]
- Email delivery service that sends the code (receives your email address and the message): [[ОПЕРАТОР: email delivery provider and its country]]
They process data on our behalf and only for these tasks. We give nothing to ad networks or data brokers. Public authorities receive data only where the law expressly requires it.
Where data is stored
- Server and database: [[ОПЕРАТОР: country where the server and database are hosted]]
- Transfers outside the EEA and UK: [[ОПЕРАТОР: transfers outside the EEA/UK, if any, and the safeguard used (adequacy decision, standard contractual clauses) — or “none”]]
How long we keep data
- Account, name, results and consent log — until you delete the account. Deleting removes them from the database immediately.
- IP address in the consent log — 30 days.
- Session — 30 days, extended while you keep visiting.
- Sign-in code — 10 minutes; rate-limit records — about a day.
- Database backups: [[ОПЕРАТОР: how long database backups are kept]]. A deleted account disappears from backups when they expire.
Your rights
- Access and portability — the “Download my data” button in your account: everything we hold about you in one JSON file.
- Rectification — change the name in your account; to change the email, write to us.
- Erasure — the “Delete account” button: data is erased immediately.
- Withdrawing consent to emails — the “Emails” switch in your account; this does not affect processing before the withdrawal.
- Restriction of and objection to processing — email [[ОПЕРАТОР: contact email for privacy requests]].
- A complaint to a supervisory authority: [[ОПЕРАТОР: data protection authority you can complain to (depends on where the operator is established)]].
We answer requests within one month (Art. 12(3) GDPR). To make sure a request comes from the account owner, we may ask you to write from the account email.
Children
Minimum age for an account: [[ОПЕРАТОР: minimum age for an account without parental consent (e.g. 13 or 16) — decide with a lawyer]]. If you are younger, play without an account — then nothing is sent to the server. If you learn that a child under this age created an account, write to [[ОПЕРАТОР: contact email for privacy requests]] and we will delete it.
How we protect data
- The site and server run over HTTPS.
- The session cookie is not readable by page scripts (HttpOnly). Codes and session tokens are stored only as hashes.
- For rate limits, addresses and IPs are stored as keyed hashes; the IP in the consent log is erased after 30 days.
- Only the operator has access to the database.
Changes
The version number and date are at the top of this page. If the policy changes, we will ask you to accept the new version when you next sign in or open your account page.