Privacy Policy

Effective date: March 13, 2026 · Last updated: March 13, 2026

Land of ZZTT ("the Game") is an isometric MMO browser game. This policy explains what data we collect, why, how it is stored, and your rights regarding that data.

The short version: We collect the minimum data needed to run the game. We do not collect your email, IP address, or any tracking/analytics data. You can export or delete your account at any time.

1. What We Collect

Data Purpose How long
Account ID Unique identifier (opaque UUID) created on first visit. Links your game progress across sessions. Until you delete your account
Display Name Your chosen character name (alphanumeric, max 16 characters). Visible to other players. Until you delete your account
Game Progress Level, inventory, equipment, position, skills, housing, guild membership, friend list, and other gameplay state. Until you delete your account
Google Account Link (optional) If you sign in with Google, we store a link between your Google ID and your game account. This lets you access your account from multiple devices. Until you delete your account
Authentication Token A JWT token stored in your browser's localStorage to keep you logged in. Expires after 1 day (Google-linked) or 30 days (guest); cleared on logout

2. What We Do NOT Collect

3. How Data Is Stored

All game data is stored in a SQLite database on our server hosted on Microsoft Azure (West US region). Data is encrypted in transit via TLS (WSS/HTTPS). The database is not shared with any third party.

Your browser stores a single authentication token in localStorage under the key gameToken. This token contains your account ID and is used to reconnect you to your account. No other personal data is stored in your browser.

4. Third-Party Data Sharing

Google OAuth (optional)

If you choose to link a Google account, we exchange an authorization code with Google's OAuth service to obtain your Google user ID. We request only the openid and email scopes — no profile data (name, picture, etc.) is requested. Your email is used once for admin role checks and then discarded. See Google's Privacy Policy.

No other third parties

We do not use any analytics, advertising, CDN, or other third-party services that receive your data.

5. Your Rights

Export your data

You can request a complete export of all data associated with your account. This is available as a self-service JSON download at /api/my-data (requires authentication). The export includes your account record, player save, OAuth links, housing, apartment, friend list, and all other associated data.

Delete your account

You can request full deletion of your account and all associated data. Account deletion is a cascade operation that removes your data from all database tables: player save, account record, OAuth links, housing, apartment, friend entries, ban records, audit log entries, and invite code records. To request deletion, contact us (see Section 8). Deletion is permanent and cannot be undone.

Correct your data

You can change your display name in-game. If other data needs correction, contact us.

6. Data Retention

Google-linked accounts: Your game data is retained indefinitely and is never automatically deleted. Account deletion only happens if you explicitly request it, at which point all data is removed immediately and permanently.

Guest accounts (not linked to Google): Guest accounts that have been inactive for 30 days are automatically deleted, along with all associated game data. To prevent automatic deletion, link your account to Google via the in-game settings.

Server logs (connection events, gameplay events) are rotated daily and automatically deleted after 30 days. Logs do not contain email addresses or IP addresses — only display names and gameplay events.

7. Children's Privacy

The Game is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will delete it.

8. Contact

For privacy inquiries, data export requests, or account deletion requests, contact us via:

9. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Game after changes constitutes acceptance.