Who we are
Zominate is a game made by Sour Apple Games ("we", "us"). This policy covers the Zominate game on every platform (the web test build and the iOS and Android apps when they launch) and the website at zominate.com. Questions about it go to support@zominate.com.
What we collect
Your account
When you first play, the game creates an anonymous guest account for you through Supabase, our account and database provider. It is identified by a random player ID. We do not ask for your real name, phone number or address to play.
Sign in with Apple or Google
You can save your guest account to Sign in with Apple or to your Google account in Settings > Account, so you keep your base if you lose your phone and can play it on another device. It is optional. When you do, Supabase receives from Apple or Google an account identifier and the email address that service shares (with Apple you can choose a private relay address instead of your own), and keeps them with your account. For Sign in with Apple in the iPhone app, our server also keeps a token from Apple so it can end the link with your Apple ID when you delete your account. We use these only to sign you in, never to send you marketing.
Your display name
The name you pick in the game is public. Other players see it on your profile, in raids, in defense logs and in chat.
Your age range and the Terms you agreed to
Before you name yourself or chat, the game asks your age: in the iPhone and Android apps through Apple's or Google's age range feature when it is available (you, or a parent for a child's account, choose whether to share it), otherwise by asking the year you were born. We keep only the age range it falls in (under 13, 13 to 15, 16 to 17, or 18 and over) and whether it came from Apple, Google or you, never your birth date or birth year. We use it only to set up the game for your age, such as which chats you can use, and to meet the law. We also keep which version of our Terms you agreed to, and when.
Gameplay data
Your base and its buildings, resources, horde, upgrades and timers, your level, Skulls and achievements, the raids you make and receive (including their results and replays), and your Outpost membership. We need this to run the game, match you with opponents and check that results are real.
Chat, private messages and reports
The game has three chats: Global (every player), your Outpost, and private messages between two players. We store the messages you send so the players they are for can read them, and deliver them as they are sent. Global messages can be read by every player for 48 hours. Private messages are stored so you and the other player can read your conversation, for up to 90 days in the game. We do not read private messages, except a message someone reported and a few messages around it, when we review that report.
If you report a message or a player, we store the report, the reason you picked and the message it is about, so we can review it. We also store the list of players you have blocked and whether you turned chat off in Settings.
Purchases
If you buy Catalysts, the payment is handled entirely by Apple or Google. We never see your card details. We receive and keep a record of the purchase (the product, a transaction ID and the receipt the store gives us) so we can deliver what you bought and handle refunds.
If you enter a creator's code, we keep it with your account and show it as a tag on your profile. For 12 months your purchases count toward that creator's share of the revenue. Creators are paid from monthly totals and never see your name, player ID or what you bought.
Usage and crash data
To see whether the game is fun and fair, and to fix what breaks, the game sends our own server a little usage and crash data. We collect it ourselves: there is no third-party analytics or crash reporting service in the game. It is linked to your player ID and contains:
- When you start and stop playing, and how long each session lasts.
- Which days you played, how far you got in the tutorial and your Safehouse level, which the server already knows from your base.
- When the game runs into an error: the kind of error and where in the game's code it happened, with the game's build, your platform (iPhone, Android or browser) and your device model. Before an error report leaves your device, and again on our server, numbers, IDs, names in quotes, email addresses and links are removed from it.
The server also adds up the resources players earn and spend each day by where they came from and went to (collecting, raids, upgrades and so on). Those totals do not name any player. We never send chat messages, your display name or anything you type in usage or crash data.
Technical data
Like any online service, our servers receive your IP address and basic device or browser information when the game connects. We use it to keep the service secure, apply rate limits and fix problems, and keep it in server logs for a limited time.
The mobile waitlist
If you join the waitlist on this website, we collect your email address, the platform you chose (iOS, Android or both), which form you used and when you signed up. We use it only to tell you about the beta and the launch. Every email we send has an unsubscribe link.
How we use it
- To run the game: save your progress, match raids, show Outposts, chat and private messages.
- To keep it fair: the server checks every raid and every purchase.
- To improve the game: usage data shows how many players come back, how long sessions last, where the tutorial loses players and whether the economy is balanced; crash data shows what to fix first.
- To keep the community safe: review reports and act on abuse, cheating or spam.
- To support you when you contact us.
- To send launch and beta news, only if you joined the waitlist.
What we never do
- We do not sell or rent your personal data to anyone.
- We do not track you across other companies' apps or websites, and we do not use advertising identifiers for tracking. If that ever changes, the game will ask your permission first.
- We do not use third-party analytics, crash reporting or advertising tools in the game.
- We do not use third-party advertising trackers on this website.
Who we share it with
Only the service providers that run the game for us, under contracts that limit what they can do with it:
- Supabase (accounts and database)
- Railway (game server hosting)
- Vercel (website and web build hosting)
- Apple and Google (app distribution, in-app purchases and, if you choose it, sign-in; they also tell the game your age range when you or a parent share it)
We may also share information if the law requires it, or to protect players and the game from fraud or harm. Your display name, level, Skulls, Outpost and chat messages are visible to other players by design.
How long we keep it
- Account and gameplay data: for as long as your account exists.
- Your age range and Terms agreement: for as long as your account exists. The age range also stays on your device after you delete your account, so the game keeps the same settings there.
- Purchase records: as long as we need them for refunds, accounting and the law.
- Chat: Global and Outpost messages for 30 days, private messages for 90 days, then they are deleted. Your messages go sooner when you delete your account, and a private conversation also when the other player deletes theirs. Otherwise a reported message is kept until we have reviewed the report.
- Reports: as long as we need them for moderation, without a link to a deleted account.
- Usage data (sessions, the days you played, Safehouse progress): 180 days, then deleted.
- Crash reports: 90 days, then deleted.
- Daily economy totals, which name no player: up to 400 days.
- Server logs: for a limited time, then deleted.
- Waitlist emails: until launch news is no longer useful or you unsubscribe.
Deleting your account
In the game, go to Settings > Delete account and confirm twice (you need to be online: nothing is deleted until our server confirms it). This removes your profile, display name, base, progress, age range and Terms agreement, join requests, block list, the Global and Outpost messages you sent, private conversations (for the other player too), usage data and crash reports from our servers, removes you from your Outpost, and deletes your login, including any Apple or Google sign-in linked to it (for Sign in with Apple we also ask Apple to end the link). It can not be undone.
A few things are kept without the link to your account, for the reason given: raids you were in stay in the other player's log and replays with your name replaced, Outpost war records stay for the other Outpost, system lines that named you (such as "joined the Outpost") stay with your name replaced, reports stay for moderation, and purchase records stay as store and tax records.
Can not reach the game? Email support@zominate.com with your player ID (shown in Settings) and we will delete the account for you. You can also ask us there for a copy of your data or to correct it.
Children and teens
Zominate is not directed at children under 13. The game asks every player's age before they name themselves or chat. If it learns a player is under 13, chat, private messages, typing a name and creator codes are turned off for them, and they pick a name the game makes up; we collect from them only what the game needs to run (the player ID, gameplay data and usage and crash data) and use it for nothing else. Players from 13 to 17 can chat only with their own Outpost, can not send or receive private messages and can not enter creator codes. Purchases follow the parental controls of the App Store and Google Play.
If you are a parent and want your child's account or information deleted, email support@zominate.com with the player ID shown in Settings and we will delete it.
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your data, or to object to how we use it. Email support@zominate.com and we will help. You can also complain to your local data protection authority.
Security
Data is sent over encrypted connections, and database access rules make sure each player can only change their own data. No system is perfect, but we work to keep yours safe.
Changes
If this policy changes, we will update the date at the top of this page. For important changes we will also tell players in the game.
Contact
Email support@zominate.com. For help with the game, see the Support page.