Privacy
What we store and why.
Privacy Policy
One account, every game we make. This explains what Zonto collects when you create an account, play, connect with friends, or buy a game — and the controls you have over it.
Last updated 23 September 2026Applies to the web app, the desktop launcher, and every Zonto-connected game
WHAT THIS COVERS
Zonto is the account platform behind Zonto Games — sign-in, your library, achievements, friends, cloud saves, and (for native titles) the desktop launcher. This policy covers everything Zonto itself does with your data. It does not cover what happens inside a specific game once you're playing it — each Zonto-connected title has its own privacy policy, linked from its own store page.
YOUR ACCOUNT
Creating an account needs a gamertag, an email address, and a password — or you can use Continue with Google, which creates an account from your Google name and email without you setting a password at all. We never see your Google password; Google only tells us your name, email, and profile picture claim, via a broker Vercel runs on our behalf (Vercel Connect) rather than an OAuth client we operate ourselves.
We storeWhy
Gamertag, email, password (as a one-way hash — we can't read it back)
Signing you in, showing your identity to friends
Bio, account level (XP)
Your profile, shown to friends and on shared titles
Last-seen time, which game you're currently in
Presence — friends see when you're online
Settings: activity visibility, who can friend/chat you, cloud saves on/off, patch-note emails
Your own toggles, respected everywhere
PLAYING & PROGRESS
For every title in your library, we keep minutes played, percent complete, current chapter, and when you last played — that's what powers your library, your profile stats, and "continue playing." Achievement unlocks are stored per title with a timestamp. If a game supports cloud saves (on by default, toggle it off in Settings), its save data is stored against your account as an opaque blob we don't read or interpret — it's the game's data, held for you.
FRIENDS & CHAT
- Friend requests & friendships — who you've asked, who's accepted, visible to both sides.
- Direct messages — stored so your conversation history is there next time you open it. Not read by anyone at Zonto except to investigate abuse reports.
- Party & lobby invites — a code your game generates for co-op or head-to-head play; Zonto only relays it, and doesn't know what it means inside the game.
- Activity feed — unlocks, session starts, party invites, and similar events, shown to friends per your visibility setting.
THE DESKTOP LAUNCHER
Installing a native title through the Zonto launcher registers your machine as a device: a name, platform, and CPU architecture, plus which titles and versions are installed on it. This is how the launcher knows what to update and lets you manage installs across more than one computer. A device record is tied to your account, not to you personally, and is removed if you sign out and don't sign back in on that machine.
BUYING A GAME
Some titles are paid. Checkout is handled by PayPal — Zonto never sees or stores your card number, bank details, or PayPal password. We keep a record of the order itself: which title, the price and currency, and PayPal's confirmation that it was paid, so we can grant the game to your library and help if something goes wrong with a purchase.
Refunds and payment disputes go through PayPal directly, under PayPal's own buyer protection — reach out to us too and we'll help sort out your library either way.
CONNECTING A GAME
Some titles let you sign in with Zonto from inside the game itself, instead of (or alongside) any account system of their own. When you do, that game's developer receives an authorization token and — only with your account already signed in — the pieces it asks for: typically your gamertag and level, and the ability to report playtime, unlock achievements, and read/write a cloud save on your behalf. It's the same permission model as "Sign in with Google" elsewhere: you're authorizing one specific game, not handing over your whole Zonto account, and you can see and revoke which games have access from your Profile.
What that game then does with the data it receives is covered by that game's own privacy policy, not this one.
COOKIES & SESSIONS
PLAYER SESSION
zonto_session — signs you into the web app and launcher. HTTP-only (invisible to page scripts), lasts 30 days, renewed while you're active. Not an advertising or tracking cookie.
STAFF SESSION
A separate, shorter-lived (12-hour) session for the admin CMS. Only issued to Zonto staff accounts.
Zonto runs no advertising cookies and no third-party analytics or tracking scripts of its own.
WHO WE SHARE WITH
ServiceWhat for
Google (via Vercel Connect)
"Continue with Google" sign-in only
PayPal
Processing a purchase — see "Buying a game" above
Vercel
Hosting the app and the Google sign-in broker
Neon
Hosting the database everything above lives in
Google Cloud Storage
Storing game art and installable build files (not personal data)
Web Push (your browser's own push service)
Delivering chat/invite/friend-request notifications when you've opted in, on that device
A game you connect to
Only what "Connecting a game" above describes, and only for titles you've authorized
We don't sell your data, and we don't share it with anyone outside this list.
CHILDREN
Zonto is not directed at children under 13, and we do not knowingly collect information from them.
YOUR CHOICES
- Settings control who can friend or message you, whether your activity is visible, and whether cloud saves are on.
- Profile lets you see and revoke which games can sign you in.
- Push notifications are opt-in per device and can be switched off from Profile at any time.
- Delete your account from Profile at any time (you'll be asked to type your gamertag to confirm) — this is a genuine, immediate deletion of your account and everything tied to it: your library record, saves, messages, friendships, devices, and achievement history. It can't be undone, and purchased games already granted to your library are removed with it.
CHANGES & CONTACT
We may update this page as Zonto changes; the date at the top always reflects the latest revision. Questions about this policy, or about your data specifically: info@nikorag.co.uk