Privacy Policy

Who is responsible

This policy explains how ZuZi.dev (“ZuZi.dev”, “we”, “us”) handles personal data when you visit the site, play games or use an account. We are responsible for that data. Questions about this policy: [email protected].

Playing without an account

To count plays fairly and avoid counting the same visit twice, the site stores a random identifier in your browser's local storage. Our servers only keep a keyed hash of it, never the identifier itself, and it is not linked to your name, email address or IP address.

Your recently played list and your light/dark theme choice are stored only on your device. Clearing your browser's site data removes them.

Data we store when you create an account

If you create an account, we store:

• your name and email address;
• your password, only as a secure one-way hash — we never store or see it in plain text;
• your favorites and play history (which game, when, and in which language);
• your ratings, reviews and replies, and the reports you send;
• for each active sign-in session: your IP address and browser type, used to keep your account secure.

How and why we use your data

We use personal data only for these purposes:

• to provide the features you ask for — sign-in, favorites, history sync and reviews (performance of our agreement with you);
• to count plays and produce aggregate statistics per game (our legitimate interest in running and improving the service);
• to keep the service secure, prevent abuse and limit spam (legitimate interest);
• to moderate reviews, replies and reports and to handle copyright notices (legitimate interest and legal obligations);
• to answer the messages you send us.

Cookies and local storage

We set one cookie: the sign-in session cookie. It is strictly necessary, secure and inaccessible to scripts, and it is removed when you sign out or the session expires. Without an account, no cookie is needed to play.

In local storage we keep the anonymous play identifier, your recently played games and your theme. We do not use advertising, analytics-profiling or cross-site tracking cookies.

What other people can see

Your ratings, reviews and replies are public and are shown with your name. Your email address, favorites and play history are private.

Who we share data with

We do not sell your personal data or share it for advertising. We only share it with:

• hosting and infrastructure providers that run the site for us under contract, including Cloudflare, which stores and delivers game files and images;
• Google Fonts, which serves the site's fonts — your browser connects to Google's servers, which receive your IP address;
• authorities, when the law requires it.

Games and publishers

Games run on a separate domain inside a sandbox. Publishers do not receive your name, email address or sign-in session. A game may store its own progress in your browser, which you can remove by clearing that site's data.

International transfers

Our providers may process data in countries other than yours. Where the law requires it, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep data

We keep personal data only for as long as we need it:

• Account data: until you delete your account.
• Raw play events: for a limited period, after which they are reduced to daily per-game counts that contain no identifiers.
• When you delete your account, your favorites, reviews and replies are deleted, and your play history is anonymised so it can no longer be linked to you.
• Security logs and moderation records: only as long as needed to protect the service or to meet legal obligations.

Your rights

Depending on where you live, you may have the right to access your data, receive a copy of it, correct it, delete it, restrict or object to its processing, and withdraw consent. You can also complain to your local data protection authority.

To make a request, email [email protected] from the address linked to your account. We may ask you to confirm your identity and will reply within the time limits set by law.

How we protect your data

Passwords are hashed, all traffic uses HTTPS, sign-in attempts are rate-limited and games are isolated from the site. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires it.

Children

Anyone can play without giving us personal data. Accounts are not intended for children below the age of digital consent in their country (13 in the United States, between 13 and 16 in the EU) unless a parent or guardian has agreed. If you believe a child has given us personal data without permission, contact us and we will delete it.

Changes to this policy

When we change this policy, we update the date at the top of this page. If a change is significant, we will also tell you on the site or by email before it takes effect.

FAQ