Privacy Policy

1. Who We Are

ZonePlay ("we", "us", "our") operates the website at zoneplays.netlify.app and any associated mirror domains. We are the data controller for personal data collected through this site.

For data-related enquiries, contact us at: privacy@zoneplay.gg (update with your real email)

2. Legal Basis (UK GDPR)

We process personal data under the following legal bases as defined by the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018:

• Contractual necessity — to provide you with the account and game-saving features you request
• Legitimate interests — to operate and improve the website, understand usage patterns, and prevent abuse
• Consent — for optional advertising cookies (where applicable)

3. What Data We Collect

3.1 If you create an account

Data	Why we collect it	Stored where
Email address	Account authentication	Google Firebase
Display name	Shown on leaderboards	Google Firebase
Game progress	Save your scores and progress	Google Firebase
High scores	Global leaderboards	Google Firebase

Passwords are hashed and managed entirely by Google Firebase Authentication. We never see or store your password in plain text.

3.2 All visitors (with or without account)

Data	Why we collect it	Stored where
Browser type / device	Ensure site compatibility	Hosting provider logs
Pages visited	Understand popular content	Cloudflare / Netlify analytics
IP address	Security, abuse prevention	Hosting provider (auto-deleted)

3.3 Guest players

If you play without an account, game progress is stored only in your browser's localStorage — a small file on your own device. We cannot access this. It is deleted when you clear your browser data.

4. Cookies

We use the following cookies:

• Firebase authentication cookie — keeps you logged in. Strictly necessary. Cannot be disabled without breaking login functionality.
• Cloudflare cookies — security and performance. Strictly necessary.
• Google AdSense cookies (if ads are displayed) — used to show relevant ads. These are advertising cookies and require your consent under UK GDPR.

You can manage or delete cookies at any time through your browser settings. Disabling non-essential cookies will not affect your ability to play games.

5. Third-Party Services

Google Firebase (Alphabet Inc.)

We use Firebase for user authentication and database storage. Firebase is operated by Google LLC, headquartered in the USA. Data transfers to the USA are covered by Google's Standard Contractual Clauses under UK GDPR Article 46. Firebase's privacy policy: firebase.google.com/support/privacy

Google AdSense (if enabled)

We may display advertisements served by Google AdSense. Google may use cookies to serve ads based on your browsing history. You can opt out of personalised ads at adssettings.google.com. Google's privacy policy: policies.google.com/privacy

Cloudflare / Netlify

Our site is hosted on Cloudflare Pages or Netlify. These services may log basic request data for security and performance purposes. See their respective privacy policies for details.

6. How Long We Keep Your Data

• Account data — retained until you delete your account
• Game saves and scores — retained until you delete your account
• Server logs — automatically deleted by hosting providers within 30–90 days
• localStorage data — stored only on your device, deleted when you clear browser data

7. Your Rights Under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — ask us to delete your account and all associated data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to restrict processing — ask us to limit how we use your data

To exercise any of these rights, email us at privacy@zoneplay.gg. We will respond within 30 days as required by law.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Children's Privacy

ZonePlay is intended for general audiences. We do not knowingly collect personal data from children under the age of 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly. Users aged 13–17 should have parental consent before creating an account.

9. Data Security

We take reasonable technical and organisational measures to protect your data, including:

• All data transmitted over HTTPS (encrypted in transit)
• Passwords hashed by Firebase — we never have access to plain-text passwords
• Firestore security rules preventing users from accessing each other's data
• No sensitive financial data collected or stored

10. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of ZonePlay after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related queries or to exercise your rights: