Privacy Policy

Last updated: August 25, 2025

Zoomst is operated by Zoomst LLC, a Delaware (USA) limited liability company.

1. What We Collect

Accounts

If you sign into Zoomst with Google, we receive your user ID (UID), display name and email address.

Gameplay

When signed out, your game progress is stored locally on your device. When signed in, your gameplay (e.g., play history, guesses, streaks) is synced to your account in Firebase Firestore and associated with your UID.

Analytics (Optional, Off by Default)

If you enable analytics, we use Google Analytics to understand basic usage (page views, feature usage). Analytics is off unless you turn it on in your Privacy Settings.

reCAPTCHA and App Check

We may use Google reCAPTCHA to protect forms and Firebase App Check to prevent abuse of our APIs. These services may collect limited technical information per Google's policies for security purposes.

Notifications

If you opt in to push notifications, we use Firebase Cloud Messaging (FCM) to deliver them. Notification tokens are used with the messaging provider and not stored on our servers beyond the delivery request.

Cookies & Local Storage

We use a secure, HTTP-only cookie to keep you signed in and local storage/IndexedDB to store your preferences and, when signed out, your gameplay. You can clear these in your browser settings.

2. What We Don't Do

  • We don't sell your data.
  • We don't track you across other sites for ads.

3. Your Choices

Game Data: Clear your browser site data to remove locally stored progress. If you are signed in, contact us to delete synced gameplay.

Analytics: Use Privacy Settings to turn analytics on or off.

Notifications: You can enable/disable push notifications in your browser or device settings and inside the app.

4. Third-Party Services

We rely on these providers:

  • Google: Account sign-in.
  • Firebase Firestore: Stores signed-in gameplay.
  • Firebase Cloud Messaging: Delivers optional push notifications.
  • Google Analytics (optional): Usage stats if enabled.
  • Google reCAPTCHA & Firebase App Check: Abuse prevention and security.

These services have their own privacy policies and process data to provide services to Zoomst LLC.

5. Data Retention

Local gameplay remains on your device until you clear it. Signed-in gameplay in Firestore is retained until you request deletion or your account is deleted. Session cookies expire automatically.

6. Security

We use HTTPS and Firebase security features to protect data. Keeping your device and account secure also helps protect your information.

7. Children

Zoomst is intended for users 13 and older. If you are a parent or guardian and believe a child under 13 has used the game, you can clear browser storage on their device and contact us.

8. Changes

If we make significant changes to this policy, we will update the date above and provide a notice in the app.

9. Contact & Data Requests

Questions or requests (including account or gameplay deletion)? Email support@zoomst.xyz.