Privacy Policy

Last updated: 28 July 2026

This Privacy Policy explains what information Zuujis War Games (the "Game") collects, why, how long we keep it, and the rights you have over it.

1. What we collect and why

  • Account information — your email address and display name, collected when you register, used to identify your account, let you log in, verify your email, and reach you about your account.
  • Date of birth (not currently collected at registration) — registration does not ask for this today. Where an account does carry a date of birth, if it indicates you are under 18 we set an internal flag and gate purchases behind a parental-consent step. We do not treat the absence of a date of birth as any signal about your actual age; see our Terms of Service for the limits of this mechanism.
  • Session data — when you log in, we record the IP address and user agent (browser/device string) associated with that session, alongside the session itself. This is used for authentication, fraud and abuse prevention, and diagnosing problems; it is not used to build an advertising profile.
  • Payment information — when you buy gems, our payment processor Stripe handles your card details directly; we never see or store your full card number. What we store on our side is limited to: the Stripe checkout session ID, the Stripe payment intent ID, a status (pending, paid, failed, or refunded), the amount in cents, the currency, and which gem bundle the purchase was for. See Section 3 for more on Stripe's role.
  • Gameplay telemetry — actions you take in the Game (building, training troops, dispatching armies, chat messages, purchases, and similar events) are logged so we can operate the Game, investigate abuse and cheating reports, balance the game, and fix bugs.

2. Cookies and similar technologies

We use a session cookie to keep you logged in and a CSRF token to protect form submissions against cross-site request forgery. Both are strictly necessary for the Game to function and are not optional. If we add analytics or advertising cookies in the future, those will be off by default and subject to your consent where required by law, and this policy will be updated before they are switched on.

3. Stripe as our payment processor

Purchases of gems are processed by Stripe, Inc. Stripe collects and processes your payment details (card number, billing address, and similar) directly under its own privacy policy and PCI-compliant systems; we do not receive or store this information. The only payment-related data that lives in our own database is the checkout session ID, payment intent ID, status, amount in cents, and currency described in Section 1. We use these fields to reconcile purchases, deliver gems, and handle support and dispute requests.

4. How long we keep information

We keep account, session, and gameplay data for as long as your account is active. When you delete your account, what happens to each category of data depends on whether it is exclusively yours or shared with other players and the operation of the Game:

  • Data that belongs only to you — your profile, city, resources, buildings, troops, research, and similar account-owned records — is hard-deleted and not recoverable once account deletion completes.
  • Shared and operational records that other players or the Game itself depend on are not deleted outright, because doing so would erase or corrupt someone else's history or our ability to run and moderate the Game. Instead, we unlink them from you: the record stays, but the link identifying it as yours is removed. This covers things like chat messages you sent (the message text remains in the conversation, no longer attributed to your account), moderation and audit records, alliance activity history, and gameplay telemetry.
  • Payment records are retained only in pseudonymized form — the Stripe identifiers, amount, currency, and date, with no remaining link to you as a person — to meet chargeback-defence and accounting/tax obligations that require us to keep transaction records for a period after they occur.
  • Battle and scout reports held by other players, where they were generated by an engagement involving your city, keep the city's name but are stripped of any link back to your account, so they read as a historical record rather than a way to identify you.

In every case, deletion removes your ability to be identified from that data going forward; it does not selectively erase other people's records or shared history just because your account touched them at some point.

5. Your rights

You have the right to request a copy of your personal data (a data export) and to request deletion of your account, subject to the retention carve-outs in Section 4. Request an export and we generate it and email you a secure download link that expires after 24 hours. Request deletion and, once you confirm your account password and your city's name, we permanently delete your account right away. Contact us at the address below to make either request.

Depending on where you live, you may have additional rights under laws like the EU/UK General Data Protection Regulation or similar regimes, including the right to rectify inaccurate data, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority. Nothing in this policy is intended to limit rights that applicable law gives you and does not allow us to waive.

6. Sharing

We share data with service providers who need it to run the Game on our behalf, principally Stripe for payments and our hosting/infrastructure providers, under their own confidentiality and security obligations. We do not sell your personal data. We may disclose information if required by law or to protect the security or integrity of the Game and its players, including in response to the abuse and cheating conduct described in our Terms of Service and Community Rules.

7. Contact

Questions about this Privacy Policy, or requests to exercise the rights in Section 5, can be sent to [email protected].