Last updated: 8 September 2026.
This policy describes how Zahloopah (“we”, “us”) processes personal data when you use the game. It is written to be generally compatible with the EU General Data Protection Regulation (GDPR). The English text is the controlling version.
Who we are
The controller is identified in the Legal imprint. Contact details there are placeholders (XXX) until the operator fills them in.
What we collect
- Account data: email address, display name, optional profile picture, sign-in provider.
- Game data: ranking, matches survived or named as Zahloopah, table preferences you save.
- Technical data: session cookies needed to keep you signed in, and optional preference storage (language, theme, card deck, mute) if you accept cookies.
- Support messages you send from the account page.
Why we process it
To run the game, create and secure your account, confirm an email address you provide, keep a public ranking of non-sensitive scores, remember settings you choose, and answer support requests. Legal bases: contract (playing and the account), consent (optional cookies and preference storage), and legitimate interests (security, abuse prevention).
Cookies
Optional storage is off until you opt in. A strictly necessary record of your cookie choice is kept so we can honour it. Sign-in cookies are set only after you create or open an account. You can reject optional cookies and still play as a guest.
Sharing
We do not sell personal data. Sign-in may involve Google or X as identity providers you choose. Hosting and database providers process data on our instructions. The public ranking shows only the display name, portrait, and scores you keep.
Retention and rights
We keep account data while the account exists. You may access, rectify, or delete your account from the account page (erasure). You may withdraw cookie consent at any time by clearing site data. You may lodge a complaint with your local supervisory authority.
We do not intend to process data of children under 16. Do not create an account if you are below the digital-consent age in your country.