Controller and contact
The controller responsible for personal data used to operate ZERAVO is ZERAVO, at The operator address shown at checkout and on the payment receipt. Privacy questions and rights requests can be sent to [email protected].
When Stripe, Google or another provider processes data for its own purposes, that provider may also act as an independent controller under its own privacy terms.
Data we collect
Account and identity data
When you use Google sign-in, we may receive your Google account identifier, email address, display name and profile image. We do not receive your Google password.
Gameplay and economy data
We record game-session identifiers, game versions, selected run modes, event traces used for score validation, scores, accuracy, combos, XP awards, Coin debits, refunds, balances, personal bests and leaderboard entries.
Purchase and transaction data
We record package, price, currency, order identifier, payment status, provider session reference, granted Coins, bonus Coins, refund or dispute status and consent records. Card details are entered into the payment provider’s checkout. ZERAVO does not need to store your full card number or security code.
Technical and security data
We may process IP address, browser and device information, timestamps, request logs, session-cookie identifiers, rate-limit events, crash information, validation failures and security signals used to keep the service reliable and prevent abuse.
Communications
If you contact support, we process your email address, message, attachments and any order or game-session references you provide.
Why we use data and our legal bases
- Contract: to create and maintain your account, provide games, manage Coins and XP, validate results, fulfil purchases and provide support.
- Legal obligation: to maintain tax, accounting, payment, consumer-protection and compliance records where required.
- Legitimate interests: to secure the service, prevent fraud and automation, improve performance, investigate defects, enforce rules and understand aggregate product use, provided your rights do not override those interests.
- Consent: where required for optional analytics, marketing communications or non-essential cookies. You can withdraw consent without affecting earlier lawful processing.
How data is used
We use personal data to authenticate users, display balances, start and verify game sessions, calculate XP, maintain leaderboards, process purchases, issue technical refunds, answer support requests, investigate suspected abuse and protect the platform.
We may use aggregated or de-identified information to understand game balance, error rates, device performance and product demand. We do not attempt to re-identify information that has been properly de-identified.
Automated validation
Game results are checked automatically using game-specific rules. The validator may compare timing, target availability, event sequence, session version and score calculations. A rejected run can affect XP or leaderboard placement, but it does not create a legal or similarly significant decision about you.
If you believe a legitimate run was rejected because of a defect, contact support with the session identifier. We may review the technical record and correct the result or refund the session cost where appropriate.
Who receives data
- Google: for supported account sign-in.
- Stripe and financial partners: for checkout, payment confirmation, fraud prevention, refunds and disputes.
- Hosting, database, logging, email and security providers: where needed to operate and protect ZERAVO.
- Professional advisers and authorities: where reasonably necessary for legal advice, audits, claims, fraud prevention or compliance with lawful requests.
- Business successors: if ZERAVO or relevant assets are reorganised, financed, merged or sold, subject to appropriate confidentiality and legal safeguards.
We do not sell personal data for money. We do not provide advertisers with your private gameplay or purchase history for their independent marketing use.
Cookies and local storage
ZERAVO uses strictly necessary cookies for sign-in, session security, OAuth state, request protection and account continuity. These are required to provide the service you request.
If optional analytics, marketing or personalisation cookies are introduced, they will not be set where consent is required until you make a choice. Optional consent can be withdrawn through the cookie settings made available on the site.
Retention
We keep information only for as long as reasonably needed for the purposes described above:
- account and balance records: while the account is active and for up to 30 days after deletion, subject to backups and legal obligations;
- game results, XP and Coin ledgers: while needed to maintain balances, prevent duplicate processing, resolve disputes and preserve leaderboard integrity;
- security and request logs: normally up to 12 months, unless a longer period is needed for an active investigation;
- support records: normally 24 months after the matter is closed;
- payment, refund and accounting records: for the period required by applicable tax, accounting and consumer law, which may be several years;
- OAuth state and short-lived security tokens: only for the time required to complete or secure the relevant request.
Data may be kept longer where necessary to establish, exercise or defend legal claims, comply with law or investigate fraud.
International transfers
Service providers may process data outside your country. Where data protected by European data-protection law is transferred outside the European Economic Area, we use an approved transfer mechanism or another lawful safeguard where required.
Security
We use measures such as secure cookies, access controls, signed sessions, rate limits, payment-webhook verification, transaction ledgers, encryption in transit and restricted administrative access. No online system is completely risk-free, so we cannot promise absolute security.
If you believe your account or personal data has been compromised, contact [email protected] promptly.
Your rights
Depending on where you live, you may have rights to access, correct, erase, restrict or object to processing, receive portable data, withdraw consent and complain to a data-protection authority.
We may ask for information reasonably necessary to verify your identity before acting on a request. Some data cannot be erased immediately where it is required to maintain transaction records, prevent fraud, comply with law or establish legal claims.
Send requests to [email protected] with the subject “Privacy Request”.
Account deletion
You can request deletion through support. Deletion removes or anonymises account information that is no longer required. It does not require us to delete payment, fraud, tax, ledger or legal records that must be retained.
Deleting an account ends access to unused Coins, XP, digital items and game history unless mandatory law requires another outcome. Confirm this consequence before submitting a deletion request.
Children
ZERAVO is intended for users aged 18 and over. We do not knowingly create accounts for children. If you believe a minor has created an account, contact us so we can investigate and take appropriate action.
Policy changes
We may update this Policy when the service, providers or legal requirements change. The updated date appears at the top. Material changes will be communicated through the site or account email where required.
Contact and complaints
Email [email protected] for privacy questions. You may also complain to the competent data-protection authority in your country if you believe your rights have not been respected.