Privacy policy / Datenschutz

Privacy policy of Zoomandos

Zoomandos is a tactics game for the website, Android, iOS and Windows (Steam). This page says what the game stores about you, why, who else gets it, and how you can have it deleted. The person responsible is named in the imprint, where you also find the contact address.

In short: no advertising, no selling of data, and no usage statistics in the apps. On the website we measure how it is used (see “Usage statistics”).

What we store

Nickname: chosen by you, or a random one like “Otter4821”. Other players see it in games, lobbies and on the leaderboard (the leaderboard only if you allow it).
E-mail address and password (only if you make an account): for sign-in, notifications you asked for and password reset. The password is stored as a hash, never in clear text.
Steam ID (only if you sign in with Steam in the Windows app): to recognise your account. We never see your Steam password.
Game data: your moves, results, turns played, trophies, campaign progress, friends and blocks.
Chat messages in the lobby and in running games, and maps you create or publish.
Sign-in session: a random token (stored as a hash) so you stay signed in: 30 days on the website, 180 days in the apps after last use.
Push token (only if you switch notifications on): so we can tell you that it is your turn or that you were invited.
IP address: short-lived counters against abuse (they expire within hours). The web server keeps no access log files.

We do not collect your location, contacts, photos, microphone, camera or an advertising ID, and the apps contain no crash or analytics service.

Usage statistics (website only)

On the website (www.zoomandos.com) and in the browser version of the game (play.zoomandos.com) we use the analytics tool OpenPanel (server: analytics.lupineo.com) to see which pages are visited and how often the game is used. It records page views and events such as “account created”, “signed in”, “game created” or “game joined”, the number of turns played, and technical details of the visit (browser, device type, country, referring site). Invitation codes and similar secrets in addresses are masked before anything is sent. If you have an account, the visits are linked to your account number and nickname; guests stay anonymous. The apps (Android, iOS, Windows) do not send any of this.

Who else receives data

Google (Firebase Cloud Messaging) delivers push notifications: it receives the device token and the notification text while a notification is sent.
Apple, Google (app stores) and Valve (Steam) process your downloads (the game is free) and, for Steam, the sign-in ticket the game checks with Steam.
The OpenPanel analytics server receives the usage statistics described above (website only).
Nothing else leaves our server for a third party.

How long we keep it

Old games are purged after 180 days. Handled player reports are deleted after 180 days.
Live chat in a running game is kept for a few minutes, only until it is delivered. Lobby chat goes with the game.
Account data stays until you delete your account.

Your rights

You can delete your account yourself in the app (My Area, Settings). You may ask us for the data we hold about you, to correct it, or to restrict its use, and you may complain to a data protection authority. Write to the contact address in the imprint.

Children

Zoomandos is not made for children: it has chat between players and online accounts. Do not use it if you are below the age your country sets for online services without a parent’s consent.

Reporting and blocking

You can report and block players. Reports keep the reported player’s last chat lines as evidence. Offenders can be banned.

Changes

If this page changes in a way that matters to you, the date below changes.

Version: 2026-10-16