Privacy policy – Zombies vs Humans
Zombies vs Humans is offered by Marc Bernardo Ferré, from Spain. You can write to us at zombiesvshumans.thegame@gmail.com.
We keep this so you can play: - Your account: username (it is public: rankings, rooms and games show it), email, password (we only keep a hash), sign-up date, last sign-in, the hours in which you were online (one mark per hour), ranking points, credits and the picture you chose from the game's catalogue. - If you play as a guest: a random name and no real email until you save the account. - If you sign in with Google: your Google account id and the email Google confirms. We do not keep your Google name or photo. - Games: the rooms and games you play, your moves and results. We keep them so finished games can be replayed and ranked. Unfinished rooms and games are deleted when they have been idle for a while. Chat messages are not stored, only relayed. - Purchases: the order (product, amount, currency, date, status, and PayPal's order and capture ids), PayPal's response, which may contain your name, email and country as PayPal sends them, and the credit ledger. We never see your card or bank details. - Password reset: when you ask for it, we send an email to your address and record when. - Receipt: after each purchase we send you a receipt by email. - We store no IP address in our database. Our host (Heroku, by Salesforce, EU region) keeps standard access logs.
We use your data for these reasons: - Contract: to give you the account and the games. - Legal obligation: to keep purchase records. - Legitimate interest: security, error reports and preventing abuse.
These services receive data so that Zombies vs Humans works: - Heroku (hosting and database, EU). - Google (sign-in and Gmail to send emails). - PayPal (payments), which is the controller of your payment data on its own. We sell nothing, we show no ads and we use no analytics.
We use no tracking cookies. The app keeps in the browser's local storage your session (sign-in tokens), your language and your preferences, and its service worker caches the app so it opens offline. This is needed for the service, so there is no consent banner.
We keep your account until you delete it. Deleting your account (in your profile) anonymises it: your username, email and Google link are removed and you cannot sign in. Your finished games and purchase records stay with an anonymous name ("deleted-<number>"), because other players' games and the law need them. Purchase records are kept as long as Spanish tax law requires.
You have the right to access, rectify, erase, restrict and object to the use of your data, and to receive it in a portable format. Write to zombiesvshumans.thegame@gmail.com. If you think we handle it badly, you can complain to the AEPD, the Spanish authority: https://www.aepd.es
You must be 14 or older to use Zombies vs Humans.
The date at the top says when this policy last changed. If the change is important, we will announce it in the app.
Rooms and unfinished games are deleted after 15 days without activity. The deletion runs every day.
Only if you allow them in your browser. We keep your browser's push address, its keys and your language, for up to 5 devices per account. We delete them when you turn notifications off or when your browser's push service tells us the address is gone. The notifications go through your browser maker's push service (Google, Apple or Mozilla).
When you search for a room we keep your search criteria. We delete them when you stop searching or when you join the room we found for you.