Privacy Policy

ZUZ Arcade (playzuz.com; the previous address arcade.zuz.kr also stays open) · Effective: 2026-11-07 (updated: site address playzuz.com) · 한국어

1. Who we are

• Operator: cooctal (sole proprietorship)
• Representative and privacy officer: 옥창훈
• Business registration number: 121-41-64681
• Mail-order business report number: 제2026-서울마포-2220호
• Address: 서울특별시 마포구 토정로 140, 은하빌라 402호 (상수동), 우편번호 04081 (Republic of Korea)
• Contact: cooctal8@gmail.com

2. What we process and why

You do not need an account to play or to use the ranking. Signing in is optional and is only used to keep your game items. We do not ask for your email or any contact details.

• Ranking entries (to run the public ranking): the name you type (optional, up to 12 characters — please do not use your real name or contact details), score, play time, game ID and the time the entry was saved. They are shown publicly in the ranking.
• Game sessions (to check that scores are real and to count each play once): a random session ID, game ID, a random number used to set up the game, and the times it was issued, used for a score, and counted as a play. For Bricks, also the game progress checked on the server (stage, score, lives, play time and the board state).
• Finished games (to check a game when it ends, before you add it to the ranking): a random ID for that game, game ID, score, play time, the play time checked by our server, and the times it was saved and added to the ranking. It does not include your name. If you are signed in, your account number is also kept with it until the game’s items have been added to your account (normally at once; if that fails, until our daily job retries, at most 2 days).
• Account, only if you sign in with Google (to keep your items and let you use them on other devices): Google’s unique ID for your Google account (“sub”), a random account number, a random 8-digit Plaza number (not shown on screen; while you are signed in, whenever you use a page on this site (opening it, or pressing a key or button), we tell Plaza, our shared space on this site, with this number that you are using the site, and Plaza shows you as online until 5 minutes after the last notice — we do not pass your cookies or account number), and the time the account was made. Google also sends your email address, name and profile picture when you sign in; we check the sign-in and throw them away at once without saving or logging them.
• Sign-in sessions (to keep you signed in): a fingerprint (hash) of your sign-in cookie, your account number, and the times the session was made and last used. While you are signing in, we also keep a fingerprint of a one-time random value for up to 10 minutes.
• Game items, only if you sign in (to give and keep the copper, mercury, nickel and aluminum you get when a game ends, and to stop cheating): for each game that ends while you are signed in, the game’s random ID, game ID, date and time, the play time counted for it, the amount given and your balance after it, and a check code that links each record to the one before it; your balance of each item; and your counted play time per game per day. A copy of each record is kept in our account database. Daily totals per item that do not identify anyone are also kept.
• Shop purchases and collection, only if you sign in (to sell each numbered icon once, keep your collection and show your purchase history): for each icon you buy, the icon, its number, the time and the amount paid, kept with your items; your account number next to that icon number in the shop’s sales table while you own it (and for 2 minutes while you hold a number before buying); in the shop’s sales record, a code made from your account number instead of the number itself; and a copy of each purchase (internal item number, account number, amount, time) in our account database.
• Play counts: one anonymous total per game. It is not linked to you.
• IP address (to limit too many requests): used only for a moment while handling a request. We do not save it in our database.
• Request logs (to find errors): our hosting provider Cloudflare records each request handled by our server code (Workers Logs, turned on by us): the address and method of the request, the time, the result, and connection details Cloudflare adds, which may include your IP address. Requests for images and other files are not included.

Children under 14: signing in is for people aged 14 or older, and the sign-in screen asks you to confirm this. We do not otherwise ask for anyone’s age, and we do not knowingly collect personal information from children under 14. If we learn that a ranking entry or an account belongs to a child under 14, we delete it.

3. How long we keep it

• Ranking entries: until the service ends or you ask us to delete them.
• Game sessions: deleted automatically by a daily job once they are 2 days old (so at most about 3 days).
• Finished games: deleted automatically by the same daily job once they are 2 days old (so at most about 3 days).
• Request logs: deleted automatically by Cloudflare after 3 days.
• Play counts: until the service ends.
• Account, game items and shop purchases: until you delete your account. They are deleted at once when you do (if our storage does not answer at that moment, the daily job finishes it the next day).
• Sign-in sessions: until you sign out, or 30 days after you last used the site while signed in (at most 180 days after signing in); the daily job deletes ended sessions. The one-time sign-in value: deleted when used, otherwise after 10 minutes.
• Daily totals that do not identify anyone: until the service ends.

4. How we delete it

When the period ends or you ask, we delete the data from the database so it cannot be shown again. Database backups we make before maintenance are kept on the operator’s computer and its backup storage; when you ask us to delete your data, we delete it from the live database and from those backup files together. The live database’s recovery points (Cloudflare D1 Time Travel) disappear after 7 days, and recovery points of the item storage (Cloudflare Durable Objects) after up to 30 days.

When you delete your account, we delete your account number, your Plaza number, the link to your Google account, your sessions, your item records and balances, your purchase records, and their copies. Icon numbers you bought stay in the shop marked “owner deleted” with no account number, and are not sold again (so each number is sold only once); the sales record then keeps only the code, which no longer links to anyone. If we had made a backup file of the account database before that, we also remove your rows from it; until we have done so, we keep only your deleted account number (a random number no longer linked to your Google account) so that we can find those rows.

5. Service providers and transfer abroad

• Cloudflare, Inc. (USA; data centers worldwide) hosts the site, the databases (including the account database and the item storage, Durable Objects) and the request logs. What: everything in section 2. When and how: sent over the network each time you use the site. Kept: as in section 3. Contact: privacyquestions@cloudflare.com.
• This is needed to provide the site. If you do not want it, please do not use the site; there is no other effect.
• Google sign-in (Google LLC, USA), only if you use it: when you open the sign-in screen, your browser loads Google’s sign-in script from accounts.google.com, and Google handles your Google account under its own privacy policy. When you sign in, Google sends us a signed sign-in token; we keep only the unique ID (“sub”) from it. Games and the other pages do not load Google’s script.
• Google ads are currently off. Before we turn them on, we will add Google LLC (USA) for ads here and update this page.
• We do not provide your information to third parties. Ranking names and scores are public: anyone can see them in the ranking.

6. Security

• All traffic is encrypted (HTTPS); requests for pages and the API made over plain HTTP are sent to HTTPS.
• Only the operator can access the database and logs, through a protected Cloudflare account.
• We do not store IP addresses, emails or passwords. Inputs are checked and requests are rate-limited.
• Sign-in cookies cannot be read by page scripts, and we store only their fingerprints. Item amounts are decided only by our server; item records can only be added, not changed, and each one is linked to the one before it so changes can be found.

7. On your device and cookies

• Your best score for each game, and two display notes (whether you opened the help page, and the collection score you last saw), are kept in your browser (local storage) and are not sent to us. You can clear them in your browser settings.
• This site sets only two cookies of its own, and only when you sign in. Both are needed for sign-in and are not used for ads or tracking: __Host-s keeps you signed in (until you sign out, up to 30 days after last use) and __Host-n is used only while you sign in (10 minutes). If you do not sign in, the site sets no cookies of its own. You can refuse or delete cookies in your browser settings (for example, Chrome or Edge: Settings → Privacy → Cookies; Safari: Settings → Privacy). The games still work; only sign-in needs them.

8. Ads

• The result screen has one small ad space. Ads are not shown on the start page or during a game.
• Today the space shows only a banner for our own service ZUZ. It uses no cookies or tracking.
• When Google ads (AdSense) are turned on: third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google’s use of advertising cookies lets it and its partners serve ads to you based on those visits. You can opt out of personalized advertising in Google Ads Settings. See also how Google uses information from sites that use its services. Users in the European Economic Area, the United Kingdom and Switzerland will be asked for consent before cookies are used for ads and can change their choice at any time. To avoid showing ads too often, your browser tab then also keeps the time of the last ad request (removed when you close the tab).

9. Your rights

• You can ask to see, correct, delete or stop the processing of your ranking entries. Email us the game, score, name and approximate date and time so we can find the entry. Someone you authorize can ask for you.
• If you signed in, you can see your materials, icons and purchase history in My items on the start page, and delete your account yourself on the Account page (playzuz.com/account/): tap Delete account, then confirm with Delete. Your account, items and icons are deleted together and cannot be restored. Ranking entries are not linked to accounts, so they stay unless you ask us as above. You can also ask us by email.
• We will answer within 10 days.
• For help with privacy complaints in Korea: Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972).

10. Changes

If this policy changes, we will update this page and the effective date.