Privacy Policy

Last Updated: October 28, 2025

Introduction

WWZ ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Information We Collect

Information You Provide

  • Account Information: When you sign up through Auth0, we receive your name, email address, and profile picture from your chosen provider (Discord, Twitter/X, or Google).
  • Profile Customization: Any changes you make to your name, email, or uploaded avatar.
  • Social Verifications: If you verify Discord or Twitter accounts, we store your username and user ID from those platforms.
  • Blockchain Data: If you connect a Solana wallet, we store your wallet address and verification timestamp. We also store metadata about NFTs you import as avatars (mint address, collection address, collection name, NFT name, image URL).
  • Game Data: Games you create, join, and your gameplay actions within those games.

Automatically Collected Information

  • Usage Data: Information about how you interact with our service (pages visited, features used).
  • Device Information: IP address, browser type, device type.
  • Cookies: We use session cookies to keep you logged in, and optional analytics/advertising cookies if you consent.
  • Advertising Data: If you consent to advertising cookies, we collect conversion data (sign-ups, subscriptions) and may track your activity across websites for remarketing purposes.
  • Push Notification Data: If you enable push notifications, we store your browser's push subscription endpoint, encryption keys (for secure message delivery), and user agent. This data is only collected if you explicitly enable push notifications in your profile settings.

How We Use Your Information

We use your information to:

  • Provide and maintain the service
  • Authenticate your account and keep it secure
  • Display your profile to other players in games
  • Process subscription payments (via Stripe)
  • Send you push notifications about game events (only if you enable them)
  • Measure advertising campaign effectiveness and conversions
  • Show you relevant ads on other websites through remarketing (only if you consent to advertising cookies)
  • Improve and optimize our service
  • Prevent fraud and abuse

How We Share Your Information

We may share your information with:

  • Other Players: Your username, avatar, and gameplay actions are visible to other players in games you join.
  • Service Providers: Auth0 (authentication), Stripe (payments), Heroku (hosting), Redis (caching), Google Analytics (usage analytics), Google Ads (advertising and conversion tracking).
  • Advertising Networks: If you consent to advertising cookies, Google may share your data with its advertising network partners to show you relevant ads across websites. We do not directly control how Google's advertising partners use this data.
  • Push Notification Services: If you enable push notifications, your browser communicates directly with push services like Firebase Cloud Messaging (for Chrome/Edge) or Apple Push Notification Service (for Safari). We send encrypted notification content through these services, but we do not control their privacy practices. See their respective privacy policies for details.
  • Legal Requirements: If required by law or to protect our rights.

We do not sell your personal information to third parties.

Your Privacy Rights

All Users

  • Access: You can view your profile data at any time in your profile settings.
  • Correction: You can update your name, email, and avatar in your profile settings.
  • Deletion: You can delete your account at any time from your profile settings. This will permanently remove your data from our systems.
  • Export: Contact us at privacy@wwz.gg to request a copy of your data.

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information we collect, use, and disclose
  • Right to request deletion of your personal information
  • Right to opt-out of the sale of personal information (we don't sell your data)
  • Right to non-discrimination for exercising your privacy rights

To exercise these rights, email privacy@wwz.gg or delete your account directly from your profile settings.

European Users (GDPR)

If you're in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate data
  • Right to Erasure: Request deletion of your data
  • Right to Restriction: Limit how we use your data
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to certain processing activities
  • Right to Withdraw Consent: Withdraw consent at any time

Legal Basis for Processing: We process your data based on your consent when you create an account, and for our legitimate interests in providing the service.

To exercise these rights, contact us at privacy@wwz.gg. You also have the right to lodge a complaint with your local data protection authority.

Data Retention

We retain your information for as long as your account is active. When you delete your account:

  • Your profile data is immediately deleted from our database
  • Anonymized game participation history may be retained for game integrity and historical records
  • Backups may retain your data for up to 30 days before being overwritten

Data Security

We implement reasonable security measures to protect your information:

  • HTTPS encryption for all data transmission
  • Secure authentication through Auth0
  • Payment processing through Stripe (we never store credit card information)
  • Regular security updates and monitoring

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Children's Privacy

WWZ is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at privacy@wwz.gg.

International Data Transfers

Your information may be transferred to and stored on servers in the United States. By using our service, you consent to this transfer. We ensure appropriate safeguards are in place for international transfers.

Push Notifications

We offer optional browser-based push notifications to notify you when games start or end. Push notifications are completely opt-in and disabled by default.

How Push Notifications Work

  • Opt-in Only: Push notifications are disabled by default. You must explicitly enable them in your profile settings.
  • Browser Permission: Your browser will ask for permission before enabling notifications.
  • What We Store: When you enable push notifications, we store your browser's push subscription endpoint (a unique URL provided by your browser), encryption keys for secure message delivery, and your browser's user agent string.
  • What We Send: We only send notifications about games you created or joined (when they start or end, including your performance summary).
  • Third-Party Services: Notifications are delivered through your browser's push service (Firebase Cloud Messaging for Chrome/Edge, Apple Push Notification Service for Safari, Mozilla Push Service for Firefox). These services have their own privacy policies.
  • Control: You can disable push notifications anytime from your profile settings or through your browser's notification settings.

Cookies and Tracking

We use cookies for:

  • Essential Cookies: Required for authentication and keeping you logged in (cannot be disabled)
  • Analytics Cookies: Google Analytics to understand how you use our service (optional - you can decline via cookie banner)
  • Advertising Cookies: Google Ads conversion tracking and remarketing to measure advertising effectiveness and show you relevant ads (optional - you can decline via cookie banner)

You can manage your cookie preferences using the banner that appears on your first visit. You can change your preferences by clearing your browser's local storage and refreshing the page.

Analytics Disclosure

When you consent to analytics cookies, we use Google Analytics to collect information about how visitors use our website. This helps us improve the user experience.

What Google Analytics collects:

  • Pages you visit and features you use
  • How long you spend on each page
  • Your browser type and device information
  • Your general location (country/city level, not precise location)
  • How you arrived at our site (referral source)

What Google Analytics does NOT collect:

  • Your name or email address (we do not send personally identifiable information to Google)
  • Your passwords or payment information
  • The content of your games or private messages

Google Analytics uses cookies that remain on your device for up to 2 years. Google may use this data for its own purposes as described in their Privacy Policy and How Google uses data when you use our partners' sites or apps.

Opting out: You can decline analytics cookies using our cookie consent banner. You can also opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.

Advertising Disclosure

When you consent to advertising cookies, we use Google Ads to measure advertising campaign effectiveness and enable remarketing.

What Google Ads collects:

  • Pages you visit and actions you take (conversions like sign-ups and subscriptions)
  • Your interactions with our ads on other websites
  • Device and browser information
  • General demographic and interest categories
  • Cookie identifiers that track you across websites

Cross-site tracking and remarketing: Google Ads uses cookies that track your activity across multiple websites to show you personalized ads based on your interests and previous visits to our site. This means you may see WWZ ads on other websites after visiting wwz.gg. This data is shared with Google's advertising network and their advertising partners.

What Google Ads does NOT collect:

  • Your passwords or payment information
  • The content of your games or private messages
  • Your precise location (only city/region level data)

Google Ads cookies can remain on your device for up to 540 days. Google uses this data for its own purposes as described in their Privacy Policy and How Google uses data when you use our partners' sites or apps.

Opting out of advertising cookies:

  • Decline advertising cookies using our cookie consent banner when you first visit
  • Visit Google Ads Settings to disable personalized ads
  • Visit Digital Advertising Alliance Opt-Out to opt out of interest-based advertising
  • Use browser extensions like Privacy Badger, uBlock Origin, or Ghostery to block tracking
  • Enable "Do Not Track" in your browser settings (though not all advertisers honor this)

Third-Party Services

We use the following third-party services:

These services have their own privacy policies. We encourage you to review them.

Important Note About Blockchain Data

We do not custody your cryptocurrency or NFTs. When you connect a Solana wallet:

  • You maintain full control of your wallet and assets
  • We only read publicly available blockchain data to verify NFT ownership
  • We cannot access, transfer, or control your digital assets
  • Your wallet address is publicly visible on the Solana blockchain regardless of WWZ
  • NFT metadata (images, names) is already public on the blockchain

We use the Helius API to query this public blockchain data on your behalf for verification purposes only.

Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes by email or through a notice on our service. Your continued use after changes means you accept the updated policy.

Contact Us

Questions about this Privacy Policy or how we handle your data?

Email: privacy@wwz.gg

Summary: We collect basic account info to run the service. We don't sell your data. You can view, update, or delete your data anytime. We use trusted third parties (Auth0, Stripe) who have their own privacy policies. California and European users have additional rights detailed above.